$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc9d95-ad56-3447-bdde-ef5670a4fce3.roa File: 2fbc9d95-ad56-3447-bdde-ef5670a4fce3.roa (raw, json) Hash identifier: ocXregmetRZQis1Qy/8r/7k62+fmkpOj+ODYcuYRXM4= Subject key identifier: 8E:76:FC:23:71:01:81:C0:4E:70:21:A3:B0:3E:42:87:49:2E:78:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A8DC52561C9E8B22D800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc9d95-ad56-3447-bdde-ef5670a4fce3.roa Signing time: Tue 10 Mar 2026 14:28:42 +0000 ROA not before: Tue 10 Mar 2026 14:28:42 +0000 ROA not after: Mon 08 Jun 2026 14:28:42 +0000 asID: 36618 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a8:dc:52:56:1c:9e:8b:22:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:42 2026 GMT Not After : Jun 8 14:28:42 2026 GMT Subject: CN=32c48af9-06b9-4d77-9ab5-4994c600a4ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6c:87:16:44:d4:c1:ec:8e:7f:32:c0:7c:bb: fe:16:d5:ac:cb:9a:05:fb:99:e4:5e:57:8c:aa:3c: 0e:21:98:33:74:35:f2:64:84:85:7d:f5:62:b5:b2: 03:58:ac:74:87:c1:6f:8a:76:86:a2:e3:df:64:39: e7:2f:4d:c4:28:3b:9d:76:7a:af:85:2b:8d:28:12: c7:15:4a:25:bf:02:00:76:3d:cf:a4:4a:3e:40:81: 71:d8:5e:3e:36:8c:7b:c5:20:d9:3c:79:e0:ca:62: 2b:4b:79:26:bf:81:38:1f:cb:f0:cd:bd:88:5e:63: 3a:dd:e5:d4:cc:f5:e8:a5:fe:b6:cb:6f:b4:01:a4: 8e:08:b9:69:1b:8b:88:75:98:78:e9:34:14:d0:d0: 06:36:9c:88:91:ab:d3:02:ff:69:cb:9d:6e:5a:f3: e9:0e:1b:4b:e7:d0:5a:51:a6:40:8c:2d:c3:1a:f2: da:b3:89:ae:80:32:cb:b0:ed:f7:40:9c:59:ff:d7: b7:c8:bb:15:93:d5:43:56:ad:6f:c6:3c:b9:c5:eb: 59:f1:35:9a:28:a9:6f:bc:f5:00:13:c6:7c:de:76: fb:3d:b5:63:7a:37:16:36:9e:ff:05:b1:b7:c1:d0: 47:6a:32:60:2d:f1:bf:50:52:87:52:1e:9e:18:4a: 86:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:76:FC:23:71:01:81:C0:4E:70:21:A3:B0:3E:42:87:49:2E:78:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2fbc9d95-ad56-3447-bdde-ef5670a4fce3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:34:44:f1:9c:75:d1:57:ef:97:61:1e:74:f5:7f:5b:67:2e: 6c:81:e9:e3:f6:77:ec:22:ad:9e:ce:37:06:26:ca:68:dc:68: 0b:ee:e1:2a:25:87:34:6f:28:07:4e:3f:4b:cb:3f:13:6a:e3: e6:82:d4:5e:e9:77:50:a8:47:e3:ef:85:e3:08:94:d9:5f:b8: 71:47:ed:04:7b:a2:04:5a:be:61:19:de:7b:50:8b:f9:42:11: d2:56:fc:c9:99:9d:78:fc:e1:0a:30:62:0c:b5:13:87:3f:35: e3:f6:ae:9c:6d:4a:4f:46:68:39:30:c4:77:eb:3b:72:c3:bd: ed:fd:af:6e:df:28:26:87:ab:88:66:96:e0:9c:35:bd:82:24: 05:d0:a0:10:16:16:52:a7:1e:a9:fd:86:1e:00:ae:e2:ad:cc: 8b:b1:1d:a3:a3:48:b7:78:52:58:52:ac:c3:10:e8:96:27:cc: 64:4e:11:94:d2:ba:02:07:cf:31:02:cc:0f:db:64:55:0e:21: b4:c6:55:b1:be:31:d1:f2:c6:cc:f0:90:52:bb:3e:df:e8:e8: f6:b8:18:c2:b9:78:b9:93:b5:6e:a3:80:85:5c:96:ab:53:76: 2e:30:a3:60:d4:0a:41:08:14:62:e9:d0:c8:1b:63:25:54:6c: c1:43:a4:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdajcUlYcnosi2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0Mjg0MloXDTI2MDYwODE0Mjg0MlowLzEtMCsGA1UEAxMk MzJjNDhhZjktMDZiOS00ZDc3LTlhYjUtNDk5NGM2MDBhNGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimyHFkTUweyOfzLAfLv+FtWsy5oF+5nkXleM qjwOIZgzdDXyZISFffVitbIDWKx0h8FvinaGouPfZDnnL03EKDuddnqvhSuNKBLH FUolvwIAdj3PpEo+QIFx2F4+Nox7xSDZPHngymIrS3kmv4E4H8vwzb2IXmM63eXU zPXopf62y2+0AaSOCLlpG4uIdZh46TQU0NAGNpyIkavTAv9py51uWvPpDhtL59Ba UaZAjC3DGvLas4mugDLLsO33QJxZ/9e3yLsVk9VDVq1vxjy5xetZ8TWaKKlvvPUA E8Z83nb7PbVjejcWNp7/BbG3wdBHajJgLfG/UFKHUh6eGEqGmwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI52/CNxAYHATnAho7A+QodJLnjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmZiYzlkOTUtYWQ1Ni0z NDQ3LWJkZGUtZWY1NjcwYTRmY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEM0RPGcddFX75dhHnT1f1tnLmyB6eP2d+wirZ7ONwYmymjcaAvu 4SolhzRvKAdOP0vLPxNq4+aC1F7pd1CoR+PvheMIlNlfuHFH7QR7ogRavmEZ3ntQ i/lCEdJW/MmZnXj84QowYgy1E4c/NeP2rpxtSk9GaDkwxHfrO3LDve39r27fKCaH q4hmluCcNb2CJAXQoBAWFlKnHqn9hh4AruKtzIuxHaOjSLd4UlhSrMMQ6JYnzGRO EZTSugIHzzECzA/bZFUOIbTGVbG+MdHyxszwkFK7Pt/o6Pa4GMK5eLmTtW6jgIVc lqtTdi4wo2DUCkEIFGLp0MgbYyVUbMFDpNY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:40:54 2026 by rpki-client