$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e37553-0500-310b-91eb-92924928eb7d.roa File: c2e37553-0500-310b-91eb-92924928eb7d.roa (raw, json) Hash identifier: 978/POKmA4ekO82k1O5ZVvDLbpaVyQEoJ35QRyEQDhY= Subject key identifier: D7:CD:F7:8C:AC:E9:C0:7D:8F:2A:51:79:76:5A:BD:8D:2B:F4:C5:58 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5A0CDF78A890445AC066CF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e37553-0500-310b-91eb-92924928eb7d.roa Signing time: Tue 31 Mar 2026 14:10:16 +0000 ROA not before: Tue 31 Mar 2026 14:10:16 +0000 ROA not after: Mon 29 Jun 2026 14:10:16 +0000 asID: 0 IP address blocks: 2001:500:13e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5a:0c:df:78:a8:90:44:5a:c0:66:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 31 14:10:16 2026 GMT Not After : Jun 29 14:10:16 2026 GMT Subject: CN=471b54b8-8892-404e-9f15-04cde751f1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:51:e5:13:87:ca:28:88:3d:70:f7:34:d2:07: 07:62:d5:16:18:dd:08:eb:0e:64:de:8b:b5:18:4a: dc:45:bd:fb:5c:2d:e1:37:03:4f:d0:c1:30:cc:d5: ac:ac:56:fc:35:1f:28:cd:85:24:9c:a6:d2:61:c9: 0d:b9:fc:32:bd:b3:7e:6a:b6:27:7d:a3:ff:02:98: 3d:54:f6:55:67:b7:bb:1a:e4:fa:d2:10:b0:c1:00: b8:df:b9:41:fa:20:92:9b:85:b4:51:7b:bb:01:e2: c3:53:68:a0:5d:0e:9c:bf:77:fd:a8:dc:cd:3f:da: 5f:1c:ae:63:38:29:fa:c8:fb:c9:49:96:a1:2e:43: 6b:96:21:96:8e:3c:be:81:fc:b1:bb:4c:b3:51:3d: f9:35:3f:87:01:c8:2c:d3:9f:8e:16:e2:50:c3:84: bd:2a:bb:90:ae:70:1e:7b:47:4f:5b:73:08:37:19: 03:59:b2:17:0c:52:0e:14:70:c8:6c:2e:e9:50:17: f4:71:88:8a:42:4c:8f:b4:fa:53:f1:8d:5c:29:9b: b9:32:a3:06:1b:c0:ba:d1:c0:7d:2e:4e:5b:db:0b: ff:6f:2a:47:6a:1e:49:2c:21:91:34:37:77:a7:14: f2:10:a6:ca:47:dd:7e:35:93:05:29:f1:d6:48:bc: ae:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:CD:F7:8C:AC:E9:C0:7D:8F:2A:51:79:76:5A:BD:8D:2B:F4:C5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c2e37553-0500-310b-91eb-92924928eb7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e6:98:52:2d:13:cc:72:88:20:01:af:a2:df:a5:b8:e7:62: 96:db:30:39:82:f4:8a:79:8c:18:3f:98:a9:84:13:6e:16:91: 1a:d1:03:41:b4:66:7f:a9:77:5a:e5:22:2e:0d:b9:96:df:80: 77:8a:90:bc:60:07:a7:a5:1c:30:ba:82:c8:5a:5a:0b:21:2e: 91:30:f1:cd:e0:4f:1f:08:34:8d:55:a6:51:ab:2a:ac:ff:91: 38:bf:ab:5d:f5:b8:1f:33:bd:de:dd:1d:69:3a:ce:23:7a:db: 02:c2:da:ba:d5:8d:d9:ba:dc:16:23:d8:3e:47:a0:be:ca:d5: 58:1d:26:ed:81:75:4c:40:9f:e5:34:79:54:12:5e:a6:0a:b2: 03:e0:95:80:69:04:2e:30:a8:5b:dd:73:37:02:f6:60:97:3f: 9f:ea:cb:6c:db:db:4e:cb:04:19:de:bb:7d:86:85:5d:52:0e: 10:d6:df:c2:6e:dd:2c:21:d1:f4:20:cb:9f:e4:dc:be:f0:fd: a4:29:d5:e8:d0:9f:af:e0:69:ec:b6:08:7b:c7:dd:c8:19:d2: f1:2d:15:9f:77:06:7e:e1:64:1d:7d:a8:ee:2c:98:11:41:1c: 65:83:a8:db:2f:b2:73:62:26:41:22:44:28:9d:4e:cf:cc:99: 70:a6:fe:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1aDN94qJBEWsBmz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMzMTE0MTAxNloXDTI2MDYyOTE0MTAxNlowLzEtMCsGA1UEAxMk NDcxYjU0YjgtODg5Mi00MDRlLTlmMTUtMDRjZGU3NTFmMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1HlE4fKKIg9cPc00gcHYtUWGN0I6w5k3ou1 GErcRb37XC3hNwNP0MEwzNWsrFb8NR8ozYUknKbSYckNufwyvbN+arYnfaP/Apg9 VPZVZ7e7GuT60hCwwQC437lB+iCSm4W0UXu7AeLDU2igXQ6cv3f9qNzNP9pfHK5j OCn6yPvJSZahLkNrliGWjjy+gfyxu0yzUT35NT+HAcgs05+OFuJQw4S9KruQrnAe e0dPW3MINxkDWbIXDFIOFHDIbC7pUBf0cYiKQkyPtPpT8Y1cKZu5MqMGG8C60cB9 Lk5b2wv/bypHah5JLCGRNDd3pxTyEKbKR91+NZMFKfHWSLyu+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNfN94ys6cB9jypReXZavY0r9MVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzJlMzc1NTMtMDUwMC0z MTBiLTkxZWItOTI5MjQ5MjhlYjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABLmmFItE8xyiCABr6LfpbjnYpbbMDmC9Ip5jBg/mKmEE24WkRrR A0G0Zn+pd1rlIi4NuZbfgHeKkLxgB6elHDC6gshaWgshLpEw8c3gTx8INI1VplGr Kqz/kTi/q131uB8zvd7dHWk6ziN62wLC2rrVjdm63BYj2D5HoL7K1VgdJu2BdUxA n+U0eVQSXqYKsgPglYBpBC4wqFvdczcC9mCXP5/qy2zb207LBBneu32GhV1SDhDW 38Ju3Swh0fQgy5/k3L7w/aQp1ejQn6/gaey2CHvH3cgZ0vEtFZ93Bn7hZB19qO4s mBFBHGWDqNsvsnNiJkEiRCidTs/MmXCm/to= -----END CERTIFICATE-----Generated at Tue Apr 7 19:40:10 2026 by rpki-client