$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbef6e9b-09f0-389b-bcbe-f6a8908b8bad.roa File: fbef6e9b-09f0-389b-bcbe-f6a8908b8bad.roa (raw, json) Hash identifier: Q1kABfJbhX3eQtXNK6wpIS+v2TTraW0nxM7/F9TQN7g= Subject key identifier: F5:00:36:9E:85:A6:C7:66:F7:B2:73:D1:BA:59:9A:13:DE:A0:AE:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5E1A4272B1D703F73E786560 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbef6e9b-09f0-389b-bcbe-f6a8908b8bad.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 21313 IP address blocks: 2001:500:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:42:72:b1:d7:03:f7:3e:78:65:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=749d4cba-aeea-451a-8232-26ed0669eb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:de:1e:40:82:26:6c:88:fa:68:27:db:39: a6:95:c9:39:6e:65:48:9e:80:c2:1c:cc:50:6b:5e: 6a:aa:77:7b:14:f9:35:91:40:2e:1b:7d:1c:64:2d: a0:1e:ec:58:b2:c8:ba:9d:a0:ab:8c:02:aa:75:36: 7f:93:28:3e:4f:76:f7:16:3a:0b:21:cd:7a:dc:93: 72:59:86:53:ad:9b:82:25:61:ec:68:a4:01:29:52: e7:b6:a7:05:db:57:4e:1f:63:9a:e6:63:5d:dc:6b: 4f:e7:0a:cb:c5:8b:48:f4:27:fb:cc:99:96:37:a5: db:9a:da:d6:25:1b:12:84:0c:cb:5d:eb:e5:fb:0a: a4:83:07:e0:d8:80:6a:75:f4:d2:5b:de:5a:c2:aa: 3c:1a:a2:16:45:e7:3e:24:be:de:3e:e1:26:c6:02: 05:23:dd:d2:36:b2:05:85:75:cb:33:95:7c:af:3a: 0e:af:0f:04:5e:38:97:e0:45:27:b3:67:a2:e3:c7: 17:d9:a6:cc:fc:c4:ba:f0:ce:9b:b7:35:da:ea:96: 0b:aa:20:c7:40:ef:94:43:25:25:b5:e9:bf:b6:83: da:8f:0f:1e:74:6b:84:4e:7f:99:92:ef:5b:04:e4: cc:b7:70:91:19:9f:2e:ad:a6:f6:25:93:e1:2b:d5: f1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:00:36:9E:85:A6:C7:66:F7:B2:73:D1:BA:59:9A:13:DE:A0:AE:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/fbef6e9b-09f0-389b-bcbe-f6a8908b8bad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:83:7c:55:5d:59:ec:a4:de:2d:71:c8:d6:87:9d:64:38:ec: 7d:54:27:ec:b2:18:b9:cf:63:5c:88:a4:91:8b:6a:14:85:52: 53:47:30:6e:53:82:ef:2a:ca:6e:c1:01:f7:08:47:75:f9:dc: f0:be:89:5c:89:4d:70:bb:a9:00:7b:08:e0:88:86:e2:49:cc: 3a:3f:ec:20:4b:26:f1:9d:06:20:1a:ea:78:27:e7:a6:93:00: 9b:5b:b4:1c:57:7f:c7:71:41:87:b3:71:c3:2d:33:f9:4c:51: 4c:fb:49:f1:78:b0:34:fe:c6:20:50:21:29:1e:d2:74:4c:6f: ba:52:1e:de:52:da:fe:9c:35:21:84:38:ed:3f:1c:5c:62:92: df:d2:cc:c8:9f:8e:19:f7:db:08:6c:38:fb:e9:90:18:04:be: c9:83:46:a5:0a:fd:de:5d:79:55:73:66:73:d0:2c:e0:53:62: 76:a5:d2:49:29:b2:ce:96:b6:cc:50:99:5c:56:fb:1b:33:79: c9:fe:dd:64:6b:07:a0:4d:b8:e2:7b:3d:57:43:02:4d:67:26: 28:22:f8:bd:fd:78:f7:0a:af:c3:43:1c:b2:6b:90:3c:4c:79: 78:e2:9e:12:11:0b:f8:79:47:0b:a8:4d:b7:1e:9c:99:51:0e: 51:ae:4c:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1eGkJysdcD9z54ZWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NzQ5ZDRjYmEtYWVlYS00NTFhLTgyMzItMjZlZDA2NjllYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjjeHkCCJmyI+mgn2zmmlck5bmVInoDCHMxQ a15qqnd7FPk1kUAuG30cZC2gHuxYssi6naCrjAKqdTZ/kyg+T3b3FjoLIc163JNy WYZTrZuCJWHsaKQBKVLntqcF21dOH2Oa5mNd3GtP5wrLxYtI9Cf7zJmWN6XbmtrW JRsShAzLXevl+wqkgwfg2IBqdfTSW95awqo8GqIWRec+JL7ePuEmxgIFI93SNrIF hXXLM5V8rzoOrw8EXjiX4EUns2ei48cX2abM/MS68M6btzXa6pYLqiDHQO+UQyUl tem/toPajw8edGuETn+Zku9bBOTMt3CRGZ8urab2JZPhK9XxmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPUANp6Fpsdm97Jz0bpZmhPeoK6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmJlZjZlOWItMDlmMC0z ODliLWJjYmUtZjZhODkwOGI4YmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2DfFVdWeyk3i1xyNaHnWQ47H1UJ+yyGLnPY1yIpJGLahSFUlNH MG5Tgu8qym7BAfcIR3X53PC+iVyJTXC7qQB7COCIhuJJzDo/7CBLJvGdBiAa6ngn 56aTAJtbtBxXf8dxQYezccMtM/lMUUz7SfF4sDT+xiBQISke0nRMb7pSHt5S2v6c NSGEOO0/HFxikt/SzMifjhn32whsOPvpkBgEvsmDRqUK/d5deVVzZnPQLOBTYnal 0kkpss6WtsxQmVxW+xszecn+3WRrB6BNuOJ7PVdDAk1nJigi+L39ePcKr8NDHLJr kDxMeXjinhIRC/h5RwuoTbcenJlRDlGuTDE= -----END CERTIFICATE-----Generated at Fri Apr 17 19:57:39 2026 by rpki-client