$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/672a6aee-8c37-39b5-bb76-d310c8f8036e.roa File: 672a6aee-8c37-39b5-bb76-d310c8f8036e.roa (raw, json) Hash identifier: MIr4ZWv+9Ym45IRe0W6iAIhodl1uLX0YSk1kBcORnmY= Subject key identifier: 1F:29:D9:37:AB:19:54:76:FB:DB:79:F3:03:78:49:1E:7D:21:46:76 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D97556AF2BCECDC46C488747E Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/672a6aee-8c37-39b5-bb76-d310c8f8036e.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 396599 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:6a:f2:bc:ec:dc:46:c4:88:74:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=fd609af2-fd36-4e55-abc0-38e56d58b2e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:48:52:3b:2e:10:f3:bb:2b:0c:59:22:3a:a1: 8f:d4:a1:8e:1c:85:9e:d0:9d:4f:72:2b:f8:16:fc: 5b:ea:26:9b:e6:03:15:34:f8:13:01:e2:b2:34:19: 0a:db:97:cc:5e:b7:2a:4e:e0:00:56:dc:60:c3:78: 59:92:52:ac:20:4c:d8:7f:cd:03:c3:6c:59:e8:77: d0:01:31:2a:ae:95:16:56:c3:1e:16:13:b0:75:0f: 6d:0a:8c:22:94:79:2e:c1:4f:a3:ae:3a:15:74:5f: c8:63:1f:4b:36:3d:0b:79:8f:cf:4f:82:95:7a:fc: 8d:e3:de:c6:98:69:1c:64:cb:6c:a0:a2:06:96:21: f5:51:31:b7:8d:8b:79:3a:60:d0:8a:a7:d8:e5:37: 2e:1f:49:b3:08:2f:e5:20:90:dd:f6:5b:e2:99:24: 42:7f:1a:e3:15:35:24:ef:cf:bb:34:d5:17:a6:37: d4:75:6c:f6:40:3b:e2:cc:d1:72:ec:82:0c:07:13: e7:26:cf:11:b1:7c:95:68:0e:a8:70:fd:bc:67:84: f3:00:56:a9:43:25:0b:4f:0b:17:6a:0a:71:81:a9: 66:53:90:f9:13:d3:29:38:9b:6d:1c:3e:61:7e:f9: 85:a4:24:17:84:ca:19:70:f1:a0:8b:57:7a:57:dc: 05:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:29:D9:37:AB:19:54:76:FB:DB:79:F3:03:78:49:1E:7D:21:46:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/672a6aee-8c37-39b5-bb76-d310c8f8036e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:39:b4:59:f7:e3:b4:28:61:78:43:1d:69:4e:f4:38:57:f2: 1f:35:e7:c6:32:a0:66:6a:59:51:ce:1a:9a:c0:13:ba:e0:65: ac:e1:11:22:5c:d0:13:d3:1d:40:7c:6a:64:22:86:75:6f:40: a3:12:11:88:29:7b:9f:00:a5:36:bb:cf:84:5e:f3:8c:b8:3f: ad:69:53:e2:fd:a0:77:33:31:4c:62:fa:03:c9:a3:ca:42:ee: 28:5a:c7:40:fe:53:e4:a7:d2:f3:38:26:a3:1a:8c:65:78:20: 4b:3c:19:b1:ca:e4:78:2f:12:fe:48:36:16:a6:e4:db:53:a1: 4b:68:9a:84:40:13:49:ca:25:47:63:64:83:f7:a0:ef:5a:e0: d1:85:0d:3e:98:62:35:f4:ea:29:d1:76:e2:13:de:4b:94:cb: 31:a4:7f:74:4d:8e:fd:de:6f:f1:ad:02:52:2f:a8:24:b4:46: 67:2f:b4:87:4a:94:18:f7:0d:c6:45:58:73:c2:cc:4a:0f:1b: 6c:4a:b5:c5:8f:3f:24:84:90:38:0e:ea:10:7f:4b:e5:3d:c9: 51:d8:eb:9c:e2:da:c5:99:4b:4f:63:c5:fd:e3:87:ab:b6:e1: 71:0c:29:d6:2a:35:f7:64:dc:98:0b:53:6a:23:41:08:08:5f: 1a:d2:5c:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2XVWryvOzcRsSIdH4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk ZmQ2MDlhZjItZmQzNi00ZTU1LWFiYzAtMzhlNTZkNThiMmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EhSOy4Q87srDFkiOqGP1KGOHIWe0J1Pciv4 Fvxb6iab5gMVNPgTAeKyNBkK25fMXrcqTuAAVtxgw3hZklKsIEzYf80Dw2xZ6HfQ ATEqrpUWVsMeFhOwdQ9tCowilHkuwU+jrjoVdF/IYx9LNj0LeY/PT4KVevyN497G mGkcZMtsoKIGliH1UTG3jYt5OmDQiqfY5TcuH0mzCC/lIJDd9lvimSRCfxrjFTUk 78+7NNUXpjfUdWz2QDvizNFy7IIMBxPnJs8RsXyVaA6ocP28Z4TzAFapQyULTwsX agpxgalmU5D5E9MpOJttHD5hfvmFpCQXhMoZcPGgi1d6V9wFtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB8p2TerGVR2+9t58wN4SR59IUZ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjcyYTZhZWUtOGMzNy0z OWI1LWJiNzYtZDMxMGM4ZjgwMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALo5tFn347QoYXhDHWlO9DhX8h8158YyoGZqWVHOGprAE7rgZazh ESJc0BPTHUB8amQihnVvQKMSEYgpe58ApTa7z4Re84y4P61pU+L9oHczMUxi+gPJ o8pC7ihax0D+U+Sn0vM4JqMajGV4IEs8GbHK5HgvEv5INham5NtToUtomoRAE0nK JUdjZIP3oO9a4NGFDT6YYjX06inRduIT3kuUyzGkf3RNjv3eb/GtAlIvqCS0Rmcv tIdKlBj3DcZFWHPCzEoPG2xKtcWPPySEkDgO6hB/S+U9yVHY65zi2sWZS09jxf3j h6u24XEMKdYqNfdk3JgLU2ojQQgIXxrSXHo= -----END CERTIFICATE-----Generated at Wed May 13 06:53:47 2026 by rpki-client