$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ac1551e-9607-3cfb-96a4-3e15998a9170.roa File: 8ac1551e-9607-3cfb-96a4-3e15998a9170.roa (raw, json) Hash identifier: BK2t3bMiQ2A+VIFBtvwzCjN1OMkFXAAbfgnGPDzNPQ8= Subject key identifier: 4A:84:06:46:38:C5:BF:A8:8C:69:DE:E8:28:57:EC:F9:78:16:3F:47 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D97557034454443EA9DEB7180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ac1551e-9607-3cfb-96a4-3e15998a9170.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 396589 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:70:34:45:44:43:ea:9d:eb:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=29b1d92a-c36e-4683-9e70-c5016ab184fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:41:42:93:33:6c:ee:0a:3d:9c:0d:f9:03:f5: 8f:4e:b2:41:e8:c0:64:da:e7:11:13:c4:ed:16:6a: 69:08:ed:8f:47:d8:f8:29:c9:05:a2:b7:53:d7:64: 5c:a9:b2:e5:41:af:f2:a2:5f:52:14:ee:5a:7a:65: ad:5b:8d:b1:2f:27:0d:59:f8:24:3c:7a:e4:aa:96: 72:d8:4b:ef:fc:0c:08:32:d7:37:ac:48:74:79:39: 6a:75:12:16:89:44:e0:05:a6:26:b1:17:c8:3f:16: 2c:4c:80:08:dc:55:19:7f:08:f5:b5:74:ad:4b:bc: 05:53:c7:cb:c3:b9:5c:9c:71:13:86:3c:43:8e:ab: 28:d7:7d:c1:ec:8a:ae:a3:41:f5:9d:72:eb:77:b2: cb:3c:c3:65:29:16:0c:1d:b0:5c:97:5e:69:0b:e6: 57:cb:df:fb:7f:56:2a:40:ae:4c:bb:77:49:0c:92: 47:1d:63:0a:d3:ca:fb:32:6f:a2:2d:dc:49:31:68: ea:53:a3:4d:ea:23:b9:4f:9d:a3:4d:a0:6b:8d:e2: cc:dd:76:5c:62:de:98:89:33:11:a0:be:ed:49:b8: a6:92:5d:25:b8:80:01:8a:02:3d:0c:5c:d4:ef:9c: 34:08:66:f2:4e:a7:95:f7:3d:41:e4:cc:50:d7:2a: a4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:84:06:46:38:C5:BF:A8:8C:69:DE:E8:28:57:EC:F9:78:16:3F:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8ac1551e-9607-3cfb-96a4-3e15998a9170.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d9:73:89:79:42:33:e1:f9:35:13:ea:11:10:d3:d2:f4:a1: 0f:eb:b5:8f:7c:08:d8:9f:25:e2:bc:eb:30:06:96:1a:d3:0d: fa:d8:fa:a3:f4:87:64:a6:cb:88:eb:12:00:70:d5:f2:00:72: e0:cb:fe:ed:bc:07:66:6c:e7:8b:06:73:d2:09:0d:cf:1f:e3: b6:e7:f0:54:7f:eb:33:08:10:63:61:5e:3a:e7:41:4f:01:61: 0a:5f:b9:2b:10:0d:8a:a8:0a:ef:fb:b5:33:d0:44:b3:50:94: dd:6c:eb:3b:59:37:87:cc:42:25:b8:b4:0e:93:50:33:66:d6: a9:5b:3d:eb:6f:02:b1:bb:39:43:41:af:34:11:d7:ef:77:f2: 0f:ff:18:b1:ad:88:99:8c:d2:df:35:1c:d7:48:de:a6:3c:54: c7:89:e5:30:2d:bb:e3:5f:f9:f0:27:ba:95:fd:75:fc:0c:53: e7:c2:da:4c:df:23:63:15:db:c3:90:c1:13:e8:c6:8a:13:70: 91:52:18:0f:b8:d4:e6:4f:ea:a0:b9:75:52:38:12:13:c4:3d: 76:a3:89:30:d6:5f:87:ca:c6:e6:4c:0a:86:9e:e0:14:ff:1c: 7d:3d:20:d2:c3:df:7f:10:b1:a2:e6:ae:b9:1d:7e:63:b0:fb: 74:6a:c6:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2XVXA0RURD6p3rcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk MjliMWQ5MmEtYzM2ZS00NjgzLTllNzAtYzUwMTZhYjE4NGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0FCkzNs7go9nA35A/WPTrJB6MBk2ucRE8Tt FmppCO2PR9j4KckFordT12RcqbLlQa/yol9SFO5aemWtW42xLycNWfgkPHrkqpZy 2Evv/AwIMtc3rEh0eTlqdRIWiUTgBaYmsRfIPxYsTIAI3FUZfwj1tXStS7wFU8fL w7lcnHEThjxDjqso133B7Iquo0H1nXLrd7LLPMNlKRYMHbBcl15pC+ZXy9/7f1Yq QK5Mu3dJDJJHHWMK08r7Mm+iLdxJMWjqU6NN6iO5T52jTaBrjeLM3XZcYt6YiTMR oL7tSbimkl0luIABigI9DFzU75w0CGbyTqeV9z1B5MxQ1yqkkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEqEBkY4xb+ojGne6ChX7Pl4Fj9HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGFjMTU1MWUtOTYwNy0z Y2ZiLTk2YTQtM2UxNTk5OGE5MTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACbZc4l5QjPh+TUT6hEQ09L0oQ/rtY98CNifJeK86zAGlhrTDfrY +qP0h2Smy4jrEgBw1fIAcuDL/u28B2Zs54sGc9IJDc8f47bn8FR/6zMIEGNhXjrn QU8BYQpfuSsQDYqoCu/7tTPQRLNQlN1s6ztZN4fMQiW4tA6TUDNm1qlbPetvArG7 OUNBrzQR1+938g//GLGtiJmM0t81HNdI3qY8VMeJ5TAtu+Nf+fAnupX9dfwMU+fC 2kzfI2MV28OQwRPoxooTcJFSGA+41OZP6qC5dVI4EhPEPXajiTDWX4fKxuZMCoae 4BT/HH09INLD338QsaLmrrkdfmOw+3Rqxjo= -----END CERTIFICATE-----Generated at Wed May 13 12:55:34 2026 by rpki-client