$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af4d4f4-12eb-3c74-869e-8bf437e1a96c.roa File: 3af4d4f4-12eb-3c74-869e-8bf437e1a96c.roa (raw, json) Hash identifier: HfHdlgsTwiRyGUFTVfeGM14FExI0OScNzEc3u9SCQIg= Subject key identifier: 3C:6B:98:D3:1F:29:F9:F1:74:EF:1D:D9:C8:A2:C4:0E:B0:BE:78:75 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A71B7411A5CABD4F3580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af4d4f4-12eb-3c74-869e-8bf437e1a96c.roa Signing time: Tue 10 Mar 2026 14:28:41 +0000 ROA not before: Tue 10 Mar 2026 14:28:41 +0000 ROA not after: Mon 08 Jun 2026 14:28:41 +0000 asID: 396563 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a7:1b:74:11:a5:ca:bd:4f:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:41 2026 GMT Not After : Jun 8 14:28:41 2026 GMT Subject: CN=10f672ff-2f0e-4d18-9b5a-7cc9e8ec5ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d3:d0:76:0e:04:8d:0c:62:b5:51:93:c3:8f: 03:c9:52:5a:81:88:58:4f:d5:a8:f8:3a:7a:29:de: 8d:1b:bc:97:d3:5c:38:cb:16:1f:d4:c1:e7:e8:2e: 3e:8f:b9:ba:42:97:4e:6b:d5:f8:9b:f5:aa:7c:35: a7:94:6f:39:0f:22:f5:05:2a:13:d8:1d:ac:e7:17: 24:4c:9d:4d:39:d9:42:2c:ac:e7:2f:95:e4:97:79: 25:e4:12:b4:d0:19:23:e4:f2:a3:8a:2c:6f:4d:3a: 5c:71:f6:20:7c:e8:c8:9f:af:59:bf:d9:27:d5:67: 3e:f2:47:6f:aa:1d:a3:1e:f9:67:c2:96:7e:15:60: d9:fb:83:3f:71:09:e6:83:1c:cb:47:74:a1:04:c3: fa:40:ef:04:76:9d:78:26:84:3c:73:ce:8f:72:cc: d4:e7:a1:b7:bc:01:44:0c:fe:f3:7a:5b:e1:8d:0d: bd:6f:a0:ea:07:d3:06:00:05:1d:85:77:60:dc:41: 26:d9:34:57:b1:ed:77:0a:d8:f8:3c:b1:bb:c5:58: 08:b0:a8:3c:23:93:e0:d7:7d:ca:5b:6a:aa:1a:ed: 45:6c:e9:82:ce:0c:24:60:bd:51:cf:fc:cd:36:eb: bc:1c:ed:84:ff:06:63:b6:73:2f:64:19:88:0c:38: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6B:98:D3:1F:29:F9:F1:74:EF:1D:D9:C8:A2:C4:0E:B0:BE:78:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3af4d4f4-12eb-3c74-869e-8bf437e1a96c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:0f:7f:df:56:fe:c2:58:46:e8:aa:57:ce:b6:b9:2e:b9:6d: 96:b0:fe:b4:3f:30:97:d8:6f:1c:ad:5b:19:06:ee:5b:ba:5d: 95:bc:16:4a:14:fc:78:06:48:ed:85:c1:95:e0:71:bd:fe:2d: 15:b3:31:c0:18:a1:91:14:ba:40:a3:7e:ff:c5:4f:99:0e:a3: fc:57:93:52:f6:12:05:d3:e6:60:2c:93:23:51:d4:17:85:67: 33:1c:99:77:46:25:f9:e5:1a:66:f6:4c:ff:38:7d:c6:ec:3f: 88:cf:8b:ae:25:be:3b:10:3d:8d:c7:90:7e:66:63:2e:df:46: d2:54:60:41:ba:84:01:48:77:d8:6d:ec:9f:05:da:c9:0e:15: 77:14:a1:82:db:9c:09:28:65:7a:ea:29:53:e8:9c:8c:70:8a: 3d:ec:f9:57:17:77:c9:fb:43:f0:13:1a:09:5a:d1:84:7b:fd: a5:0f:55:97:0a:04:34:3c:9a:e7:49:6a:7d:2a:bb:c9:be:42: 55:55:a4:14:fc:1b:fd:77:c0:9c:0a:26:6e:18:82:ad:72:13: 2b:f4:72:ff:19:97:fb:2b:9e:38:11:d5:31:78:4f:7c:76:c6: 7a:04:6d:12:ea:87:ed:cf:db:7e:d0:cb:ac:38:5e:1a:c9:88: d1:da:ef:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdacbdBGlyr1PNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0Mjg0MVoXDTI2MDYwODE0Mjg0MVowLzEtMCsGA1UEAxMk MTBmNjcyZmYtMmYwZS00ZDE4LTliNWEtN2NjOWU4ZWM1ZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdPQdg4EjQxitVGTw48DyVJagYhYT9Wo+Dp6 Kd6NG7yX01w4yxYf1MHn6C4+j7m6QpdOa9X4m/WqfDWnlG85DyL1BSoT2B2s5xck TJ1NOdlCLKznL5Xkl3kl5BK00Bkj5PKjiixvTTpccfYgfOjIn69Zv9kn1Wc+8kdv qh2jHvlnwpZ+FWDZ+4M/cQnmgxzLR3ShBMP6QO8Edp14JoQ8c86PcszU56G3vAFE DP7zelvhjQ29b6DqB9MGAAUdhXdg3EEm2TRXse13Ctj4PLG7xVgIsKg8I5Pg133K W2qqGu1FbOmCzgwkYL1Rz/zNNuu8HO2E/wZjtnMvZBmIDDiZiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDxrmNMfKfnxdO8d2ciixA6wvnh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FmNGQ0ZjQtMTJlYi0z Yzc0LTg2OWUtOGJmNDM3ZTFhOTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGMPf99W/sJYRuiqV862uS65bZaw/rQ/MJfYbxytWxkG7lu6XZW8 FkoU/HgGSO2FwZXgcb3+LRWzMcAYoZEUukCjfv/FT5kOo/xXk1L2EgXT5mAskyNR 1BeFZzMcmXdGJfnlGmb2TP84fcbsP4jPi64lvjsQPY3HkH5mYy7fRtJUYEG6hAFI d9ht7J8F2skOFXcUoYLbnAkoZXrqKVPonIxwij3s+VcXd8n7Q/ATGgla0YR7/aUP VZcKBDQ8mudJan0qu8m+QlVVpBT8G/13wJwKJm4Ygq1yEyv0cv8Zl/srnjgR1TF4 T3x2xnoEbRLqh+3P237Qy6w4XhrJiNHa7yw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:07:24 2026 by rpki-client