$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/372c00c4-5c3e-3d91-8202-ead3e271c74a.roa File: 372c00c4-5c3e-3d91-8202-ead3e271c74a.roa (raw, json) Hash identifier: 1G1ZJslgwHnXRGXDTS0nRqkhvrKX2GS3BjSdQ6kW4J8= Subject key identifier: B5:1D:F9:40:7D:13:D7:C3:E2:65:CA:95:B1:CA:8D:81:68:D3:41:E3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C0360DF91C6376DB498E700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/372c00c4-5c3e-3d91-8202-ead3e271c74a.roa Signing time: Tue 03 Mar 2026 15:18:05 +0000 ROA not before: Tue 03 Mar 2026 15:18:05 +0000 ROA not after: Mon 01 Jun 2026 14:18:05 +0000 asID: 397209 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:60:df:91:c6:37:6d:b4:98:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:05 2026 GMT Not After : Jun 1 14:18:05 2026 GMT Subject: CN=bf313f5f-313e-4c4d-9305-fa4f37d660bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f6:12:1a:48:f4:64:c6:f4:1c:71:7b:2a:d8: 35:2a:22:cf:f9:fb:ce:b0:fd:c1:12:8a:26:38:0e: 5f:15:8f:ee:8b:01:e9:3e:e7:c0:13:cf:3b:e8:6a: 57:8e:82:d3:e0:8e:69:1f:de:ff:f2:cd:e7:66:ea: 3c:2d:c6:91:15:9c:46:11:a7:bc:24:12:f8:15:21: c7:75:a3:a2:9d:c2:db:e3:8d:ba:cd:ee:e1:28:ee: e9:30:f0:cd:49:f2:cd:3f:3c:33:a9:e0:be:90:4e: e4:79:54:04:1d:5d:b4:79:d8:65:f9:a3:27:c7:7a: ae:9c:1a:79:c6:68:c4:04:14:60:3f:6c:25:a2:ab: 4a:4d:07:ee:a4:ba:ec:e9:87:25:1c:7f:c3:d8:32: f2:34:04:42:e9:bd:81:b5:6f:97:d8:24:65:31:63: 6f:5f:7a:2c:a0:64:df:52:1b:53:c2:da:64:f5:90: f6:1b:74:58:88:dd:2e:29:1c:47:8f:95:ff:a1:05: bd:cc:78:99:8d:d6:77:07:d3:a6:72:55:49:f2:ec: 43:10:b8:c5:f2:cb:1f:da:5d:73:7d:0d:03:b8:4d: e3:75:ed:94:cc:c6:53:f7:fd:5e:ee:59:d2:91:b8: 68:7d:c6:7b:8d:5d:c3:96:64:99:1e:76:1f:fa:5a: c1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1D:F9:40:7D:13:D7:C3:E2:65:CA:95:B1:CA:8D:81:68:D3:41:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/372c00c4-5c3e-3d91-8202-ead3e271c74a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:85:dd:19:59:88:e5:12:94:c7:86:37:db:8d:4f:95:8d:43: 5b:37:11:20:e7:2a:9f:63:2d:bd:7e:51:a1:2a:31:f6:20:bf: 51:cd:98:b3:bd:4c:3d:b4:76:62:84:d8:04:62:c1:31:c0:f3: b0:8b:88:00:43:13:d4:9f:9a:71:22:8a:78:1f:0c:ed:fb:17: 6e:a4:ad:b1:15:be:6e:58:17:f1:51:27:f8:b0:3d:9c:bb:4e: fc:39:4d:e0:af:80:2e:43:8c:e6:a2:a0:fc:08:59:f4:ad:55: e3:06:47:4f:27:62:1e:f9:e0:0d:1c:9b:c5:ca:53:54:fe:ae: 0e:6b:5d:9b:d2:6c:49:d3:49:c3:54:89:b3:7e:cc:7c:d1:bf: 6c:25:1f:5e:5a:be:51:aa:69:16:65:27:99:1f:9d:9f:20:8b: 7a:2e:31:35:ea:21:7b:be:58:ba:29:81:cf:33:7a:36:4c:27: 47:5a:1e:36:8e:5a:1f:bf:26:c0:52:71:70:c8:f7:8b:21:95: 15:64:fe:e2:df:bd:d0:1c:59:51:eb:67:75:55:b4:78:fd:05: 1f:6e:85:1d:b4:61:68:56:a8:16:08:51:38:89:5d:b9:8b:8c: eb:72:5c:71:1b:d8:3c:cf:b3:e7:aa:43:ea:2d:40:56:a7:a2: 7d:fe:b4:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2DfkcY3bbSY5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwNVoXDTI2MDYwMTE0MTgwNVowLzEtMCsGA1UEAxMk YmYzMTNmNWYtMzEzZS00YzRkLTkzMDUtZmE0ZjM3ZDY2MGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfYSGkj0ZMb0HHF7Ktg1KiLP+fvOsP3BEoom OA5fFY/uiwHpPufAE8876GpXjoLT4I5pH97/8s3nZuo8LcaRFZxGEae8JBL4FSHH daOincLb4426ze7hKO7pMPDNSfLNPzwzqeC+kE7keVQEHV20edhl+aMnx3qunBp5 xmjEBBRgP2wloqtKTQfupLrs6YclHH/D2DLyNARC6b2BtW+X2CRlMWNvX3osoGTf UhtTwtpk9ZD2G3RYiN0uKRxHj5X/oQW9zHiZjdZ3B9OmclVJ8uxDELjF8ssf2l1z fQ0DuE3jde2UzMZT9/1e7lnSkbhofcZ7jV3DlmSZHnYf+lrBYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLUd+UB9E9fD4mXKlbHKjYFo00HjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzcyYzAwYzQtNWMzZS0z ZDkxLTgyMDItZWFkM2UyNzFjNzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFOF3RlZiOUSlMeGN9uNT5WNQ1s3ESDnKp9jLb1+UaEqMfYgv1HN mLO9TD20dmKE2ARiwTHA87CLiABDE9SfmnEiingfDO37F26krbEVvm5YF/FRJ/iw PZy7Tvw5TeCvgC5DjOaioPwIWfStVeMGR08nYh754A0cm8XKU1T+rg5rXZvSbEnT ScNUibN+zHzRv2wlH15avlGqaRZlJ5kfnZ8gi3ouMTXqIXu+WLopgc8zejZMJ0da HjaOWh+/JsBScXDI94shlRVk/uLfvdAcWVHrZ3VVtHj9BR9uhR20YWhWqBYIUTiJ XbmLjOtyXHEb2DzPs+eqQ+otQFanon3+tKA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:14:41 2026 by rpki-client