$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/146d7131-b985-30d5-acc9-7ad81f702f6c.roa File: 146d7131-b985-30d5-acc9-7ad81f702f6c.roa (raw, json) Hash identifier: 7/bCbLA4+mtd46W0bkos7qA7hs9EmgXirAzcQUjpLG4= Subject key identifier: D7:97:49:F2:B2:B4:AE:DF:13:77:8A:F4:E6:8A:93:FD:B9:3B:15:87 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0BDD19A2CC562E2EA3E8D620 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/146d7131-b985-30d5-acc9-7ad81f702f6c.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 396550 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:19:a2:cc:56:2e:2e:a3:e8:d6:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=145c6501-5fcb-4589-bdb3-3a0c1387f1a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:c1:e2:13:2b:06:c4:a9:4e:6b:4c:24:ab: 55:d1:5d:3d:4d:02:d0:72:c9:bf:c2:a8:a0:e0:6a: ce:c7:ab:f1:a5:35:09:d2:31:64:7c:50:41:3c:1a: fa:d9:ea:e7:2e:44:11:ce:b5:3c:6a:21:de:3c:7d: ee:08:ee:b9:31:85:92:3f:66:f1:64:73:73:d5:15: f1:4c:19:a1:d1:ac:e3:11:61:fd:8f:24:46:8d:46: ab:31:fc:c4:e6:45:ab:33:40:77:6f:ce:67:83:56: e9:77:23:a9:8a:d7:5a:7e:9c:cf:d7:ab:56:bd:e8: df:a2:87:de:d5:50:90:cc:9f:84:ec:c6:e8:e8:80: aa:06:7d:f9:50:c9:67:73:8a:fc:37:b1:e4:28:0b: e2:c5:1c:ec:d6:e3:57:6b:86:70:d8:29:85:59:dc: 67:84:70:3b:5f:be:b1:97:2c:e4:2e:e0:c7:7e:b9: 2b:7e:75:d5:4e:43:96:67:c7:d0:c2:ff:5a:f6:02: fa:df:e5:54:7c:b4:db:ab:5a:4d:99:80:ed:6c:02: 1f:ec:45:26:c5:ac:f5:13:b4:f3:da:42:a9:30:aa: 38:2c:05:59:fa:26:28:5d:98:b5:15:c5:e4:ae:32: 85:6b:10:54:68:a8:c9:75:ae:fc:61:98:75:aa:44: f1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:97:49:F2:B2:B4:AE:DF:13:77:8A:F4:E6:8A:93:FD:B9:3B:15:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/146d7131-b985-30d5-acc9-7ad81f702f6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:bd:68:4a:07:ad:a3:aa:b9:63:ad:07:c4:42:93:55:e1:51: 73:de:20:5d:c1:88:37:34:29:68:01:76:f8:5c:77:df:bf:06: a8:9e:df:58:37:f1:24:28:86:45:0f:6b:74:f9:ba:24:7d:94: e4:66:d8:ba:95:75:61:a6:99:07:5e:e1:c7:f6:2f:1b:d7:c1: 1c:e8:e9:f4:c4:fb:b6:82:6e:a3:29:87:9a:c1:67:2c:c3:30: 97:20:c2:e8:d4:21:2e:4f:75:30:0b:c8:81:0c:47:70:10:64: ac:ed:d9:87:bc:b3:76:44:3c:21:cc:b2:14:cf:2c:5c:87:b2: d0:be:a8:46:39:7b:25:04:de:1a:66:a3:c6:48:c4:e5:96:d0: 25:74:5c:ac:5f:6e:43:fe:84:ec:76:17:8b:8c:f0:b6:18:bd: fb:19:dc:cd:72:33:e2:dd:7c:5a:6a:df:e0:b3:ac:86:b2:b1: ec:a7:f8:a1:74:76:d9:be:6e:84:90:1b:36:d6:60:a3:47:06: 05:a9:dd:3a:c8:9c:1d:be:77:4e:34:e8:54:cc:c4:b7:92:2c: 63:0f:84:e5:ac:31:9a:d2:6c:7e:8f:27:19:96:cc:47:23:77: 36:39:b3:5a:0c:5a:7d:d0:d0:d6:bc:d3:b1:56:ce:1b:9e:6f: ba:6b:59:46 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0L3RmizFYuLqPo1iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk MTQ1YzY1MDEtNWZjYi00NTg5LWJkYjMtM2EwYzEzODdmMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYzB4hMrBsSpTmtMJKtV0V09TQLQcsm/wqig 4GrOx6vxpTUJ0jFkfFBBPBr62ernLkQRzrU8aiHePH3uCO65MYWSP2bxZHNz1RXx TBmh0azjEWH9jyRGjUarMfzE5kWrM0B3b85ng1bpdyOpitdafpzP16tWvejfoofe 1VCQzJ+E7Mbo6ICqBn35UMlnc4r8N7HkKAvixRzs1uNXa4Zw2CmFWdxnhHA7X76x lyzkLuDHfrkrfnXVTkOWZ8fQwv9a9gL63+VUfLTbq1pNmYDtbAIf7EUmxaz1E7Tz 2kKpMKo4LAVZ+iYoXZi1FcXkrjKFaxBUaKjJda78YZh1qkTxxwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNeXSfKytK7fE3eK9OaKk/25OxWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTQ2ZDcxMzEtYjk4NS0z MGQ1LWFjYzktN2FkODFmNzAyZjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCZvWhKB62jqrljrQfEQpNV4VFz3iBdwYg3NClo AXb4XHffvwaont9YN/EkKIZFD2t0+bokfZTkZti6lXVhppkHXuHH9i8b18Ec6On0 xPu2gm6jKYeawWcswzCXIMLo1CEuT3UwC8iBDEdwEGSs7dmHvLN2RDwhzLIUzyxc h7LQvqhGOXslBN4aZqPGSMTlltAldFysX25D/oTsdheLjPC2GL37GdzNcjPi3Xxa at/gs6yGsrHsp/ihdHbZvm6EkBs21mCjRwYFqd06yJwdvndONOhUzMS3kixjD4Tl rDGa0mx+jycZlsxHI3c2ObNaDFp90NDWvNOxVs4bnm+6a1lG -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:19 2026 by rpki-client