$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa File: 0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa (raw, json) Hash identifier: zvamtSrJc6yMxx5sDc4QdGWmekahYhq4nYFLEhS0lrg= Subject key identifier: E7:A3:2C:39:E2:73:8A:8D:A4:C0:60:81:E1:08:A1:9F:4A:AA:51:DA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F4A66B96F377D73AD24AD00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396572 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:66:b9:6f:37:7d:73:ad:24:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=424b584b-2de8-4370-bbb6-b81f1ea2ae9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:30:85:91:d5:07:0e:f9:71:95:dc:d8:d5: a3:14:4c:be:f5:ec:4f:8b:50:e3:7a:44:ca:58:0f: 68:47:85:01:20:e3:27:0a:56:78:e8:f5:8b:4c:5a: 4c:3b:35:3c:e3:4f:fc:3f:b6:a0:56:14:4f:dd:64: fc:41:52:29:8d:8c:f6:a0:ac:13:eb:65:e0:e0:b1: 83:09:a5:8e:ee:27:bb:f0:2c:c3:12:6c:f5:37:bc: c1:fd:cf:c9:a2:de:e6:91:c1:68:82:f3:6b:7b:52: d1:16:65:5b:77:81:42:13:30:7a:ff:42:e7:3f:9c: 06:4e:cd:17:6b:b7:f3:02:3c:ec:25:c8:ef:86:d4: 4e:16:09:cd:a7:42:9c:d3:83:9a:3d:81:73:3a:f4: 26:fe:bc:a2:d7:d2:64:df:eb:10:c3:cf:83:ad:c7: ca:37:8d:72:e6:73:04:77:4f:39:24:b0:e8:28:23: 6f:30:16:91:cc:6d:32:55:aa:4b:0b:ab:0e:10:17: 6e:e8:7f:f9:03:4f:36:86:fa:de:c0:5f:86:e7:59: 0d:fc:6f:42:fe:e8:53:05:41:52:14:22:5a:d2:7a: 8e:83:72:eb:f9:27:96:7b:57:7b:f9:43:89:79:06: ca:d6:20:7e:42:79:3f:e3:e4:53:5b:1f:f3:4b:31: ca:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A3:2C:39:E2:73:8A:8D:A4:C0:60:81:E1:08:A1:9F:4A:AA:51:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/0b9f9d9c-5c27-3f0d-84f5-ea969a3797df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:3c:ed:e5:43:26:dc:0a:e4:38:0a:43:3f:8f:b6:f5:57:ea: 27:4b:90:f3:a5:21:c2:5f:7d:ba:ba:dd:28:67:aa:70:d3:cd: de:90:7d:c0:b7:89:df:e6:1b:84:67:da:1f:8c:f1:6c:0b:cd: b7:fe:53:0b:9d:ca:77:b1:39:d1:2e:fc:4e:5a:66:68:ac:4a: 61:b2:8d:f8:80:8a:1d:e3:2a:f4:43:3b:e6:87:4a:63:a4:74: d1:8e:3a:04:3b:65:36:64:87:7c:5b:ea:5a:65:3c:94:28:20: 92:ba:76:df:a0:84:d0:ae:73:eb:7d:f8:ca:9c:c8:5e:67:b3: 95:ac:0b:8d:94:5b:be:fc:58:5a:44:fa:60:5f:76:9f:4e:b4: a8:9a:1e:7f:a9:16:8d:e5:3d:5d:15:a6:e4:72:a5:2e:83:5d: 86:5b:e9:d3:f0:a1:c6:fb:f5:49:93:9e:59:52:3d:ad:47:6d: 8b:bf:11:bf:cd:60:01:57:95:e8:0e:a5:c6:69:ca:87:92:2e: 79:8e:98:dd:d5:a3:e8:af:8e:91:c7:8a:c0:24:56:41:4a:10: 3d:d2:68:59:60:1a:c7:6b:63:40:c6:50:cc:6a:3f:9f:1e:52: 3e:b6:ed:d7:df:c1:33:3c:48:37:56:71:cc:d0:ae:06:d1:99: 4f:ce:c6:0b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSma5bzd9c60krQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDI0YjU4NGItMmRlOC00MzcwLWJiYjYtYjgxZjFlYTJhZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNkwhZHVBw75cZXc2NWjFEy+9exPi1DjekTK WA9oR4UBIOMnClZ46PWLTFpMOzU840/8P7agVhRP3WT8QVIpjYz2oKwT62Xg4LGD CaWO7ie78CzDEmz1N7zB/c/Jot7mkcFogvNre1LRFmVbd4FCEzB6/0LnP5wGTs0X a7fzAjzsJcjvhtROFgnNp0Kc04OaPYFzOvQm/ryi19Jk3+sQw8+DrcfKN41y5nME d085JLDoKCNvMBaRzG0yVapLC6sOEBdu6H/5A082hvrewF+G51kN/G9C/uhTBUFS FCJa0nqOg3Lr+SeWe1d7+UOJeQbK1iB+Qnk/4+RTWx/zSzHKgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOejLDnic4qNpMBggeEIoZ9KqlHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMGI5ZjlkOWMtNWMyNy0z ZjBkLTg0ZjUtZWE5NjlhMzc5N2RmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBePO3lQybcCuQ4CkM/j7b1V+onS5DzpSHCX326 ut0oZ6pw083ekH3At4nf5huEZ9ofjPFsC823/lMLncp3sTnRLvxOWmZorEphso34 gIod4yr0Qzvmh0pjpHTRjjoEO2U2ZId8W+paZTyUKCCSunbfoITQrnPrffjKnMhe Z7OVrAuNlFu+/FhaRPpgX3afTrSomh5/qRaN5T1dFabkcqUug12GW+nT8KHG+/VJ k55ZUj2tR22LvxG/zWABV5XoDqXGacqHki55jpjd1aPor46Rx4rAJFZBShA90mhZ YBrHa2NAxlDMaj+fHlI+tu3X38EzPEg3VnHM0K4G0ZlPzsYL -----END CERTIFICATE-----Generated at Thu Mar 26 12:06:53 2026 by rpki-client