$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1996c20a-af01-39b1-8b70-d04263b1d335.roa File: 1996c20a-af01-39b1-8b70-d04263b1d335.roa (raw, json) Hash identifier: /EOS3U+rtlFCKAMoaH5zlhRBSPpw/z/W5q2z/Kn+NcY= Subject key identifier: EC:CE:D4:5D:55:AE:C5:7F:07:FC:EE:8C:71:87:80:BE:02:22:8A:89 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF90E7A6645BEB7E91DC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1996c20a-af01-39b1-8b70-d04263b1d335.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396545 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:90:e7:a6:64:5b:eb:7e:91:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=8dcd425f-b91d-423c-bb39-5c5f13e9babb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:19:59:61:06:10:a3:ee:d4:82:45:ef:5b:3b: f5:4b:2e:63:9c:65:09:fb:2e:90:04:5d:da:e0:d2: 30:b3:9e:f6:9c:0d:5d:13:31:25:86:70:c3:d1:9c: a0:8c:40:a4:47:b3:a7:3d:7e:02:8b:3d:ca:d2:f4: d8:7b:cc:1e:ce:19:c8:3a:67:86:48:18:2a:d9:0b: 7d:14:75:96:5d:92:94:95:0d:b3:eb:0f:34:ed:3f: 60:de:bd:67:53:c5:2a:c7:20:75:d0:89:84:7b:3a: f1:a7:ec:19:6d:38:51:cf:70:0a:df:8e:87:aa:c9: 1d:32:0e:93:0e:61:8e:cd:c5:a7:27:13:d5:de:a8: 1e:28:91:a5:ef:a1:a8:72:04:4c:4b:e5:b0:3b:92: 42:bc:ce:77:85:e0:07:b7:26:cf:c2:50:f0:9e:5b: b1:b9:a4:93:5e:2f:75:c4:e6:eb:7e:cd:a4:64:dd: e8:f3:22:69:04:e1:74:56:51:d2:11:82:36:4f:ca: 63:c6:a0:0e:de:4a:6d:a2:bb:54:a3:ab:29:34:65: 7e:78:43:9e:97:27:db:91:a1:3f:b0:a9:9c:3d:e3: e1:36:87:c2:38:44:7e:9d:8e:d3:43:c9:fd:82:ef: 1f:8e:22:df:8a:e0:7f:16:63:50:bb:6e:04:37:23: 32:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CE:D4:5D:55:AE:C5:7F:07:FC:EE:8C:71:87:80:BE:02:22:8A:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1996c20a-af01-39b1-8b70-d04263b1d335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9d:c2:50:97:9a:eb:b8:35:b2:35:04:05:39:11:75:02:be: 89:c4:fc:1f:49:85:5d:2b:7f:22:b2:7a:e9:4f:81:42:99:3b: 26:ab:22:3d:10:b0:d0:a7:3b:73:bf:cb:31:50:74:48:f5:ff: c8:03:e0:a2:bc:44:cb:35:93:54:1e:4c:b9:db:26:66:b0:bd: a4:51:df:e0:64:02:28:e8:3d:b2:86:db:05:86:bd:f7:16:9e: 38:ab:35:a5:e4:57:b9:49:99:0f:93:ad:57:ee:29:d7:59:63: 03:78:ce:c1:02:26:00:38:5a:eb:5e:f6:9d:6f:dd:d8:69:9d: 8d:d5:2f:46:a8:ca:05:9f:2e:2f:fe:b7:40:bb:fb:a7:e0:30: ef:b0:66:d0:be:06:e3:3a:a4:b9:7f:f2:c6:af:b4:0a:9e:63: 0f:d3:62:8a:23:2b:f7:00:14:0b:e7:5d:bc:25:68:47:d7:92: 6d:1e:84:5b:a8:5b:66:91:e1:2c:20:c1:e0:0d:85:c0:87:7e: 64:74:a1:a2:2f:7f:5a:32:a4:1f:a7:2f:32:37:c8:ea:d1:63: c9:d7:05:c5:85:cc:05:14:5e:0b:bc:07:82:94:ce:ed:15:61: b0:b5:10:1b:ec:3f:f4:72:12:cb:b2:fd:e9:2d:26:9d:0b:94: 08:82:fa:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/5DnpmRb636R3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OGRjZDQyNWYtYjkxZC00MjNjLWJiMzktNWM1ZjEzZTliYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBlZYQYQo+7UgkXvWzv1Sy5jnGUJ+y6QBF3a 4NIws572nA1dEzElhnDD0ZygjECkR7OnPX4Ciz3K0vTYe8wezhnIOmeGSBgq2Qt9 FHWWXZKUlQ2z6w807T9g3r1nU8UqxyB10ImEezrxp+wZbThRz3AK346HqskdMg6T DmGOzcWnJxPV3qgeKJGl76GocgRMS+WwO5JCvM53heAHtybPwlDwnluxuaSTXi91 xObrfs2kZN3o8yJpBOF0VlHSEYI2T8pjxqAO3kptortUo6spNGV+eEOelyfbkaE/ sKmcPePhNofCOER+nY7TQ8n9gu8fjiLfiuB/FmNQu24ENyMyiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOzO1F1VrsV/B/zujHGHgL4CIoqJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTk5NmMyMGEtYWYwMS0z OWIxLThiNzAtZDA0MjYzYjFkMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACidwlCXmuu4NbI1BAU5EXUCvonE/B9JhV0rfyKyeulPgUKZOyar Ij0QsNCnO3O/yzFQdEj1/8gD4KK8RMs1k1QeTLnbJmawvaRR3+BkAijoPbKG2wWG vfcWnjirNaXkV7lJmQ+TrVfuKddZYwN4zsECJgA4Wute9p1v3dhpnY3VL0aoygWf Li/+t0C7+6fgMO+wZtC+BuM6pLl/8savtAqeYw/TYoojK/cAFAvnXbwlaEfXkm0e hFuoW2aR4SwgweANhcCHfmR0oaIvf1oypB+nLzI3yOrRY8nXBcWFzAUUXgu8B4KU zu0VYbC1EBvsP/RyEsuy/ektJp0LlAiC+oM= -----END CERTIFICATE-----Generated at Thu Mar 26 15:20:18 2026 by rpki-client