$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f861dd2b-eada-36aa-9da3-1340d4cdf7e4.roa File: f861dd2b-eada-36aa-9da3-1340d4cdf7e4.roa (raw, json) Hash identifier: icXta6qTLozmf+yWCz/niPcxUOqUCd2jnoqf6L7d9ks= Subject key identifier: B6:73:87:BC:B7:3C:92:43:F3:C7:28:9E:D5:B5:8C:75:35:A3:6A:1C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BDFC18226D01F4E1FE780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f861dd2b-eada-36aa-9da3-1340d4cdf7e4.roa Signing time: Thu 09 Apr 2026 14:07:56 +0000 ROA not before: Thu 09 Apr 2026 14:07:56 +0000 ROA not after: Wed 08 Jul 2026 14:07:56 +0000 asID: 396540 IP address blocks: 2001:500:133::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:df:c1:82:26:d0:1f:4e:1f:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:56 2026 GMT Not After : Jul 8 14:07:56 2026 GMT Subject: CN=d0f03481-aa62-4760-ad05-c5986f859142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:3e:f6:03:85:77:38:67:79:02:66:e7:2a: 7b:67:f5:fc:e6:43:23:cc:91:be:30:3e:21:c9:f7: 81:c1:70:66:ad:22:2e:0e:28:94:9c:3c:84:2a:6a: 45:f2:59:85:d1:d8:06:eb:b1:67:5f:4d:0b:d3:f8: 0a:31:c8:0d:45:cb:d5:c6:1f:bb:b9:7e:d2:ed:84: 05:39:0f:c0:64:c5:87:41:1f:b4:99:76:53:2b:78: 57:bb:fd:1f:a1:02:b7:ac:97:01:92:ed:28:f4:c6: f1:75:95:14:66:f1:7e:a1:b5:a9:b3:b4:52:7b:74: e0:87:22:e9:94:fc:12:7a:05:b8:ba:73:b3:42:c0: 51:a1:8b:d6:a4:5b:3f:ba:95:6f:2d:8e:5b:d2:7a: b5:b3:f9:1b:16:58:96:48:4f:c8:fa:d4:cf:26:b9: cc:65:7a:2c:08:01:ad:e1:1d:bb:a8:8d:d3:8e:c0: 3f:9f:0c:21:2c:55:70:9b:94:cd:0a:54:ac:5a:73: fa:43:49:f9:8a:74:45:24:e0:1e:18:43:17:47:37: a3:63:f3:b2:73:eb:53:16:31:95:d0:16:1e:cc:7e: 66:f1:7a:8e:03:d2:5c:3c:a2:dd:b2:23:fa:1c:2a: 26:8f:62:79:ba:5b:98:5d:a8:ac:99:30:92:d3:af: 9a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:73:87:BC:B7:3C:92:43:F3:C7:28:9E:D5:B5:8C:75:35:A3:6A:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f861dd2b-eada-36aa-9da3-1340d4cdf7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:e9:d2:83:7e:79:59:23:55:08:ed:9a:b5:7e:fe:cc:89:86: 40:c0:85:f0:fe:68:09:1b:eb:5a:94:92:31:a6:21:fe:63:62: 25:df:c7:60:38:4a:60:d4:05:fb:31:ef:f7:51:4e:7c:aa:ab: 3a:96:e6:c0:a0:74:21:4d:1c:04:a6:e3:ba:df:ac:b7:b4:79: e6:2e:7c:4b:8f:ed:90:62:d9:cf:9f:03:b1:e1:b2:a8:b7:87: 31:f3:8b:6e:e8:fe:26:4c:4b:f0:54:4a:3c:6b:91:f7:46:5f: 3b:fc:1f:49:b0:25:46:37:1c:1c:de:94:cd:e9:10:e5:e9:ba: d0:a3:fa:b6:15:e6:14:41:5a:32:31:79:ce:b0:77:68:64:e8: 45:5c:d2:3f:5a:dd:8a:3a:63:0e:32:da:07:80:9f:5d:30:bf: 37:d8:66:28:35:bc:8c:1e:19:85:c9:a2:9e:d5:05:d0:ce:b9: 2e:ae:2e:66:1b:d9:d4:ad:aa:4d:97:5c:8a:4a:6d:e2:0b:c7: d9:54:3a:b4:e1:bf:c4:ab:3f:b6:0f:3d:09:ac:c4:99:bd:12: 48:5e:98:6a:eb:f4:5d:8b:00:52:f8:34:20:0a:d5:46:0a:af: 7c:8a:a7:ae:23:5b:c7:9f:e3:1a:4c:7c:37:97:06:51:89:3c: 3b:6e:4c:16 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1zK9/BgibQH04f54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1NloXDTI2MDcwODE0MDc1NlowLzEtMCsGA1UEAxMk ZDBmMDM0ODEtYWE2Mi00NzYwLWFkMDUtYzU5ODZmODU5MTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUg+9gOFdzhneQJm5yp7Z/X85kMjzJG+MD4h yfeBwXBmrSIuDiiUnDyEKmpF8lmF0dgG67FnX00L0/gKMcgNRcvVxh+7uX7S7YQF OQ/AZMWHQR+0mXZTK3hXu/0foQK3rJcBku0o9MbxdZUUZvF+obWps7RSe3TghyLp lPwSegW4unOzQsBRoYvWpFs/upVvLY5b0nq1s/kbFliWSE/I+tTPJrnMZXosCAGt 4R27qI3TjsA/nwwhLFVwm5TNClSsWnP6Q0n5inRFJOAeGEMXRzejY/Oyc+tTFjGV 0BYezH5m8XqOA9JcPKLdsiP6HComj2J5uluYXaismTCS06+a9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLZzh7y3PJJD88contW1jHU1o2ocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjg2MWRkMmItZWFkYS0z NmFhLTlkYTMtMTM0MGQ0Y2RmN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEPp0oN+eVkjVQjtmrV+/syJhkDAhfD+aAkb61qUkjGmIf5jYiXf x2A4SmDUBfsx7/dRTnyqqzqW5sCgdCFNHASm47rfrLe0eeYufEuP7ZBi2c+fA7Hh sqi3hzHzi27o/iZMS/BUSjxrkfdGXzv8H0mwJUY3HBzelM3pEOXputCj+rYV5hRB WjIxec6wd2hk6EVc0j9a3Yo6Yw4y2geAn10wvzfYZig1vIweGYXJop7VBdDOuS6u LmYb2dStqk2XXIpKbeILx9lUOrThv8SrP7YPPQmsxJm9EkhemGrr9F2LAFL4NCAK 1UYKr3yKp64jW8ef4xpMfDeXBlGJPDtuTBY= -----END CERTIFICATE-----Generated at Fri Apr 17 01:18:36 2026 by rpki-client