$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2135c46c-c6a0-313e-a123-2e27e1a3bd48.roa File: 2135c46c-c6a0-313e-a123-2e27e1a3bd48.roa (raw, json) Hash identifier: 31y8s068OHE8d2Y/q57cN336K1VNh5374uvGQTY0CUY= Subject key identifier: 86:B8:0C:A2:2C:DD:2C:20:72:4B:FD:52:05:02:BF:18:88:F8:BB:97 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759C5E6C92E7B8C42A36B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2135c46c-c6a0-313e-a123-2e27e1a3bd48.roa Signing time: Tue 10 Mar 2026 14:28:36 +0000 ROA not before: Tue 10 Mar 2026 14:28:36 +0000 ROA not after: Mon 08 Jun 2026 14:28:36 +0000 asID: 396552 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9c:5e:6c:92:e7:b8:c4:2a:36:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:36 2026 GMT Not After : Jun 8 14:28:36 2026 GMT Subject: CN=2157f564-d803-4fd3-99ad-7f461d5ef93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:da:24:c1:5d:1d:db:f8:2a:65:ec:1f:3d: ba:57:ba:13:48:8a:fc:32:d7:2d:8a:9d:c4:cf:f8: ff:7e:45:df:b0:49:3a:51:fa:86:44:9a:47:7f:a0: 98:99:b8:3e:76:64:b9:57:ba:77:7f:66:20:54:c7: 7e:a3:b9:5e:1e:c8:e5:7b:b9:19:d0:ef:71:44:9d: 2b:ba:e3:55:36:c0:cc:2b:bd:98:ed:a1:05:3a:a6: bb:a5:fd:ac:52:ca:4a:59:a9:42:06:4b:2c:dc:94: 01:e9:3b:4c:26:51:1e:55:e2:8e:8e:6c:c4:44:10: 82:c1:cc:ec:26:08:32:dc:c0:fa:9d:d0:e6:08:a8: 19:e4:21:67:63:83:09:e3:b0:2b:a0:51:de:a1:1b: fa:d1:45:06:51:d3:af:5d:ae:be:b8:c2:7f:a6:13: 52:19:55:14:8c:19:ba:0e:b4:65:2e:25:4b:76:2e: 2d:05:05:13:40:12:9d:ca:b9:2a:c3:00:48:6d:83: da:b5:dc:72:d6:d9:40:a3:a7:36:a7:6d:9b:fb:9b: dd:0d:c2:ea:8a:cd:81:e3:7a:f4:5a:c3:a5:9b:53: ec:a8:05:a3:ed:36:4f:a4:71:9f:73:df:3a:2e:e0: d9:22:37:bf:8d:3c:fb:eb:49:a4:5b:f5:f5:b7:be: 21:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B8:0C:A2:2C:DD:2C:20:72:4B:FD:52:05:02:BF:18:88:F8:BB:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2135c46c-c6a0-313e-a123-2e27e1a3bd48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:90:ad:04:fc:cd:39:5a:a1:9c:60:d3:5c:f5:24:7d:92:32: b8:14:de:14:cd:b7:10:7f:92:3f:00:f9:aa:d2:f4:44:0d:32: 6b:3b:e3:37:90:2b:8f:7c:67:cd:a2:75:06:74:2e:7f:79:0a: 5b:f9:76:01:c2:2d:fe:02:6d:ec:52:38:30:8d:e8:22:2a:70: 07:af:41:49:3f:ca:9a:4a:19:2c:b8:a1:0d:56:ac:fc:12:bb: 8c:ea:d5:51:23:f3:85:81:84:d6:f9:5d:53:7f:ef:7e:11:07: d9:e5:bd:b5:99:81:cd:b0:08:f0:bc:0c:5c:1c:e2:ea:6f:a9: de:1e:14:a1:a2:65:ec:23:84:1f:01:bb:85:7e:c5:3c:d4:6e: f3:85:ae:d2:8c:6d:6a:2e:32:31:16:3f:23:8e:40:55:0b:e2: a6:7e:0c:13:c9:35:a2:45:67:db:59:da:99:3b:49:b3:45:52: 54:b1:0f:85:74:3e:16:5c:1e:98:d3:4d:05:44:18:a1:f6:db: db:78:81:cd:2d:98:d1:fb:f0:5a:14:40:0f:13:05:10:2c:b7: 2c:a3:b0:8e:f1:47:d8:dc:b5:bd:4e:80:81:7d:25:60:b2:99: 0c:79:1c:16:9f:2c:e4:dc:00:e6:92:e4:49:8a:30:91:ac:82: 46:b4:d9:ef -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZxebJLnuMQqNrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzNloXDTI2MDYwODE0MjgzNlowLzEtMCsGA1UEAxMk MjE1N2Y1NjQtZDgwMy00ZmQzLTk5YWQtN2Y0NjFkNWVmOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYraJMFdHdv4KmXsHz26V7oTSIr8Mtctip3E z/j/fkXfsEk6UfqGRJpHf6CYmbg+dmS5V7p3f2YgVMd+o7leHsjle7kZ0O9xRJ0r uuNVNsDMK72Y7aEFOqa7pf2sUspKWalCBkss3JQB6TtMJlEeVeKOjmzERBCCwczs Jggy3MD6ndDmCKgZ5CFnY4MJ47AroFHeoRv60UUGUdOvXa6+uMJ/phNSGVUUjBm6 DrRlLiVLdi4tBQUTQBKdyrkqwwBIbYPatdxy1tlAo6c2p22b+5vdDcLqis2B43r0 WsOlm1PsqAWj7TZPpHGfc986LuDZIje/jTz760mkW/X1t74hJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIa4DKIs3Swgckv9UgUCvxiI+LuXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjEzNWM0NmMtYzZhMC0z MTNlLWExMjMtMmUyN2UxYTNiZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGqQrQT8zTlaoZxg01z1JH2SMrgU3hTNtxB/kj8A+arS9EQNMms7 4zeQK498Z82idQZ0Ln95Clv5dgHCLf4CbexSODCN6CIqcAevQUk/yppKGSy4oQ1W rPwSu4zq1VEj84WBhNb5XVN/734RB9nlvbWZgc2wCPC8DFwc4upvqd4eFKGiZewj hB8Bu4V+xTzUbvOFrtKMbWouMjEWPyOOQFUL4qZ+DBPJNaJFZ9tZ2pk7SbNFUlSx D4V0PhZcHpjTTQVEGKH229t4gc0tmNH78FoUQA8TBRAstyyjsI7xR9jctb1OgIF9 JWCymQx5HBafLOTcAOaS5EmKMJGsgka02e8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:07:34 2026 by rpki-client