$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/006d461a-be1d-3d5b-8ee4-661db1716994.roa File: 006d461a-be1d-3d5b-8ee4-661db1716994.roa (raw, json) Hash identifier: Fi6SNqi0ADuBboSGUYHZXYda7VlPgIJTQmIRV72pWkw= Subject key identifier: B3:A3:8C:2E:A0:99:53:71:1C:4E:4C:0F:26:CE:E9:E4:F5:AB:E0:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C03612C8A7B7EB9FEEE5E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/006d461a-be1d-3d5b-8ee4-661db1716994.roa Signing time: Tue 03 Mar 2026 15:18:05 +0000 ROA not before: Tue 03 Mar 2026 15:18:05 +0000 ROA not after: Mon 01 Jun 2026 14:18:05 +0000 asID: 40717 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:61:2c:8a:7b:7e:b9:fe:ee:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:05 2026 GMT Not After : Jun 1 14:18:05 2026 GMT Subject: CN=dff9dc93-2975-4bb3-8b48-5c876a64da7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:0c:f2:f2:87:13:fe:1d:d7:6a:99:33:6a: 4b:14:e5:53:69:23:1f:04:1b:43:e3:32:ec:f6:89: c2:da:39:2b:0c:91:ac:3c:82:5a:09:f3:0c:0e:55: 9b:0d:30:2a:39:81:6c:68:32:35:a9:1e:f9:7d:7e: 56:38:2d:6a:d6:6c:8c:c2:fc:b9:1a:fd:72:c2:a3: d8:46:70:9d:e5:69:16:ed:05:c0:4a:bb:f5:13:32: dc:f9:f3:5a:41:f3:03:5f:90:65:c3:c2:a1:db:73: c2:3d:f5:4b:ba:e0:b6:0e:74:6c:0e:4d:f2:d8:85: 4f:3c:1d:1a:e4:85:3d:9f:41:6b:5e:ae:89:be:c7: 2e:c1:1b:0d:35:44:bd:fd:ec:96:f0:09:b0:fa:62: ac:64:b7:bd:4e:38:68:a1:c9:d5:d6:c0:9f:ca:30: 9b:bc:60:ca:81:40:2f:cf:4d:68:b8:f3:6f:d9:98: e0:ac:c4:5e:35:f0:e2:0b:1d:ec:ac:f7:7c:b5:ad: 1e:56:86:12:f8:41:88:1f:80:aa:6b:d6:6c:25:f4: 87:53:10:f9:14:81:be:42:f2:2c:45:f7:a2:24:ad: ce:9e:18:a3:f4:3e:1b:61:a3:13:b8:58:2f:06:3e: b2:bf:43:f3:00:89:3e:60:e3:01:a2:44:4e:48:bc: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A3:8C:2E:A0:99:53:71:1C:4E:4C:0F:26:CE:E9:E4:F5:AB:E0:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/006d461a-be1d-3d5b-8ee4-661db1716994.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:09:6a:14:03:88:59:98:eb:c6:ba:1d:d3:8d:84:79:be:b3: 93:bd:c1:bf:43:1f:12:a3:ef:48:a0:fc:e3:23:42:b5:ef:8d: bf:0b:9d:cf:e9:61:8e:41:0b:c9:6c:f0:8f:58:72:b2:6e:05: 37:87:d8:5b:76:25:7a:7e:e8:52:8d:d4:45:54:96:d6:ae:a4: cc:a1:c5:12:72:d0:39:eb:d9:f1:6c:44:6c:83:2a:7e:3f:c5: 2e:fe:92:0c:36:20:6f:9c:2b:ee:4a:f0:f6:2b:4d:5e:dd:89: 13:c9:7a:90:da:ae:89:98:9b:c7:7f:92:3d:b6:85:9d:d1:f5: ef:22:af:31:ec:e0:2a:3c:58:c9:d0:2d:14:3c:20:79:3d:71: 2f:36:bf:88:c3:0b:a5:8d:ca:51:a5:e0:2c:e2:a3:3a:be:69: a1:ee:c4:ea:9e:ba:fc:8e:81:87:a0:47:f3:e9:3b:4e:05:e8: d8:ef:6d:98:d9:3c:08:ba:00:f3:4c:c7:e2:c1:66:3c:4c:f4: 57:3f:a3:fd:96:ec:aa:44:e4:b5:e6:73:06:3d:42:90:18:16: c6:fb:67:83:20:8e:6d:04:e3:49:b2:f5:3a:06:0f:53:21:f7: f9:f6:8d:2c:34:d3:fe:71:1f:90:96:01:9d:b1:f4:ed:ec:cd: 1d:3e:f4:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2Esint+uf7uXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwNVoXDTI2MDYwMTE0MTgwNVowLzEtMCsGA1UEAxMk ZGZmOWRjOTMtMjk3NS00YmIzLThiNDgtNWM4NzZhNjRkYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw0M8vKHE/4d12qZM2pLFOVTaSMfBBtD4zLs 9onC2jkrDJGsPIJaCfMMDlWbDTAqOYFsaDI1qR75fX5WOC1q1myMwvy5Gv1ywqPY RnCd5WkW7QXASrv1EzLc+fNaQfMDX5Blw8Kh23PCPfVLuuC2DnRsDk3y2IVPPB0a 5IU9n0FrXq6JvscuwRsNNUS9/eyW8Amw+mKsZLe9TjhoocnV1sCfyjCbvGDKgUAv z01ouPNv2ZjgrMReNfDiCx3srPd8ta0eVoYS+EGIH4Cqa9ZsJfSHUxD5FIG+QvIs RfeiJK3Onhij9D4bYaMTuFgvBj6yv0PzAIk+YOMBokROSLxFrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLOjjC6gmVNxHE5MDybO6eT1q+B3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDA2ZDQ2MWEtYmUxZC0z ZDViLThlZTQtNjYxZGIxNzE2OTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALYJahQDiFmY68a6HdONhHm+s5O9wb9DHxKj70ig/OMjQrXvjb8L nc/pYY5BC8ls8I9YcrJuBTeH2Ft2JXp+6FKN1EVUltaupMyhxRJy0Dnr2fFsRGyD Kn4/xS7+kgw2IG+cK+5K8PYrTV7diRPJepDaromYm8d/kj22hZ3R9e8irzHs4Co8 WMnQLRQ8IHk9cS82v4jDC6WNylGl4Cziozq+aaHuxOqeuvyOgYegR/PpO04F6Njv bZjZPAi6APNMx+LBZjxM9Fc/o/2W7KpE5LXmcwY9QpAYFsb7Z4Mgjm0E40my9ToG D1Mh9/n2jSw00/5xH5CWAZ2x9O3szR0+9Ds= -----END CERTIFICATE-----Generated at Thu Mar 26 14:01:32 2026 by rpki-client