$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a1200d2-98f2-31b1-b724-a16c0d988f1e.roa File: 0a1200d2-98f2-31b1-b724-a16c0d988f1e.roa (raw, json) Hash identifier: kcfD79M/KqO8yBTNTrSPRbXk5AHCRAZWulTuEHdQrvo= Subject key identifier: 0D:FD:91:18:31:7A:F1:ED:35:E3:0A:19:D9:71:5C:21:3B:CB:69:12 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0BDD148CAD0D62D231F9AC40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a1200d2-98f2-31b1-b724-a16c0d988f1e.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 396617 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:14:8c:ad:0d:62:d2:31:f9:ac:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=5b6d5239-599a-4d15-a4ce-1a1a4c9ae40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:53:a1:df:2c:ee:9e:4d:14:c4:70:16:2b:08: 2b:e1:5e:a0:85:b9:1d:70:18:7e:89:0b:07:17:27: 18:39:76:6d:09:af:f8:b5:0e:b0:44:8f:52:7f:bb: 25:82:58:36:30:60:1e:0d:b2:21:1f:9c:6e:3d:be: fa:c9:83:3f:c1:b2:f3:00:02:01:ed:8b:93:36:e3: 3e:2a:8e:5c:e6:34:b2:9a:bd:6b:00:0b:af:90:ec: 4d:18:5b:52:1a:0f:06:2c:3e:ea:73:ad:6e:93:f5: 0f:84:3c:af:48:26:dc:0a:52:24:70:8e:24:29:41: e7:c6:10:db:ce:8a:2f:fa:f1:36:37:a9:f6:b9:62: ea:ee:b2:b8:f4:da:c1:1b:d0:e2:5c:b6:aa:5e:0c: c0:6b:c6:aa:b1:0b:3d:db:d8:3e:15:0f:75:3c:d8: 78:00:d4:01:c1:5b:86:b2:f0:21:17:64:36:c3:fb: 65:e9:66:f1:fe:0a:c4:4d:e1:0c:cd:73:01:20:a7: 0e:f5:90:cc:f0:e9:95:4b:b3:7f:1b:38:ef:7c:88: c3:21:3e:39:cc:39:b8:2b:96:ba:07:81:a5:22:de: fd:df:68:05:db:20:0c:5e:1f:49:63:b5:68:1a:69: 86:6d:ec:30:0f:a6:74:19:4c:4c:1a:b2:2d:41:c8: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FD:91:18:31:7A:F1:ED:35:E3:0A:19:D9:71:5C:21:3B:CB:69:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0a1200d2-98f2-31b1-b724-a16c0d988f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:bb:f0:3e:b4:7b:66:bd:70:ba:c7:37:c3:57:53:3a:30:fe: 19:03:e3:6b:c5:55:1b:03:19:15:01:cb:82:f9:e2:cc:8e:4c: 4f:84:77:8c:8e:06:07:c2:13:f9:a8:f4:ce:e1:22:2c:e2:d8: c4:4a:de:f9:da:7a:40:71:1e:64:9d:32:46:11:bd:db:e5:ae: d5:5d:fc:00:62:5c:2f:c4:1a:80:49:32:dc:b5:d2:4e:c9:1a: 6e:67:88:e1:c6:dd:6f:a0:7e:46:43:1b:3e:c4:f2:47:10:1c: 81:61:83:26:14:a8:99:7b:9b:b9:d2:4d:2e:ad:4b:3b:8c:13: 76:ac:b2:08:46:1d:e2:1f:97:85:ab:1d:10:6d:91:e2:7a:e1: 1d:a2:57:a5:36:b1:a3:64:e8:b5:59:f0:55:42:35:47:d7:0c: 2b:c6:d4:c6:a9:0b:ac:15:bf:af:86:b1:f7:2b:ec:5d:5b:d1: f0:03:78:a5:48:4d:13:bf:f0:c7:69:ab:af:27:59:02:9d:1f: 07:37:c5:c6:ab:34:a5:5c:24:5b:c9:8c:02:e3:bb:10:57:14: 26:06:bc:43:49:6c:d1:7a:2d:73:4c:39:56:1a:a9:89:ba:da: 0a:40:70:88:27:9a:42:29:90:0e:d7:43:b1:d8:92:bc:aa:8f: a7:5f:33:00 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0L3RSMrQ1i0jH5rEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk NWI2ZDUyMzktNTk5YS00ZDE1LWE0Y2UtMWExYTRjOWFlNDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslOh3yzunk0UxHAWKwgr4V6ghbkdcBh+iQsH FycYOXZtCa/4tQ6wRI9Sf7slglg2MGAeDbIhH5xuPb76yYM/wbLzAAIB7YuTNuM+ Ko5c5jSymr1rAAuvkOxNGFtSGg8GLD7qc61uk/UPhDyvSCbcClIkcI4kKUHnxhDb zoov+vE2N6n2uWLq7rK49NrBG9DiXLaqXgzAa8aqsQs929g+FQ91PNh4ANQBwVuG svAhF2Q2w/tl6Wbx/grETeEMzXMBIKcO9ZDM8OmVS7N/GzjvfIjDIT45zDm4K5a6 B4GlIt7932gF2yAMXh9JY7VoGmmGbewwD6Z0GUxMGrItQchX0wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFA39kRgxevHtNeMKGdlxXCE7y2kSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGExMjAwZDItOThmMi0z MWIxLWI3MjQtYTE2YzBkOTg4ZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAxu/A+tHtmvXC6xzfDV1M6MP4ZA+NrxVUbAxkV AcuC+eLMjkxPhHeMjgYHwhP5qPTO4SIs4tjESt752npAcR5knTJGEb3b5a7VXfwA YlwvxBqASTLctdJOyRpuZ4jhxt1voH5GQxs+xPJHEByBYYMmFKiZe5u50k0urUs7 jBN2rLIIRh3iH5eFqx0QbZHieuEdolelNrGjZOi1WfBVQjVH1wwrxtTGqQusFb+v hrH3K+xdW9HwA3ilSE0Tv/DHaauvJ1kCnR8HN8XGqzSlXCRbyYwC47sQVxQmBrxD SWzRei1zTDlWGqmJutoKQHCIJ5pCKZAO10Ox2JK8qo+nXzMA -----END CERTIFICATE-----Generated at Thu Mar 26 16:20:45 2026 by rpki-client