$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f45e0d4f-5e41-392d-bad6-01f7b42459d7.roa File: f45e0d4f-5e41-392d-bad6-01f7b42459d7.roa (raw, json) Hash identifier: kEvpLcMSKBZF3YnZ/NWI4Cv0gPhp2oBiG9uekGdrPhg= Subject key identifier: 88:AB:20:37:CC:36:E2:1B:AB:EC:B7:42:8A:F2:95:5E:60:4C:2C:F5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA1A056BE5AD5116F2CD142 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f45e0d4f-5e41-392d-bad6-01f7b42459d7.roa Signing time: Tue 07 Apr 2026 14:30:21 +0000 ROA not before: Tue 07 Apr 2026 14:30:21 +0000 ROA not after: Mon 06 Jul 2026 14:30:21 +0000 asID: 32651 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:a0:56:be:5a:d5:11:6f:2c:d1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:21 2026 GMT Not After : Jul 6 14:30:21 2026 GMT Subject: CN=23b670dd-ee53-4090-a1b5-198ffdc61b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:96:22:36:0b:61:3a:89:41:e7:41:d5:fa:bf: 81:e7:45:97:5c:c8:d1:0b:35:06:b1:91:8c:08:af: 18:a7:bf:2b:e4:aa:d2:2f:33:5b:79:e2:13:ac:fc: 88:a7:cb:5a:02:83:2f:03:7b:a8:22:27:fd:b0:32: 96:06:10:69:4d:6c:b0:74:73:bf:7b:a7:85:ee:27: 33:38:78:f3:76:30:34:62:b9:d7:db:d7:bd:23:20: 8c:00:85:05:71:fa:12:f6:11:7a:86:c4:14:d6:fc: 88:43:13:69:64:31:77:6f:52:27:cc:3d:68:fe:f2: 19:9b:88:f2:e3:b9:30:69:82:07:9e:53:ff:a6:b3: 46:5d:3f:3c:b8:96:86:03:60:e5:a8:5a:4f:70:c2: cb:d1:da:9d:48:57:30:dd:3e:1b:ac:71:1f:db:2b: a1:17:e3:66:4b:cc:36:70:7e:ce:25:9b:cd:dc:01: 60:b9:57:bd:94:fd:ed:04:76:4c:97:3a:22:7c:9d: 4f:e7:47:3c:24:0f:47:b4:37:c3:41:ac:21:e7:06: 32:e3:48:d5:c8:c6:6a:b3:e3:f2:b1:15:de:8c:da: 17:54:6a:9c:98:d8:c9:ad:c6:2e:f7:72:a0:8c:21: 47:49:d2:3d:9a:0f:85:5b:39:2b:af:3e:1a:93:41: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:AB:20:37:CC:36:E2:1B:AB:EC:B7:42:8A:F2:95:5E:60:4C:2C:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f45e0d4f-5e41-392d-bad6-01f7b42459d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9b:21:ff:51:ff:eb:7d:ab:bd:f6:ef:a2:20:12:5f:35:8a: 68:3c:52:92:20:3a:2d:fb:c9:51:1f:e9:90:d4:f7:6b:63:5d: 7a:cb:6b:4e:6a:fe:2b:3f:6d:a0:e7:8f:55:bf:f0:90:07:3a: d0:90:10:e0:de:b1:00:02:c3:32:af:03:5e:0f:35:0f:31:1d: 04:63:02:e1:35:fb:07:36:d8:67:39:1e:c6:29:8a:b5:f0:28: 01:8e:14:b3:64:d8:04:9d:3d:18:e8:04:8b:fc:2f:98:b5:d7: 21:45:e8:d9:96:47:bc:b2:8d:77:a0:00:bc:5c:82:ce:30:05: e2:a4:b0:d8:eb:a5:20:45:43:a7:f1:7c:43:43:0c:86:24:23: cf:db:4b:e4:8f:27:7f:10:51:00:c6:11:b9:e7:e2:11:47:c7: df:96:d4:4b:74:14:96:d1:f4:2f:89:db:5b:a8:46:21:45:d1: 46:61:ef:cf:5f:b6:e3:ed:de:ad:bb:22:75:4f:a0:04:89:41: 0f:f8:4d:de:ed:da:36:58:4d:20:18:10:70:2d:ae:43:e6:36: 44:26:e9:1b:68:6b:9c:cc:39:fb:9f:ac:2a:f0:66:a9:7c:b9: 6a:61:0c:d8:28:f4:17:6e:02:0c:8a:ab:26:26:14:12:84:e6: 61:76:11:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toaBWvlrVEW8s0UIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAyMVoXDTI2MDcwNjE0MzAyMVowLzEtMCsGA1UEAxMk MjNiNjcwZGQtZWU1My00MDkwLWExYjUtMTk4ZmZkYzYxYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5JYiNgthOolB50HV+r+B50WXXMjRCzUGsZGM CK8Yp78r5KrSLzNbeeITrPyIp8taAoMvA3uoIif9sDKWBhBpTWywdHO/e6eF7icz OHjzdjA0YrnX29e9IyCMAIUFcfoS9hF6hsQU1vyIQxNpZDF3b1InzD1o/vIZm4jy 47kwaYIHnlP/prNGXT88uJaGA2DlqFpPcMLL0dqdSFcw3T4brHEf2yuhF+NmS8w2 cH7OJZvN3AFguVe9lP3tBHZMlzoifJ1P50c8JA9HtDfDQawh5wYy40jVyMZqs+Py sRXejNoXVGqcmNjJrcYu93KgjCFHSdI9mg+FWzkrrz4ak0Gy5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIirIDfMNuIbq+y3QorylV5gTCz1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjQ1ZTBkNGYtNWU0MS0z OTJkLWJhZDYtMDFmN2I0MjQ1OWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAibIf9R/+t9q73276IgEl81img8UpIgOi37yVEf6ZDU92tjXXrL a05q/is/baDnj1W/8JAHOtCQEODesQACwzKvA14PNQ8xHQRjAuE1+wc22Gc5HsYp irXwKAGOFLNk2ASdPRjoBIv8L5i11yFF6NmWR7yyjXegALxcgs4wBeKksNjrpSBF Q6fxfENDDIYkI8/bS+SPJ38QUQDGEbnn4hFHx9+W1Et0FJbR9C+J21uoRiFF0UZh 789ftuPt3q27InVPoASJQQ/4Td7t2jZYTSAYEHAtrkPmNkQm6Rtoa5zMOfufrCrw Zql8uWphDNgo9BduAgyKqyYmFBKE5mF2Ecs= -----END CERTIFICATE-----Generated at Fri Apr 17 13:45:29 2026 by rpki-client