$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28ed7b78-8eee-31f3-acde-b0717292ed5b.roa File: 28ed7b78-8eee-31f3-acde-b0717292ed5b.roa (raw, json) Hash identifier: ueArFPqr8O+f0p16siQ7+3Rtt4oSALs8vUV6fDS6lMs= Subject key identifier: FE:6A:D3:F6:6E:BD:F6:07:87:CD:71:F5:B7:80:80:1A:88:4C:4A:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C036C05BAD9B7636BB694C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28ed7b78-8eee-31f3-acde-b0717292ed5b.roa Signing time: Tue 03 Mar 2026 15:18:10 +0000 ROA not before: Tue 03 Mar 2026 15:18:10 +0000 ROA not after: Mon 01 Jun 2026 14:18:10 +0000 asID: 36622 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:6c:05:ba:d9:b7:63:6b:b6:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:10 2026 GMT Not After : Jun 1 14:18:10 2026 GMT Subject: CN=2c7c198b-0e13-4201-b798-a3ca3d25b1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:1f:f8:d4:bd:ef:01:4d:f7:0c:bc:10:a7: 1e:66:5f:76:6a:bb:51:ed:73:28:53:7d:4d:b1:c6: ca:59:a0:b4:c4:cc:43:5c:ac:9c:b8:1d:f5:29:98: 29:63:2f:ab:4b:a0:7d:7c:a1:76:86:43:69:d3:56: 50:56:55:bc:70:1a:1c:13:77:27:60:1d:42:c1:98: eb:1e:86:00:8d:08:5c:a8:e9:dc:13:f5:fa:c7:fd: 63:c1:bb:b4:4f:ad:4b:dd:64:c8:8a:77:79:11:e3: c2:4f:22:c5:dc:ff:fc:9d:0d:ac:9b:62:f8:e0:19: 07:02:48:89:c3:38:46:1e:30:da:60:0f:db:70:1b: 75:7c:70:d6:91:8c:5f:7d:46:36:06:19:e6:7c:37: 2b:97:15:1d:4b:61:a9:89:02:03:ec:39:7b:01:a2: 61:1f:95:d9:4b:1c:8d:95:a3:ca:cd:d7:bf:23:31: 52:6b:6d:53:67:fc:ad:b6:06:61:56:9f:93:1b:82: b3:ad:45:81:fa:52:43:94:72:2f:4b:a5:30:da:9f: 32:04:fa:1d:56:af:bd:cd:f3:04:88:8e:8e:b8:5d: 5b:e8:4e:db:00:92:95:ec:d5:4b:4b:78:d0:06:51: f2:ed:e9:b6:fa:f5:df:73:ad:a3:19:65:76:ff:6f: 9c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6A:D3:F6:6E:BD:F6:07:87:CD:71:F5:B7:80:80:1A:88:4C:4A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28ed7b78-8eee-31f3-acde-b0717292ed5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:cd:b9:2a:83:03:2f:f7:86:90:91:fb:42:d0:5a:d8:f2:d4: de:57:f2:93:a6:02:85:14:da:5d:65:d1:dd:ed:d2:e9:8f:65: b8:ca:4d:90:f5:29:3c:8e:d4:59:4d:5f:93:cc:4f:b5:0e:e4: 3d:10:10:56:01:e8:ec:97:98:6e:26:16:9e:75:05:5c:5f:f5: 22:e9:bf:b8:50:b6:b0:eb:8f:c2:2d:f8:a3:7a:fe:c7:63:ef: cf:d3:c4:47:71:d8:0b:c8:5d:c3:fc:38:72:8f:9b:d2:9e:24: 9b:75:d9:e8:14:26:db:c3:cb:dc:ac:7f:04:6d:1d:a0:36:aa: 81:a2:4e:18:45:f6:c9:bb:2c:7d:fe:64:de:30:fe:cd:57:56: f7:63:ff:9d:a3:89:4c:36:b8:1a:de:90:04:fa:50:5a:59:f4: c1:08:84:20:d8:96:fa:f3:25:94:76:b7:be:4a:0d:48:bc:d0: be:90:eb:7c:33:c1:cd:72:20:34:55:0e:53:40:30:78:1b:fb: 64:12:da:65:8f:4c:56:52:46:c4:91:75:76:e0:55:16:53:52: c6:ac:50:df:15:5a:75:36:e0:53:c7:d8:2b:1f:24:bb:43:bd: 78:99:a6:af:ff:39:df:4c:13:e5:03:db:fb:63:e3:9b:9c:b3: 35:2f:f7:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2wFutm3Y2u2lMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgxMFoXDTI2MDYwMTE0MTgxMFowLzEtMCsGA1UEAxMk MmM3YzE5OGItMGUxMy00MjAxLWI3OTgtYTNjYTNkMjViMWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9cf+NS97wFN9wy8EKceZl92artR7XMoU31N scbKWaC0xMxDXKycuB31KZgpYy+rS6B9fKF2hkNp01ZQVlW8cBocE3cnYB1CwZjr HoYAjQhcqOncE/X6x/1jwbu0T61L3WTIind5EePCTyLF3P/8nQ2sm2L44BkHAkiJ wzhGHjDaYA/bcBt1fHDWkYxffUY2BhnmfDcrlxUdS2GpiQID7Dl7AaJhH5XZSxyN laPKzde/IzFSa21TZ/yttgZhVp+TG4KzrUWB+lJDlHIvS6Uw2p8yBPodVq+9zfME iI6OuF1b6E7bAJKV7NVLS3jQBlHy7em2+vXfc62jGWV2/2+cDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP5q0/ZuvfYHh81x9beAgBqITEolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjhlZDdiNzgtOGVlZS0z MWYzLWFjZGUtYjA3MTcyOTJlZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKvNuSqDAy/3hpCR+0LQWtjy1N5X8pOmAoUU2l1l0d3t0umPZbjK TZD1KTyO1FlNX5PMT7UO5D0QEFYB6OyXmG4mFp51BVxf9SLpv7hQtrDrj8It+KN6 /sdj78/TxEdx2AvIXcP8OHKPm9KeJJt12egUJtvDy9ysfwRtHaA2qoGiThhF9sm7 LH3+ZN4w/s1XVvdj/52jiUw2uBrekAT6UFpZ9MEIhCDYlvrzJZR2t75KDUi80L6Q 63wzwc1yIDRVDlNAMHgb+2QS2mWPTFZSRsSRdXbgVRZTUsasUN8VWnU24FPH2Csf JLtDvXiZpq//Od9ME+UD2/tj45ucszUv944= -----END CERTIFICATE-----Generated at Thu Mar 26 13:14:51 2026 by rpki-client