$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd0768fe-5afc-3aaf-8d95-94daf4658963.roa File: dd0768fe-5afc-3aaf-8d95-94daf4658963.roa (raw, json) Hash identifier: wRMgQXfJBZ6Q7rjLPs2BNcfP8WfPa2JhPuldvIjgLmA= Subject key identifier: 6C:FE:D4:AF:36:E4:18:06:13:12:67:05:DB:19:13:D3:3F:1A:BB:66 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D975563C8D948E79DFA421B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd0768fe-5afc-3aaf-8d95-94daf4658963.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 396588 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:63:c8:d9:48:e7:9d:fa:42:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=6813bcee-d8d4-4668-ba0d-b2ae7034a1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:db:3b:5d:b3:f6:0f:7e:44:c1:53:0b:f3:c2: d2:59:f2:cf:88:d2:94:78:07:ca:79:28:33:11:7d: 07:aa:77:18:20:83:fe:ad:91:92:8a:4d:f5:d6:41: 31:9a:0d:44:62:9b:5c:56:28:44:98:85:9c:09:60: c7:87:fb:a0:6d:85:51:c7:9e:11:d2:f1:5d:f0:03: 40:f8:78:06:a7:2e:6d:a8:8e:eb:b1:10:3f:17:41: 7d:c0:bd:cc:6d:46:0e:66:bb:56:34:78:5e:a5:42: e6:a1:11:01:45:ba:64:c0:ee:d2:f3:e6:a2:7a:23: 44:41:4f:ce:ab:63:17:02:23:4e:f3:02:4d:09:72: 57:30:7b:42:b8:7d:3b:2a:cf:dd:03:36:0d:8e:fd: 82:15:cf:ae:87:8f:bc:12:cf:e4:e2:c8:c0:28:fc: 3a:6f:06:f4:47:db:9d:75:a3:82:dc:09:a5:7a:0a: a0:4b:93:ee:37:2a:5d:75:fb:eb:53:26:e6:4f:6d: 97:92:76:75:93:d8:a1:f5:b4:77:4d:5d:b5:4a:65: b8:66:7c:d9:6d:fe:55:91:db:21:4c:b8:ec:d2:10: 0a:82:12:17:43:14:f2:d3:df:d3:b4:a3:c3:cf:b1: a2:4f:99:95:6d:c4:95:d1:29:a1:e7:6f:f3:34:f6: 28:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FE:D4:AF:36:E4:18:06:13:12:67:05:DB:19:13:D3:3F:1A:BB:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dd0768fe-5afc-3aaf-8d95-94daf4658963.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:51:5c:be:a0:d3:6d:1b:12:f4:a8:51:5e:d8:10:71:7b:a4: df:1e:0d:2b:bb:67:da:08:00:ee:36:f1:07:b0:7a:89:c0:7f: c5:30:9d:cf:37:48:25:b1:20:d9:9e:3f:6a:bf:37:1d:20:e8: a1:f5:a7:f0:0c:72:1a:ef:3f:0e:29:e2:94:01:9f:29:63:c9: d4:26:19:35:1f:b7:7c:7f:9b:ef:1f:95:e4:e8:9d:86:00:de: fa:e0:21:94:9b:24:db:e7:36:ec:25:72:13:d9:2d:16:22:da: 23:ad:ee:68:f7:64:3b:2a:82:db:29:e0:cf:24:8b:8c:04:0d: 57:0e:7a:16:8d:5b:b2:66:3f:dc:d1:da:c5:7c:aa:91:91:f0: a9:5b:cb:93:d7:31:25:89:30:29:17:5f:d8:de:95:c9:47:ae: db:12:20:fd:20:a7:a5:59:52:8a:18:91:ad:34:35:72:34:a1: b9:d7:d8:ae:50:39:b1:4d:96:d6:9c:c8:82:14:3c:44:17:f5: d2:e7:97:99:11:1b:b0:fc:50:3a:6f:eb:ca:74:4f:34:ac:15: eb:e3:d9:b4:0c:35:56:fb:45:4d:a3:a7:16:a0:64:57:56:7b: 18:a5:9a:b2:79:57:82:67:eb:3e:fc:89:91:64:e9:e3:e8:1e: 90:93:75:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2XVWPI2UjnnfpCGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk NjgxM2JjZWUtZDhkNC00NjY4LWJhMGQtYjJhZTcwMzRhMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9s7XbP2D35EwVML88LSWfLPiNKUeAfKeSgz EX0HqncYIIP+rZGSik311kExmg1EYptcVihEmIWcCWDHh/ugbYVRx54R0vFd8ANA +HgGpy5tqI7rsRA/F0F9wL3MbUYOZrtWNHhepULmoREBRbpkwO7S8+aieiNEQU/O q2MXAiNO8wJNCXJXMHtCuH07Ks/dAzYNjv2CFc+uh4+8Es/k4sjAKPw6bwb0R9ud daOC3AmlegqgS5PuNypddfvrUybmT22XknZ1k9ih9bR3TV21SmW4ZnzZbf5Vkdsh TLjs0hAKghIXQxTy09/TtKPDz7GiT5mVbcSV0Smh52/zNPYoDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGz+1K825BgGExJnBdsZE9M/GrtmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGQwNzY4ZmUtNWFmYy0z YWFmLThkOTUtOTRkYWY0NjU4OTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVRXL6g020bEvSoUV7YEHF7pN8eDSu7Z9oIAO428QeweonAf8Uw nc83SCWxINmeP2q/Nx0g6KH1p/AMchrvPw4p4pQBnyljydQmGTUft3x/m+8fleTo nYYA3vrgIZSbJNvnNuwlchPZLRYi2iOt7mj3ZDsqgtsp4M8ki4wEDVcOehaNW7Jm P9zR2sV8qpGR8Klby5PXMSWJMCkXX9jelclHrtsSIP0gp6VZUooYka00NXI0obnX 2K5QObFNltacyIIUPEQX9dLnl5kRG7D8UDpv68p0TzSsFevj2bQMNVb7RU2jpxag ZFdWexilmrJ5V4Jn6z78iZFk6ePoHpCTdc4= -----END CERTIFICATE-----Generated at Wed May 13 10:31:08 2026 by rpki-client