$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f9b9d55-4f79-328f-b817-56918549e217.roa File: 3f9b9d55-4f79-328f-b817-56918549e217.roa (raw, json) Hash identifier: mHRoBprB7dBS7T+t+ruCZvZh8wpoInifEEb0y5WSVpE= Subject key identifier: 7B:FD:F9:1E:E7:DA:F7:B0:1E:3B:6C:6F:0F:DB:32:AD:EC:95:B2:FC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A1EC5A3534A4080B06A8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f9b9d55-4f79-328f-b817-56918549e217.roa Signing time: Tue 10 Mar 2026 14:28:39 +0000 ROA not before: Tue 10 Mar 2026 14:28:39 +0000 ROA not after: Mon 08 Jun 2026 14:28:39 +0000 asID: 36630 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a1:ec:5a:35:34:a4:08:0b:06:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:39 2026 GMT Not After : Jun 8 14:28:39 2026 GMT Subject: CN=a6eb68d4-1e5d-4314-926a-9719f64bca40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:26:a6:67:b9:6f:c2:05:da:39:60:28:0d:46: 19:72:d5:7d:d9:ea:26:f9:83:9e:77:f2:fe:e6:cc: ca:9b:98:7e:8f:d8:29:70:c7:25:34:05:83:ae:ca: 30:1b:80:a5:a1:38:61:1f:a2:7d:11:7a:73:4b:07: fc:f6:82:83:83:a6:bd:4f:a6:4d:70:bb:b8:5f:44: 52:83:2f:9b:de:fe:11:57:af:79:43:ab:e3:11:ed: 24:5d:7c:6f:38:36:dd:1c:fb:39:16:24:c0:eb:81: 66:9c:37:ed:c5:8b:d4:d3:6b:e5:c0:90:d4:5a:89: d0:d6:e0:20:3b:aa:e6:73:98:3f:02:42:19:0d:91: 23:6b:e2:f6:7e:a2:e2:d1:78:85:c5:d9:3e:8a:d0: 88:d1:96:13:74:2b:9e:e7:c0:f7:4c:7d:23:dd:76: 56:4e:1a:bd:78:dc:76:cd:c2:71:cd:d7:86:bd:d1: 29:0c:c5:a4:fb:35:a8:93:c6:d2:fc:d4:00:f3:fc: 98:d6:0e:2d:a0:aa:02:a3:45:be:46:fd:8c:c2:41: b0:e3:b9:32:ee:ab:bb:94:12:82:2c:60:62:49:4f: 52:c2:02:60:f5:8a:91:7b:a3:71:af:61:c2:81:e5: 69:ba:f3:30:b2:5b:13:a4:67:18:c5:17:66:65:20: 70:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:F9:1E:E7:DA:F7:B0:1E:3B:6C:6F:0F:DB:32:AD:EC:95:B2:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f9b9d55-4f79-328f-b817-56918549e217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:fe:05:66:ca:a2:54:d8:d2:a8:47:2d:12:6d:eb:44:a5:ca: fd:22:f4:35:bc:c9:da:44:3d:b9:9d:0a:88:14:c1:59:6e:cf: 88:68:81:31:69:04:08:c0:71:8d:5e:aa:34:ce:f9:d1:f7:4c: c7:45:02:e6:da:ce:13:72:0d:19:17:ed:24:b0:a7:c3:88:ce: a4:37:b9:fd:aa:24:31:50:03:56:0d:a9:2e:f4:ea:05:62:2f: 4f:68:2c:7a:48:a3:f3:c5:50:9f:5d:3a:73:68:85:1c:b2:31: 1e:99:9e:d3:8f:0c:14:cd:74:c7:83:dd:95:e9:79:0e:f1:e5: e4:0a:03:b8:c1:af:86:b9:2a:11:ad:7c:1f:3d:fe:c2:7e:54: a2:ea:ae:90:5c:0a:eb:96:1e:be:8c:f8:44:2e:ef:64:c7:1b: cd:a6:ef:fb:10:7f:3c:2e:04:55:70:a1:2b:9b:ff:34:fa:02: 56:93:d6:64:23:46:37:b3:e0:2d:75:85:19:fd:d8:b1:1c:62: 25:55:80:32:1e:c1:f6:a6:4b:41:23:5c:3a:fd:b6:ac:c0:15: 5d:70:b4:e5:b0:20:73:c1:27:73:1c:b4:92:34:58:70:2a:9a: 03:3b:d1:42:b3:b1:8e:03:21:66:db:0e:3a:fa:95:92:fb:7e: 70:8a:f4:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdaHsWjU0pAgLBqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzOVoXDTI2MDYwODE0MjgzOVowLzEtMCsGA1UEAxMk YTZlYjY4ZDQtMWU1ZC00MzE0LTkyNmEtOTcxOWY2NGJjYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyamZ7lvwgXaOWAoDUYZctV92eom+YOed/L+ 5szKm5h+j9gpcMclNAWDrsowG4CloThhH6J9EXpzSwf89oKDg6a9T6ZNcLu4X0RS gy+b3v4RV695Q6vjEe0kXXxvODbdHPs5FiTA64FmnDftxYvU02vlwJDUWonQ1uAg O6rmc5g/AkIZDZEja+L2fqLi0XiFxdk+itCI0ZYTdCue58D3TH0j3XZWThq9eNx2 zcJxzdeGvdEpDMWk+zWok8bS/NQA8/yY1g4toKoCo0W+Rv2MwkGw47ky7qu7lBKC LGBiSU9SwgJg9YqRe6Nxr2HCgeVpuvMwslsTpGcYxRdmZSBwTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHv9+R7n2vewHjtsbw/bMq3slbL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Y5YjlkNTUtNGY3OS0z MjhmLWI4MTctNTY5MTg1NDllMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEX+BWbKolTY0qhHLRJt60Slyv0i9DW8ydpEPbmdCogUwVluz4ho gTFpBAjAcY1eqjTO+dH3TMdFAubazhNyDRkX7SSwp8OIzqQ3uf2qJDFQA1YNqS70 6gViL09oLHpIo/PFUJ9dOnNohRyyMR6ZntOPDBTNdMeD3ZXpeQ7x5eQKA7jBr4a5 KhGtfB89/sJ+VKLqrpBcCuuWHr6M+EQu72THG82m7/sQfzwuBFVwoSub/zT6AlaT 1mQjRjez4C11hRn92LEcYiVVgDIewfamS0EjXDr9tqzAFV1wtOWwIHPBJ3MctJI0 WHAqmgM70UKzsY4DIWbbDjr6lZL7fnCK9N8= -----END CERTIFICATE-----Generated at Fri Mar 27 00:14:50 2026 by rpki-client