$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa File: 3f1b0596-2674-340b-844e-d508a34d5971.roa (raw, json) Hash identifier: zHBZjfPiN+ZdowkcPyFHk/yeBTDG3rj4ai+vVjpulCw= Subject key identifier: B1:9B:BA:BC:31:40:61:F9:49:DD:3F:7D:A9:A6:07:8E:53:57:62:51 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D59EAAE8F98350A9CA9562560 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 396608 IP address blocks: 2001:500:123::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:ae:8f:98:35:0a:9c:a9:56:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=221c6534-c2b9-41fa-a318-aa6ed66fc52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:da:77:7c:9d:c9:b8:a6:d2:a0:bb:7f:0c:1d: 78:7b:3d:04:0b:77:41:26:55:62:67:53:0d:73:12: 42:c1:21:49:ad:59:80:d2:e3:42:16:84:70:aa:5b: ad:0e:fc:d2:5b:fa:e2:eb:dd:11:ab:43:47:53:27: 8d:17:bb:db:28:51:c4:c9:de:18:d0:f4:6e:e0:18: 36:b5:75:6a:26:e7:48:e4:8d:8f:68:f3:e9:f8:5f: 0e:21:e9:84:70:36:19:1a:04:ba:22:a1:3d:90:d3: 64:26:53:f6:96:b0:48:d1:49:55:c1:7a:64:4f:8f: 5b:ef:c6:08:e8:34:00:87:40:fb:12:b4:f1:2a:0e: 79:1f:54:61:4a:e4:ed:2c:62:22:7c:de:d7:5f:14: ca:45:71:5c:5e:10:a9:4a:49:4d:de:eb:15:65:d1: a5:49:d4:c4:eb:a5:f3:22:f6:ae:6f:39:2a:c6:74: f5:c2:26:07:a6:65:80:8e:99:a2:b2:37:09:e4:89: 91:e9:ca:3e:3c:81:ad:09:58:f3:ec:54:d7:4b:e3: cc:f7:f5:c5:b7:ff:ac:37:51:92:5f:12:65:29:57: 8a:36:a6:8d:47:b1:06:d4:42:29:11:13:24:d0:a6: 96:a0:a4:ed:ec:d3:2f:21:c4:88:f1:20:7a:ca:34: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9B:BA:BC:31:40:61:F9:49:DD:3F:7D:A9:A6:07:8E:53:57:62:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f1b0596-2674-340b-844e-d508a34d5971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:123::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:4f:8d:db:68:81:a8:61:b8:9c:8f:b8:31:14:4a:d8:b3:c1: 67:7a:32:4c:13:b7:e0:6b:a5:70:a6:f7:e8:ee:00:3e:ad:b4: 09:b7:0a:4c:65:1e:db:75:31:84:a5:40:03:51:f9:af:14:f2: 77:ee:ef:b2:65:df:a5:fe:88:27:fe:d4:ec:4b:b3:92:b7:84: e0:10:f1:8a:a8:d6:a2:37:6c:35:c1:1e:a2:78:4b:9d:87:f7: 19:17:3e:00:95:7f:72:93:4c:ff:57:24:db:59:d6:27:eb:b6: 51:c4:bf:0a:84:8e:a5:dc:07:17:25:73:19:e4:8e:bc:ad:16: 14:e5:08:99:6f:64:71:62:4e:ff:25:a0:99:f0:4c:50:ef:76: af:25:04:30:4e:96:e2:24:b0:2c:3f:cf:ca:6f:d1:f7:98:80: 73:5c:9f:cf:33:be:be:59:b1:f4:c9:01:d3:5b:02:9b:55:e0: 0c:8f:0a:ca:84:e5:ee:19:ca:56:ed:e5:56:be:16:8a:04:44: ee:cd:d9:c3:fd:bf:36:4a:08:4f:ee:a4:53:da:51:c1:32:91: 4c:90:30:7b:ff:00:13:31:4c:c3:69:21:5f:c0:dd:3e:35:59: 7e:40:e0:dd:52:c1:7e:33:ca:43:3e:f4:7c:68:a1:03:16:60: 45:44:5b:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6q6PmDUKnKlWJWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MjIxYzY1MzQtYzJiOS00MWZhLWEzMTgtYWE2ZWQ2NmZjNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdp3fJ3JuKbSoLt/DB14ez0EC3dBJlViZ1MN cxJCwSFJrVmA0uNCFoRwqlutDvzSW/ri690Rq0NHUyeNF7vbKFHEyd4Y0PRu4Bg2 tXVqJudI5I2PaPPp+F8OIemEcDYZGgS6IqE9kNNkJlP2lrBI0UlVwXpkT49b78YI 6DQAh0D7ErTxKg55H1RhSuTtLGIifN7XXxTKRXFcXhCpSklN3usVZdGlSdTE66Xz IvaubzkqxnT1wiYHpmWAjpmisjcJ5ImR6co+PIGtCVjz7FTXS+PM9/XFt/+sN1GS XxJlKVeKNqaNR7EG1EIpERMk0KaWoKTt7NMvIcSI8SB6yjTbuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLGburwxQGH5Sd0/fammB45TV2JRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YxYjA1OTYtMjY3NC0z NDBiLTg0NGUtZDUwOGEzNGQ1OTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALBPjdtogahhuJyPuDEUStizwWd6MkwTt+BrpXCm9+juAD6ttAm3 CkxlHtt1MYSlQANR+a8U8nfu77Jl36X+iCf+1OxLs5K3hOAQ8Yqo1qI3bDXBHqJ4 S52H9xkXPgCVf3KTTP9XJNtZ1ifrtlHEvwqEjqXcBxclcxnkjrytFhTlCJlvZHFi Tv8loJnwTFDvdq8lBDBOluIksCw/z8pv0feYgHNcn88zvr5ZsfTJAdNbAptV4AyP CsqE5e4Zylbt5Va+FooERO7N2cP9vzZKCE/upFPaUcEykUyQMHv/ABMxTMNpIV/A 3T41WX5A4N1SwX4zykM+9HxooQMWYEVEW0Q= -----END CERTIFICATE-----Generated at Wed May 13 14:22:01 2026 by rpki-client