$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04c6eaf1-81b2-3c85-9860-a87e40f83d80.roa File: 04c6eaf1-81b2-3c85-9860-a87e40f83d80.roa (raw, json) Hash identifier: 30n542N5OZaNN+Bdk4T+RsBnWyCYF18UQCLNQnjaKUw= Subject key identifier: A6:49:95:40:79:8E:F4:56:42:BF:B7:B5:36:4D:04:92:FF:D5:C0:90 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C036669B559FB8670278B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04c6eaf1-81b2-3c85-9860-a87e40f83d80.roa Signing time: Tue 03 Mar 2026 15:18:08 +0000 ROA not before: Tue 03 Mar 2026 15:18:08 +0000 ROA not after: Mon 01 Jun 2026 14:18:08 +0000 asID: 19836 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:66:69:b5:59:fb:86:70:27:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:08 2026 GMT Not After : Jun 1 14:18:08 2026 GMT Subject: CN=690305b8-1416-4514-a162-7118fcac21c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ab:61:71:21:9c:d6:a0:04:3a:22:15:64:17: 8b:d5:80:e0:45:c9:d8:50:ca:56:77:4f:33:28:af: db:41:88:22:d7:f7:63:28:b0:eb:6f:4d:db:68:cc: 28:ed:21:21:75:4c:72:14:63:f1:37:a4:23:f7:17: 18:f8:1e:e3:08:fc:52:b8:8c:2c:6b:53:30:b8:b3: b9:e5:b9:de:c6:d4:3f:6d:6d:01:15:b3:35:2a:d5: eb:aa:9c:bb:dd:92:77:ea:40:82:a0:68:4c:17:bd: ce:7b:7e:b8:ec:7f:0d:63:82:74:6f:e7:0c:75:63: 33:6b:dd:de:64:2a:95:54:cb:a4:9a:86:4a:35:9b: d4:8a:11:85:4e:aa:48:ed:8c:d2:ba:2b:0b:54:ef: dd:f7:e7:38:3e:fb:ea:8a:c2:c7:15:9c:ed:4f:3d: 00:ae:b0:74:6d:d7:b3:03:c3:7b:8f:d1:11:df:16: f0:3e:32:2c:d7:ef:0a:07:b1:21:60:ab:43:67:f3: 3e:cb:1b:ad:51:b7:4c:a2:d7:81:e3:2b:ac:a7:0c: e9:90:27:d6:ed:d2:22:85:99:42:79:87:85:d8:ef: ea:9c:f8:4f:10:a8:6a:c7:ba:0d:58:4f:6e:b5:78: 21:9b:ec:29:e1:6a:74:f8:4d:8f:84:af:1b:53:04: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:49:95:40:79:8E:F4:56:42:BF:B7:B5:36:4D:04:92:FF:D5:C0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/04c6eaf1-81b2-3c85-9860-a87e40f83d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d1:ad:cb:83:1e:73:f6:32:06:7d:6f:d1:dd:4f:37:5b:42: 89:fd:da:4c:d3:59:07:b8:a6:2a:5e:ea:6e:1e:9f:f7:fa:6c: 1b:ca:d1:d5:f6:cf:38:17:ce:29:fc:71:d1:d5:a8:a6:07:7e: b7:8c:12:d7:2e:59:da:18:cc:f9:f4:c9:07:65:d0:9c:64:b6: 73:6d:8e:4f:25:42:2e:ff:85:ad:4f:68:33:54:62:31:3f:cf: 05:1f:0f:1d:e6:66:20:8f:79:66:60:3e:4e:68:0d:8a:45:45: 1b:2c:d7:be:cd:8f:5d:f9:bc:f8:10:97:7e:be:6b:51:2d:5d: 8f:fc:0c:38:86:a6:51:bd:da:e4:4d:d3:28:b5:59:09:0e:2e: a7:fa:ba:80:d6:13:79:b4:ff:cf:0a:a0:1f:e4:66:81:6b:55: a5:1f:43:0a:9c:2c:85:18:20:21:2a:0a:64:29:06:a9:16:88: 48:65:79:7e:ac:e9:b0:01:f4:5f:94:c1:0f:cc:a4:71:80:63: 0b:a5:1a:d0:27:09:bd:cd:ce:15:88:b3:8f:17:18:ae:12:20: a1:10:9e:9a:e9:a9:e8:17:fb:96:e4:e8:5a:77:fb:3e:42:58: 48:5d:d1:87:e8:54:e4:e1:97:b5:c2:27:db:0b:59:e7:43:ce: 44:99:a9:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2ZptVn7hnAni4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwOFoXDTI2MDYwMTE0MTgwOFowLzEtMCsGA1UEAxMk NjkwMzA1YjgtMTQxNi00NTE0LWExNjItNzExOGZjYWMyMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiathcSGc1qAEOiIVZBeL1YDgRcnYUMpWd08z KK/bQYgi1/djKLDrb03baMwo7SEhdUxyFGPxN6Qj9xcY+B7jCPxSuIwsa1MwuLO5 5bnextQ/bW0BFbM1KtXrqpy73ZJ36kCCoGhMF73Oe3647H8NY4J0b+cMdWMza93e ZCqVVMukmoZKNZvUihGFTqpI7YzSuisLVO/d9+c4PvvqisLHFZztTz0ArrB0bdez A8N7j9ER3xbwPjIs1+8KB7EhYKtDZ/M+yxutUbdMoteB4yuspwzpkCfW7dIihZlC eYeF2O/qnPhPEKhqx7oNWE9utXghm+wp4Wp0+E2PhK8bUwTzvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKZJlUB5jvRWQr+3tTZNBJL/1cCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDRjNmVhZjEtODFiMi0z Yzg1LTk4NjAtYTg3ZTQwZjgzZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADvRrcuDHnP2MgZ9b9HdTzdbQon92kzTWQe4pipe6m4en/f6bBvK 0dX2zzgXzin8cdHVqKYHfreMEtcuWdoYzPn0yQdl0JxktnNtjk8lQi7/ha1PaDNU YjE/zwUfDx3mZiCPeWZgPk5oDYpFRRss177Nj135vPgQl36+a1EtXY/8DDiGplG9 2uRN0yi1WQkOLqf6uoDWE3m0/88KoB/kZoFrVaUfQwqcLIUYICEqCmQpBqkWiEhl eX6s6bAB9F+UwQ/MpHGAYwulGtAnCb3NzhWIs48XGK4SIKEQnprpqegX+5bk6Fp3 +z5CWEhd0YfoVOThl7XCJ9sLWedDzkSZqWs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:37 2026 by rpki-client