$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb98f25c-534d-3304-9aa1-dda54ea839c3.roa File: fb98f25c-534d-3304-9aa1-dda54ea839c3.roa (raw, json) Hash identifier: 1SSyA1jRzkwLmX7VIZHl29bgEx5B9EHO1buwFTeKgaA= Subject key identifier: 6E:0E:9C:A8:20:C3:11:55:65:CE:F0:82:72:A5:DF:81:AD:4B:EB:D3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA199969009C86C66DC2A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb98f25c-534d-3304-9aa1-dda54ea839c3.roa Signing time: Tue 07 Apr 2026 14:30:17 +0000 ROA not before: Tue 07 Apr 2026 14:30:17 +0000 ROA not after: Mon 06 Jul 2026 14:30:17 +0000 asID: 36628 IP address blocks: 2001:500:120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:99:96:90:09:c8:6c:66:dc:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:17 2026 GMT Not After : Jul 6 14:30:17 2026 GMT Subject: CN=16e4b928-bc90-4911-afd8-bb6f7e0435a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ec:21:f0:4e:27:41:c9:29:80:74:f3:95:3e: 2e:56:ab:de:40:c4:71:2b:c0:b2:5e:08:4a:95:3c: 73:49:58:b4:21:3b:88:01:0c:1d:43:a1:76:83:92: 26:2c:55:e8:fb:80:53:c2:ee:8a:f2:05:1b:0d:9b: 74:6a:f4:ef:4a:2c:55:eb:98:51:d8:ae:43:23:ce: 58:bf:aa:7d:9b:ac:0e:99:e9:de:e1:87:81:d2:62: 39:fa:3c:0e:e4:24:c1:49:97:c2:be:63:50:a7:ff: 55:c5:15:d2:a2:db:38:e3:15:22:ed:10:81:e8:8a: b8:1e:40:8b:e7:1f:87:49:8b:74:8a:7a:b0:a8:5a: e9:3d:9e:94:f9:7d:52:b6:2e:cf:8b:35:a3:6e:9a: f0:16:db:42:f7:5f:8e:8e:8d:e3:ea:5f:43:2a:e0: 5a:9c:32:38:58:c1:12:4d:01:05:c0:0f:57:25:36: 3b:48:79:c0:80:12:f3:aa:a2:e2:6b:75:a9:fa:df: 5d:81:dd:6b:ed:ee:89:ca:ab:9c:2c:32:34:89:00: 91:1a:f9:b6:6e:34:bd:75:04:39:65:6d:6c:55:98: b5:10:75:44:ad:c9:2d:1f:05:9c:00:b2:35:e0:b7: 10:b5:72:9f:3d:04:e0:45:33:c8:c3:ba:bc:17:c1: a6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0E:9C:A8:20:C3:11:55:65:CE:F0:82:72:A5:DF:81:AD:4B:EB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fb98f25c-534d-3304-9aa1-dda54ea839c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:120::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:0c:71:ac:2a:b2:c7:7f:45:d6:7f:e3:f6:ee:44:37:1a:d9: 75:c2:36:8e:96:28:b8:3d:b1:48:0e:22:a1:48:a2:cd:8b:fc: cd:1d:ac:0a:7a:7a:df:fc:e5:e6:13:bd:6e:a1:48:d8:86:e7: d6:cb:25:03:c1:79:3a:62:c4:61:42:3a:91:ac:ab:57:e4:d7: 07:d0:3c:0b:42:df:c2:9a:61:ee:de:8c:1f:74:ff:be:f4:18: fa:36:80:ec:32:52:d7:66:a2:19:d3:ca:68:ff:0b:46:ef:71: 04:74:6e:30:7f:a3:e3:92:cd:8d:0c:c0:b7:8f:48:dd:92:dd: aa:01:b7:d1:4d:7e:df:26:b8:ad:9c:32:0b:e6:6e:66:d0:86: 45:a4:15:c8:38:9e:07:7c:e8:69:6d:5b:0e:22:70:fb:7c:84: a7:27:f8:3a:60:64:c5:fa:d8:bb:e0:5c:a1:56:fa:3b:2e:12: 80:fd:13:0e:f3:5d:16:1e:09:cb:06:65:76:92:99:b8:93:86: 88:b9:f6:9e:7b:8e:9d:da:96:71:d8:4b:95:22:cf:cc:dc:c7: cb:2b:c9:86:4d:f6:25:ee:66:cd:ad:c0:e6:27:52:da:f0:24: f9:d8:55:98:03:2c:d3:4b:ca:19:5c:7e:10:1a:f4:d7:81:c8: a1:7a:b3:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toZmWkAnIbGbcKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxN1oXDTI2MDcwNjE0MzAxN1owLzEtMCsGA1UEAxMk MTZlNGI5MjgtYmM5MC00OTExLWFmZDgtYmI2ZjdlMDQzNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uwh8E4nQckpgHTzlT4uVqveQMRxK8CyXghK lTxzSVi0ITuIAQwdQ6F2g5ImLFXo+4BTwu6K8gUbDZt0avTvSixV65hR2K5DI85Y v6p9m6wOmene4YeB0mI5+jwO5CTBSZfCvmNQp/9VxRXSots44xUi7RCB6Iq4HkCL 5x+HSYt0inqwqFrpPZ6U+X1Sti7PizWjbprwFttC91+Ojo3j6l9DKuBanDI4WMES TQEFwA9XJTY7SHnAgBLzqqLia3Wp+t9dgd1r7e6JyqucLDI0iQCRGvm2bjS9dQQ5 ZW1sVZi1EHVErcktHwWcALI14LcQtXKfPQTgRTPIw7q8F8GmNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG4OnKggwxFVZc7wgnKl34GtS+vTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmI5OGYyNWMtNTM0ZC0z MzA0LTlhYTEtZGRhNTRlYTgzOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIwMcawqssd/RdZ/4/buRDca2XXCNo6WKLg9sUgOIqFIos2L/M0d rAp6et/85eYTvW6hSNiG59bLJQPBeTpixGFCOpGsq1fk1wfQPAtC38KaYe7ejB90 /770GPo2gOwyUtdmohnTymj/C0bvcQR0bjB/o+OSzY0MwLePSN2S3aoBt9FNft8m uK2cMgvmbmbQhkWkFcg4ngd86GltWw4icPt8hKcn+DpgZMX62LvgXKFW+jsuEoD9 Ew7zXRYeCcsGZXaSmbiThoi59p57jp3alnHYS5Uiz8zcx8sryYZN9iXuZs2twOYn UtrwJPnYVZgDLNNLyhlcfhAa9NeByKF6s9A= -----END CERTIFICATE-----Generated at Fri Apr 17 14:52:26 2026 by rpki-client