$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27ed6586-37a3-3dfc-8d2e-aa822f1c0034.roa File: 27ed6586-37a3-3dfc-8d2e-aa822f1c0034.roa (raw, json) Hash identifier: A0Dfnog++5C1Beus9e3okbH5xJB+gy6ArEEwV6JyqAs= Subject key identifier: 21:B0:AA:84:1E:BF:D9:00:A3:3D:03:17:32:A7:54:22:20:7C:BE:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF90D8FA5AB54AA077F980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27ed6586-37a3-3dfc-8d2e-aa822f1c0034.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396588 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:90:d8:fa:5a:b5:4a:a0:77:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=0f164a2a-6a77-4bcc-a52a-f6c53d129079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:26:0c:77:09:5f:c9:fa:09:b0:0f:52:06:0f: 00:28:f1:af:20:ef:21:2b:af:51:12:35:56:0b:f5: 03:ee:24:61:39:40:0d:d4:35:60:7c:84:9f:52:c4: 1c:4c:69:72:ac:24:b2:9b:e1:a2:7c:bb:fc:e9:65: 9a:0c:15:ed:71:5e:15:35:c0:83:95:d1:c1:a8:43: 60:d8:f9:24:8f:a6:d8:e5:96:13:f0:9f:89:f7:5b: 04:03:c3:2d:c9:db:04:02:39:c2:a4:92:40:48:d2: ac:f2:33:25:8f:6e:74:5b:98:58:b8:04:f9:09:ed: 5b:a7:0e:6e:bc:43:00:4f:ef:db:f8:1a:ed:c5:df: a6:79:b4:4f:09:6a:4b:03:9e:30:a7:3c:ee:1b:90: 95:7b:ed:75:3f:9c:84:f3:f7:54:a9:18:69:1e:2b: e8:98:99:40:0a:5c:1f:65:0b:46:6f:12:4e:96:9f: 09:cb:be:2f:2d:f0:09:ae:e6:8f:0d:51:7d:0a:ca: 19:2b:1b:8f:17:e2:26:16:00:fb:17:f5:48:64:93: 75:a5:48:4d:fe:e9:9c:49:b2:b2:ab:ab:01:b6:12: 70:22:66:e4:2d:0d:0e:fb:1e:e1:61:ff:ef:1b:60: d3:a9:cc:87:4f:d1:46:15:f3:a1:f6:b1:18:c8:30: f0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:B0:AA:84:1E:BF:D9:00:A3:3D:03:17:32:A7:54:22:20:7C:BE:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/27ed6586-37a3-3dfc-8d2e-aa822f1c0034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:31:07:d8:63:6b:e7:b4:ea:a9:37:d1:c6:6e:e2:03:61:79: 7b:35:89:3e:86:a7:29:e4:d2:47:38:b9:0b:ec:0d:02:77:86: 02:18:0b:04:41:e4:69:36:36:41:37:9d:b7:1a:fe:ca:79:17: 62:25:90:67:f3:b4:ad:40:09:92:a5:2c:89:34:09:98:3d:78: 58:12:58:be:30:a0:75:26:45:15:63:67:56:ef:10:b5:57:2f: 19:4e:ec:ab:33:59:8c:4c:05:f7:60:43:62:93:c8:da:1d:50: 94:85:0a:af:57:7c:d7:fa:bc:34:24:b5:1a:38:79:00:5e:31: c8:43:3f:a9:70:be:ba:e0:9b:08:14:76:04:09:f7:b2:27:e3: 14:eb:a7:b6:8f:b5:45:38:77:06:87:95:58:ba:4f:7a:97:1f: 40:15:25:a9:50:eb:0a:cf:4d:d8:7b:d2:1d:02:0a:80:16:b7: 38:c2:c9:5a:43:d5:c5:bf:8c:86:09:e4:2f:fa:33:c2:c6:24: ca:78:11:6b:a3:d4:4d:51:15:fe:93:7c:22:98:61:fc:2a:93: fe:b4:0f:3f:fc:3d:63:7e:6d:53:5c:20:37:b8:0e:e4:41:8f: f5:3d:3a:72:5f:91:35:66:7b:55:e3:57:2b:8f:d9:8d:c2:00: 67:ab:17:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/5DY+lq1SqB3+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MGYxNjRhMmEtNmE3Ny00YmNjLWE1MmEtZjZjNTNkMTI5MDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSYMdwlfyfoJsA9SBg8AKPGvIO8hK69REjVW C/UD7iRhOUAN1DVgfISfUsQcTGlyrCSym+GifLv86WWaDBXtcV4VNcCDldHBqENg 2Pkkj6bY5ZYT8J+J91sEA8MtydsEAjnCpJJASNKs8jMlj250W5hYuAT5Ce1bpw5u vEMAT+/b+Brtxd+mebRPCWpLA54wpzzuG5CVe+11P5yE8/dUqRhpHivomJlAClwf ZQtGbxJOlp8Jy74vLfAJruaPDVF9CsoZKxuPF+ImFgD7F/VIZJN1pUhN/umcSbKy q6sBthJwImbkLQ0O+x7hYf/vG2DTqcyHT9FGFfOh9rEYyDDw9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCGwqoQev9kAoz0DFzKnVCIgfL4ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjdlZDY1ODYtMzdhMy0z ZGZjLThkMmUtYWE4MjJmMWMwMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC0xB9hja+e06qk30cZu4gNheXs1iT6Gpynk0kc4uQvsDQJ3hgIY CwRB5Gk2NkE3nbca/sp5F2IlkGfztK1ACZKlLIk0CZg9eFgSWL4woHUmRRVjZ1bv ELVXLxlO7KszWYxMBfdgQ2KTyNodUJSFCq9XfNf6vDQktRo4eQBeMchDP6lwvrrg mwgUdgQJ97In4xTrp7aPtUU4dwaHlVi6T3qXH0AVJalQ6wrPTdh70h0CCoAWtzjC yVpD1cW/jIYJ5C/6M8LGJMp4EWuj1E1RFf6TfCKYYfwqk/60Dz/8PWN+bVNcIDe4 DuRBj/U9OnJfkTVme1XjVyuP2Y3CAGerF+w= -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:54 2026 by rpki-client