$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/276e8b68-a7f6-394e-93ec-fa74c65d188e.roa File: 276e8b68-a7f6-394e-93ec-fa74c65d188e.roa (raw, json) Hash identifier: 4ROuvdfwRqAYhXhSvy0mri1RI7rt7AMXxX0gG+3l6Kg= Subject key identifier: F0:82:F6:1D:7A:5B:F8:67:66:FA:72:3B:65:3C:0D:68:1B:B9:F5:D1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A151E47F4768234D6500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/276e8b68-a7f6-394e-93ec-fa74c65d188e.roa Signing time: Tue 10 Mar 2026 14:28:39 +0000 ROA not before: Tue 10 Mar 2026 14:28:39 +0000 ROA not after: Mon 08 Jun 2026 14:28:39 +0000 asID: 396615 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a1:51:e4:7f:47:68:23:4d:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:39 2026 GMT Not After : Jun 8 14:28:39 2026 GMT Subject: CN=358905e7-aeea-4570-9e9e-0a46195b1c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:15:93:63:a2:b5:f2:ba:ed:fd:b7:ff:f0:c6: 7c:cd:0b:29:2d:d3:4a:37:c5:13:39:9a:a9:ca:1f: 54:ec:e4:b4:08:b8:53:0f:b6:2c:a4:32:64:e1:5d: 79:f1:7f:90:c5:84:9c:f9:9b:d0:0b:1f:62:da:73: ac:af:10:da:62:a8:da:05:4d:d3:b8:fd:95:d5:b1: 86:5a:dd:c8:e9:13:d2:7d:8a:e7:fa:d4:dc:a8:b8: c2:a2:51:86:13:a3:7d:30:ee:aa:82:57:be:83:19: 7a:a9:24:9e:24:e9:d1:b0:3b:5a:20:40:5d:29:eb: a9:0b:bf:ad:44:37:70:37:28:1f:a0:b0:0b:53:31: 39:10:67:87:25:cb:b5:1d:15:73:36:d6:bc:a5:e8: 9a:82:84:bd:bb:bb:03:96:18:03:e2:2d:98:03:97: 2a:d5:c2:69:f9:97:26:50:91:a4:de:9f:f5:b9:a1: e7:45:36:da:04:8c:c1:39:f2:29:f3:00:92:57:76: c7:92:f7:2e:1c:26:02:2d:63:be:b2:d4:a0:7f:80: c9:94:aa:a3:4f:9e:a4:3e:b6:4d:e9:b1:35:9d:c5: 7f:35:bf:bd:ae:1a:6f:fe:b2:0b:c9:85:2d:cd:52: c6:a5:09:9f:47:80:a7:42:12:b5:de:a7:5a:ce:06: e2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:82:F6:1D:7A:5B:F8:67:66:FA:72:3B:65:3C:0D:68:1B:B9:F5:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/276e8b68-a7f6-394e-93ec-fa74c65d188e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:4a:b7:4b:eb:45:95:dc:54:a5:7a:28:78:ff:57:2c:89:e6: 92:ee:19:73:02:ba:8d:d3:d8:0e:0e:4b:c3:ae:db:5d:97:3f: 25:d9:e3:a5:6b:13:59:87:ad:3c:35:be:aa:79:80:4b:b6:86: 1a:41:09:23:41:04:b4:97:3f:79:d5:d9:54:a6:d8:77:fd:c8: 46:9f:54:fe:3f:ae:be:98:5b:8e:40:08:6e:16:37:11:e8:1f: 2e:76:ed:d2:fb:c8:82:01:d9:ea:09:76:b1:d0:e9:f4:37:38: bd:d3:8a:eb:80:53:42:bc:13:d8:e4:5f:7c:7f:2d:93:dc:83: ea:4d:9c:5a:43:1d:32:18:e1:40:f7:96:39:0c:37:32:e1:de: e4:74:35:bf:d4:84:5d:9f:33:4a:a6:8a:03:0d:c2:c7:db:86: a7:d6:c3:23:07:ed:32:05:4e:0d:b7:fe:b2:aa:99:40:48:d5: 7a:23:60:de:cc:c0:a2:64:71:ee:45:8a:e1:de:7c:4b:57:3b: 85:8d:ef:22:27:59:5a:3d:dc:b4:d6:86:25:2a:7f:21:30:85: 75:1d:11:78:51:58:b3:97:b2:a7:21:8a:73:1d:4e:ff:54:29: 1b:16:ef:4b:57:79:57:37:42:17:a3:cb:20:24:10:58:a5:45: 3e:22:af:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdaFR5H9HaCNNZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzOVoXDTI2MDYwODE0MjgzOVowLzEtMCsGA1UEAxMk MzU4OTA1ZTctYWVlYS00NTcwLTllOWUtMGE0NjE5NWIxYzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxWTY6K18rrt/bf/8MZ8zQspLdNKN8UTOZqp yh9U7OS0CLhTD7YspDJk4V158X+QxYSc+ZvQCx9i2nOsrxDaYqjaBU3TuP2V1bGG Wt3I6RPSfYrn+tTcqLjColGGE6N9MO6qgle+gxl6qSSeJOnRsDtaIEBdKeupC7+t RDdwNygfoLALUzE5EGeHJcu1HRVzNta8peiagoS9u7sDlhgD4i2YA5cq1cJp+Zcm UJGk3p/1uaHnRTbaBIzBOfIp8wCSV3bHkvcuHCYCLWO+stSgf4DJlKqjT56kPrZN 6bE1ncV/Nb+9rhpv/rILyYUtzVLGpQmfR4CnQhK13qdazgbicQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPCC9h16W/hnZvpyO2U8DWgbufXRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjc2ZThiNjgtYTdmNi0z OTRlLTkzZWMtZmE3NGM2NWQxODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL1Kt0vrRZXcVKV6KHj/VyyJ5pLuGXMCuo3T2A4OS8Ou212XPyXZ 46VrE1mHrTw1vqp5gEu2hhpBCSNBBLSXP3nV2VSm2Hf9yEafVP4/rr6YW45ACG4W NxHoHy527dL7yIIB2eoJdrHQ6fQ3OL3TiuuAU0K8E9jkX3x/LZPcg+pNnFpDHTIY 4UD3ljkMNzLh3uR0Nb/UhF2fM0qmigMNwsfbhqfWwyMH7TIFTg23/rKqmUBI1Xoj YN7MwKJkce5FiuHefEtXO4WN7yInWVo93LTWhiUqfyEwhXUdEXhRWLOXsqchinMd Tv9UKRsW70tXeVc3QhejyyAkEFilRT4ir0k= -----END CERTIFICATE-----Generated at Thu Mar 26 17:13:10 2026 by rpki-client