$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36d154f8-54f8-3fc4-bc7d-796c74171f31.roa File: 36d154f8-54f8-3fc4-bc7d-796c74171f31.roa (raw, json) Hash identifier: My8uqA3dJsu8TUYV+duDIHVqtyAQjoW6MLsFzWA+mo8= Subject key identifier: 46:92:68:AE:14:D3:7D:7F:5A:C0:72:96:A2:D9:26:28:7D:A8:7E:86 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A2A6DC7233056D9A6840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36d154f8-54f8-3fc4-bc7d-796c74171f31.roa Signing time: Tue 10 Mar 2026 14:28:39 +0000 ROA not before: Tue 10 Mar 2026 14:28:39 +0000 ROA not after: Mon 08 Jun 2026 14:28:39 +0000 asID: 36626 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a2:a6:dc:72:33:05:6d:9a:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:39 2026 GMT Not After : Jun 8 14:28:39 2026 GMT Subject: CN=5fe8bab3-1d45-4591-b035-f20a47fd1368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4a:73:15:2d:24:11:5b:8f:44:8b:c4:e9:7e: c8:8e:3d:a4:d2:1f:76:55:0d:4a:da:08:bd:04:f4: 87:4b:b3:29:4b:0f:0d:be:b9:c8:0f:04:e4:8e:e5: 9e:18:6c:3a:f6:6b:d1:c5:b3:f9:60:21:4f:f0:20: 28:1a:ec:bf:d2:f9:56:4e:80:2a:45:56:74:d2:35: ef:1b:ba:b2:69:a7:38:89:3e:7d:78:e0:dc:e3:9a: 6a:d7:a4:be:06:df:41:ff:8a:4b:e2:34:ca:1c:6d: f4:64:42:6a:31:68:96:00:1a:5c:7c:34:cc:c9:b3: fc:8d:6b:99:6e:9f:ca:10:56:50:5c:13:c2:7a:66: 7c:78:5f:fa:fe:70:cf:90:05:58:5b:47:0c:56:fc: 97:2f:a0:9f:58:75:c3:8b:9a:cb:89:75:3e:1e:3c: 94:8c:93:12:6b:6b:14:26:b9:84:2f:1c:5b:19:5e: 44:5f:f2:86:de:98:05:18:37:52:c0:eb:bb:85:2e: 37:52:93:d4:00:30:ff:1d:0a:8e:96:89:34:26:ae: fb:71:e5:e0:b3:6a:81:c4:05:99:cc:70:4f:16:97: 17:df:b8:aa:0f:98:17:7c:d0:c2:ad:50:72:ee:da: f2:66:d5:da:dc:5a:41:45:2e:33:11:cd:c5:3b:2e: 90:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:92:68:AE:14:D3:7D:7F:5A:C0:72:96:A2:D9:26:28:7D:A8:7E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/36d154f8-54f8-3fc4-bc7d-796c74171f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a3:d0:e5:a7:db:64:e9:80:fb:73:f7:21:09:5d:41:f7:de: e7:98:1e:a0:08:76:94:98:7d:4a:6b:4e:56:27:85:e1:db:b8: 05:7c:5c:85:11:f0:41:f7:14:67:8f:45:93:39:14:2b:39:66: 12:e5:17:12:a9:3e:94:bd:d8:2c:be:32:ed:93:c1:8e:23:3d: d3:f6:71:11:74:f3:20:05:f3:2d:03:51:72:45:51:7f:e7:3b: df:bd:19:dd:9c:17:00:82:25:0c:03:d7:52:47:3a:ac:7d:1d: d3:ca:23:6d:f8:a1:18:46:fe:24:36:ab:c8:46:d0:2b:fb:16: ab:3a:ad:6f:f8:fe:e3:ce:54:a0:ab:fe:c6:59:cc:24:42:8d: fc:2e:cb:f3:cc:6c:65:38:e2:57:da:7e:a6:8d:ce:bd:a1:9b: bf:f7:a7:d3:24:e6:34:77:66:81:9e:45:17:18:9c:3f:bb:33: 2d:b6:5b:bc:ba:28:9d:4b:af:c9:d9:9d:2b:2c:78:8a:c3:6b: 9f:45:73:55:1d:c4:38:e0:b1:6f:b0:79:57:5f:bb:a1:f9:54: 47:15:07:0c:db:3f:a2:7f:38:89:63:53:51:6f:02:af:1c:7c: 70:02:f2:cd:9c:63:ec:8c:7d:fb:ca:3b:2a:44:e9:7b:75:0d: ea:20:93:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdaKm3HIzBW2aaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzOVoXDTI2MDYwODE0MjgzOVowLzEtMCsGA1UEAxMk NWZlOGJhYjMtMWQ0NS00NTkxLWIwMzUtZjIwYTQ3ZmQxMzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUpzFS0kEVuPRIvE6X7Ijj2k0h92VQ1K2gi9 BPSHS7MpSw8NvrnIDwTkjuWeGGw69mvRxbP5YCFP8CAoGuy/0vlWToAqRVZ00jXv G7qyaac4iT59eODc45pq16S+Bt9B/4pL4jTKHG30ZEJqMWiWABpcfDTMybP8jWuZ bp/KEFZQXBPCemZ8eF/6/nDPkAVYW0cMVvyXL6CfWHXDi5rLiXU+HjyUjJMSa2sU JrmELxxbGV5EX/KG3pgFGDdSwOu7hS43UpPUADD/HQqOlok0Jq77ceXgs2qBxAWZ zHBPFpcX37iqD5gXfNDCrVBy7tryZtXa3FpBRS4zEc3FOy6QQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEaSaK4U031/WsBylqLZJih9qH6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzZkMTU0ZjgtNTRmOC0z ZmM0LWJjN2QtNzk2Yzc0MTcxZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABGj0OWn22TpgPtz9yEJXUH33ueYHqAIdpSYfUprTlYnheHbuAV8 XIUR8EH3FGePRZM5FCs5ZhLlFxKpPpS92Cy+Mu2TwY4jPdP2cRF08yAF8y0DUXJF UX/nO9+9Gd2cFwCCJQwD11JHOqx9HdPKI234oRhG/iQ2q8hG0Cv7Fqs6rW/4/uPO VKCr/sZZzCRCjfwuy/PMbGU44lfafqaNzr2hm7/3p9Mk5jR3ZoGeRRcYnD+7My22 W7y6KJ1Lr8nZnSsseIrDa59Fc1UdxDjgsW+weVdfu6H5VEcVBwzbP6J/OIljU1Fv Aq8cfHAC8s2cY+yMffvKOypE6Xt1Deogk5M= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:31 2026 by rpki-client