$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0988ace9-31d7-3e41-9aae-3c7bd8132fad.roa File: 0988ace9-31d7-3e41-9aae-3c7bd8132fad.roa (raw, json) Hash identifier: xTg42J5wZ47Lr/0HPDvLNvAiCDQpBwCvYZxtHUo0nY4= Subject key identifier: 25:D7:D8:55:43:85:9D:72:D3:C5:32:22:54:1F:6F:AE:FA:E3:6F:D3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759BAA75BADCF33AF869C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0988ace9-31d7-3e41-9aae-3c7bd8132fad.roa Signing time: Tue 10 Mar 2026 14:28:36 +0000 ROA not before: Tue 10 Mar 2026 14:28:36 +0000 ROA not after: Mon 08 Jun 2026 14:28:36 +0000 asID: 397196 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9b:aa:75:ba:dc:f3:3a:f8:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:36 2026 GMT Not After : Jun 8 14:28:36 2026 GMT Subject: CN=7901ec7c-a01c-4ed1-8df9-658d74c73ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:6f:30:97:8f:22:1d:29:d8:95:34:81:76: a7:09:89:63:4a:53:fa:72:44:bc:bd:d5:3c:a5:fe: 42:81:48:b7:10:a6:1d:9e:9f:29:36:ce:c0:ac:5b: e7:ba:2f:e0:07:2f:96:d9:67:9a:31:55:e1:5c:cd: dc:f4:aa:44:c1:bd:4e:e3:b6:f6:e2:54:4b:58:2d: c1:a1:06:b5:d1:23:6b:70:80:08:6e:7b:23:df:d2: 26:57:74:5b:b1:bb:59:d3:54:10:aa:26:d5:d2:41: 57:a2:9a:01:c5:b0:63:48:16:cc:63:7d:d0:f4:a2: 06:e3:7c:c1:8f:22:1f:9f:58:c2:6e:70:f8:ab:c2: a8:92:96:72:bc:54:cc:fa:c3:5d:63:78:7b:cc:a1: e1:ff:74:28:85:52:41:ea:40:a1:a2:b5:37:ad:fb: 32:65:36:d7:6c:ae:64:b4:b0:4d:87:98:30:ad:53: 52:c1:80:3a:5e:cc:22:31:50:dc:0f:af:ee:4b:0b: b5:18:c0:64:06:f5:d3:78:2a:5f:a1:cd:59:21:f6: 91:55:23:16:7e:50:e6:b4:83:73:15:58:a9:04:61: 39:1b:0a:7f:c5:87:d4:57:3f:a4:11:f6:48:1f:01: 07:c6:f2:54:19:d0:d1:98:be:27:bc:bf:86:be:fb: 6a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:D7:D8:55:43:85:9D:72:D3:C5:32:22:54:1F:6F:AE:FA:E3:6F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0988ace9-31d7-3e41-9aae-3c7bd8132fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a2:99:b5:53:1d:c8:97:25:22:8d:d3:32:83:98:0e:72:90: 1a:6b:9d:4b:96:88:50:11:07:eb:9f:0b:c5:e0:c8:fb:a5:d8: 1e:80:54:02:0c:b4:60:30:96:e2:df:2a:c3:6c:4b:58:ea:ca: 92:28:e3:7f:79:ea:a6:41:97:c8:c3:13:ac:8c:8e:ff:1b:ce: 58:eb:52:74:e5:60:e5:52:c2:76:0f:96:0f:f5:14:d5:5a:dc: 7b:1e:90:ac:7a:0a:41:af:9c:25:27:cc:56:e1:74:85:8b:45: fc:01:35:a7:65:18:69:b7:0b:64:13:6b:02:8b:ba:02:35:49: ee:84:42:58:0d:08:0f:e0:7c:b8:f2:24:c5:ef:a4:22:e8:3f: d6:56:cd:64:dd:fb:fa:ba:d2:b3:ee:c3:e7:9d:ca:e9:15:4b: e7:22:79:23:48:b7:7c:39:6e:e3:01:53:08:ae:50:f9:27:f5: 72:94:1b:39:0d:3f:93:da:10:81:cc:96:f4:d8:41:54:b4:48: b6:31:ba:af:53:f0:87:5d:9b:1a:82:a4:a4:0d:f8:d2:aa:de: 29:33:3b:0e:bf:e4:13:a6:62:27:36:07:91:a1:12:0e:82:8b: 59:18:57:ee:37:33:2c:0c:60:89:4d:37:e4:2f:56:ca:01:6e: f2:ed:f0:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZuqdbrc8zr4acAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzNloXDTI2MDYwODE0MjgzNlowLzEtMCsGA1UEAxMk NzkwMWVjN2MtYTAxYy00ZWQxLThkZjktNjU4ZDc0YzczZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTpvMJePIh0p2JU0gXanCYljSlP6ckS8vdU8 pf5CgUi3EKYdnp8pNs7ArFvnui/gBy+W2WeaMVXhXM3c9KpEwb1O47b24lRLWC3B oQa10SNrcIAIbnsj39ImV3RbsbtZ01QQqibV0kFXopoBxbBjSBbMY33Q9KIG43zB jyIfn1jCbnD4q8KokpZyvFTM+sNdY3h7zKHh/3QohVJB6kChorU3rfsyZTbXbK5k tLBNh5gwrVNSwYA6XswiMVDcD6/uSwu1GMBkBvXTeCpfoc1ZIfaRVSMWflDmtINz FVipBGE5Gwp/xYfUVz+kEfZIHwEHxvJUGdDRmL4nvL+GvvtqvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCXX2FVDhZ1y08UyIlQfb67642/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDk4OGFjZTktMzFkNy0z ZTQxLTlhYWUtM2M3YmQ4MTMyZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH+imbVTHciXJSKN0zKDmA5ykBprnUuWiFARB+ufC8XgyPul2B6A VAIMtGAwluLfKsNsS1jqypIo43956qZBl8jDE6yMjv8bzljrUnTlYOVSwnYPlg/1 FNVa3HsekKx6CkGvnCUnzFbhdIWLRfwBNadlGGm3C2QTawKLugI1Se6EQlgNCA/g fLjyJMXvpCLoP9ZWzWTd+/q60rPuw+edyukVS+cieSNIt3w5buMBUwiuUPkn9XKU GzkNP5PaEIHMlvTYQVS0SLYxuq9T8IddmxqCpKQN+NKq3ikzOw6/5BOmYic2B5Gh Eg6Ci1kYV+43MywMYIlNN+QvVsoBbvLt8Ck= -----END CERTIFICATE-----Generated at Thu Mar 26 14:40:27 2026 by rpki-client