$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f963e97-8c55-32ea-abc4-f5ecb94b32b1.roa File: 7f963e97-8c55-32ea-abc4-f5ecb94b32b1.roa (raw, json) Hash identifier: YCJ/Fwf3Oht5H6NcLMV9fNQZNXoIiOKgwp+x2puUj5g= Subject key identifier: D4:66:DB:BC:AD:E2:E7:4D:ED:33:FF:21:78:9E:94:5C:F6:69:0D:D8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D97556B7567DB9B87063B9D40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f963e97-8c55-32ea-abc4-f5ecb94b32b1.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 396581 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:6b:75:67:db:9b:87:06:3b:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=de5f5b3d-eeea-419e-bab9-0bb57a8d48e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:b5:aa:e1:39:2a:fe:09:78:65:87:f7:2c: 65:de:72:d5:65:a9:5a:6f:b0:23:5e:23:49:2e:12: ef:c2:51:b3:be:a7:e0:27:73:4a:12:28:d8:bf:79: 61:ab:4d:46:67:ff:a5:82:ca:28:20:f8:0a:de:2f: 12:d0:3b:68:2b:50:28:e3:b4:eb:fc:68:b2:c9:d1: 81:c0:f7:04:dd:40:fa:1e:81:a5:c6:ba:a2:89:0d: 67:b6:4f:dc:0b:f0:e2:a7:11:78:04:77:f8:f5:e2: 01:4b:24:4d:42:a4:51:25:a6:29:57:21:a5:ce:4c: b0:4f:92:5d:05:49:cc:f2:19:26:f9:c2:e2:88:87: ff:c3:b9:03:3d:6a:c2:84:2e:55:1c:8c:1b:d0:0f: 86:2f:91:68:60:f5:9e:47:13:91:95:58:28:5b:b0: 4b:49:81:82:ba:f1:6c:8e:38:94:55:49:be:c6:dd: 6f:e2:b5:2d:68:49:a1:4f:cd:d4:c0:8e:36:ef:51: 6a:39:9c:b7:cf:77:6f:d7:6c:a7:c1:b8:85:87:0e: 07:40:b6:41:90:2e:72:fd:a7:7b:55:93:85:2b:d5: 9b:50:c6:85:3b:2a:51:d9:91:08:6d:02:d4:da:e6: 39:ea:c4:57:44:c2:68:79:1a:81:b1:d8:90:fa:9a: 24:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:66:DB:BC:AD:E2:E7:4D:ED:33:FF:21:78:9E:94:5C:F6:69:0D:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f963e97-8c55-32ea-abc4-f5ecb94b32b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:73:e5:6e:38:c9:75:51:1e:5e:15:f2:fb:13:f5:88:c6:6c: 5d:d7:3c:cf:72:26:be:a2:bf:70:73:60:01:07:b2:07:13:c0: e8:49:13:08:91:e3:3c:89:bf:c3:2a:87:9d:0d:a3:0b:6d:32: d0:2c:ad:3d:c5:38:89:f3:07:1e:48:f0:e7:bd:6b:96:ed:cd: c2:45:93:b8:23:21:18:35:a9:3d:7d:ee:bf:d6:c4:bd:cf:e0: 00:79:06:0f:36:8b:77:db:d1:71:97:08:14:c0:11:b9:0e:b0: 7c:65:87:bf:c9:9d:79:68:87:fc:31:76:ad:03:54:47:c9:b9: 1c:c3:0f:94:2b:f0:5c:7e:ec:b3:6e:e5:e5:e9:75:93:df:14: b9:a5:4b:79:5c:a8:29:56:42:f3:db:f0:b1:7c:8a:1c:8f:bb: 31:7a:af:da:45:f6:bd:c2:8a:9f:93:0c:b0:19:cb:63:c6:6e: 6b:a5:71:03:e7:8c:05:05:03:cd:92:fa:73:7b:cd:9c:c9:55: 66:75:d1:8f:fb:92:25:ad:12:21:1e:0d:03:19:17:7b:2b:10: dd:cc:f3:a1:7a:7c:f0:ad:11:38:85:47:d0:38:0f:5c:20:80: a7:26:7e:14:61:bc:03:23:8f:fb:5c:00:6a:74:24:4a:3f:1d: b7:89:bb:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2XVWt1Z9ubhwY7nUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk ZGU1ZjViM2QtZWVlYS00MTllLWJhYjktMGJiNTdhOGQ0OGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FG1quE5Kv4JeGWH9yxl3nLVZalab7AjXiNJ LhLvwlGzvqfgJ3NKEijYv3lhq01GZ/+lgsooIPgK3i8S0DtoK1Ao47Tr/GiyydGB wPcE3UD6HoGlxrqiiQ1ntk/cC/DipxF4BHf49eIBSyRNQqRRJaYpVyGlzkywT5Jd BUnM8hkm+cLiiIf/w7kDPWrChC5VHIwb0A+GL5FoYPWeRxORlVgoW7BLSYGCuvFs jjiUVUm+xt1v4rUtaEmhT83UwI4271FqOZy3z3dv12ynwbiFhw4HQLZBkC5y/ad7 VZOFK9WbUMaFOypR2ZEIbQLU2uY56sRXRMJoeRqBsdiQ+pokUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNRm27yt4udN7TP/IXielFz2aQ3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2Y5NjNlOTctOGM1NS0z MmVhLWFiYzQtZjVlY2I5NGIzMmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ5z5W44yXVRHl4V8vsT9YjGbF3XPM9yJr6iv3BzYAEHsgcTwOhJ EwiR4zyJv8Mqh50NowttMtAsrT3FOInzBx5I8Oe9a5btzcJFk7gjIRg1qT197r/W xL3P4AB5Bg82i3fb0XGXCBTAEbkOsHxlh7/JnXloh/wxdq0DVEfJuRzDD5Qr8Fx+ 7LNu5eXpdZPfFLmlS3lcqClWQvPb8LF8ihyPuzF6r9pF9r3Cip+TDLAZy2PGbmul cQPnjAUFA82S+nN7zZzJVWZ10Y/7kiWtEiEeDQMZF3srEN3M86F6fPCtETiFR9A4 D1wggKcmfhRhvAMjj/tcAGp0JEo/HbeJu8M= -----END CERTIFICATE-----Generated at Wed May 13 10:37:27 2026 by rpki-client