$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40757ef2-8c1a-3cd2-8fd4-8d37c67e3627.roa File: 40757ef2-8c1a-3cd2-8fd4-8d37c67e3627.roa (raw, json) Hash identifier: gckgf4MuPgFDUxLA4wWoc0MLgIvLBOG9tIh0MeuxnMo= Subject key identifier: 7E:9C:F2:53:BD:64:60:09:F4:FD:5F:7F:44:EE:F7:C0:56:1B:90:79 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F4A6BF6064C083741152BC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40757ef2-8c1a-3cd2-8fd4-8d37c67e3627.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396611 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:6b:f6:06:4c:08:37:41:15:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=41371df3-3bdf-468d-86d2-a99dca5b5303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f2:44:0d:2a:83:e9:54:36:79:c3:a0:f8:77: d5:f8:4d:9d:ac:6d:ce:70:98:6e:9e:7b:37:4b:be: c8:26:29:dc:bd:d8:b0:79:46:d8:ea:22:3c:8c:26: be:bd:ef:06:63:f7:ed:85:36:ef:dd:a1:7d:6e:93: c3:46:03:35:f4:d4:e9:fc:6d:1a:fa:c0:55:eb:36: d2:9d:4e:f5:73:ff:22:86:4a:4a:ec:a8:60:eb:5f: 3b:b2:52:fa:5a:42:72:51:b0:95:93:d3:35:d4:ce: 3b:1c:ec:02:66:fc:4b:e9:6f:9b:40:48:90:66:46: 37:03:dd:05:80:54:b3:84:4e:c3:38:25:3d:17:1b: a2:c9:a7:a1:97:2e:e1:11:5e:38:10:91:df:75:f0: 38:94:9c:b8:4c:53:7e:ec:4b:24:ca:21:9d:76:6e: 99:9e:81:38:e7:7c:03:ac:2a:29:88:b3:6f:27:15: e7:d5:48:54:92:a0:ec:b4:fc:2d:dc:f7:e8:05:d9: ec:07:36:5f:8c:61:fc:6c:da:04:e7:8e:77:fa:c3: 83:9d:c4:67:30:e0:ca:d6:39:d7:96:30:47:3f:dd: 05:18:de:98:ef:8f:dd:c4:85:55:b7:44:df:94:e9: 8c:0e:48:d0:ac:54:81:14:b5:cc:74:06:b6:2a:f2: a6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9C:F2:53:BD:64:60:09:F4:FD:5F:7F:44:EE:F7:C0:56:1B:90:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40757ef2-8c1a-3cd2-8fd4-8d37c67e3627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:48:8f:8f:3d:20:b0:68:36:d7:1e:9e:b8:0d:12:f2:f1:fd: 58:6c:76:2f:6b:dd:d2:38:cc:4e:7a:03:7a:74:ee:c5:ae:b4: 2d:13:49:ff:ae:88:7a:10:34:d6:2a:fd:44:0c:b3:c0:72:94: b2:00:a2:48:de:00:5e:3a:17:e7:ab:2d:ed:05:1a:58:6c:84: 3b:df:27:6d:c3:72:9a:1a:e4:50:2b:b4:9b:71:53:66:f1:ce: 07:0e:bb:7e:f7:e3:9f:68:a4:ce:1d:03:8f:0a:02:b7:d6:f8: 18:c0:5d:d0:ef:47:54:cd:ac:a2:49:87:17:8c:2c:35:4a:46: 91:f6:b7:4f:dc:a9:89:02:65:25:92:8c:9a:fa:f9:60:fd:58: b5:25:9d:22:64:8e:f9:3e:da:e2:c8:3f:4b:5c:b9:73:1c:e3: 14:6b:36:4a:72:81:0a:d0:82:0a:56:cd:23:e2:83:6e:59:b0: a2:66:c0:d5:a2:61:7f:4c:32:20:c5:b5:d7:ed:1f:b0:26:4f: 13:e5:e2:4a:d8:2e:3b:b8:27:4c:fe:26:ab:72:6f:f3:ed:0f: f9:70:4e:2f:9b:4d:5e:5a:2f:a0:6a:25:f4:69:48:b3:c4:2b: f7:9a:dd:f7:d4:3e:c1:cd:0e:f4:34:55:9e:bd:32:b8:1d:fe: f2:d6:ed:c6 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmv2BkwIN0EVK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NDEzNzFkZjMtM2JkZi00NjhkLTg2ZDItYTk5ZGNhNWI1MzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvJEDSqD6VQ2ecOg+HfV+E2drG3OcJhunns3 S77IJincvdiweUbY6iI8jCa+ve8GY/fthTbv3aF9bpPDRgM19NTp/G0a+sBV6zbS nU71c/8ihkpK7Khg6187slL6WkJyUbCVk9M11M47HOwCZvxL6W+bQEiQZkY3A90F gFSzhE7DOCU9Fxuiyaehly7hEV44EJHfdfA4lJy4TFN+7EskyiGddm6ZnoE453wD rCopiLNvJxXn1UhUkqDstPwt3PfoBdnsBzZfjGH8bNoE5453+sODncRnMODK1jnX ljBHP90FGN6Y74/dxIVVt0TflOmMDkjQrFSBFLXMdAa2KvKmlQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFH6c8lO9ZGAJ9P1ff0Tu98BWG5B5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDA3NTdlZjItOGMxYS0z Y2QyLThmZDQtOGQzN2M2N2UzNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCaSI+PPSCwaDbXHp64DRLy8f1YbHYva93SOMxO egN6dO7FrrQtE0n/roh6EDTWKv1EDLPAcpSyAKJI3gBeOhfnqy3tBRpYbIQ73ydt w3KaGuRQK7SbcVNm8c4HDrt+9+OfaKTOHQOPCgK31vgYwF3Q70dUzayiSYcXjCw1 SkaR9rdP3KmJAmUlkoya+vlg/Vi1JZ0iZI75PtriyD9LXLlzHOMUazZKcoEK0IIK Vs0j4oNuWbCiZsDVomF/TDIgxbXX7R+wJk8T5eJK2C47uCdM/iarcm/z7Q/5cE4v m01eWi+gaiX0aUizxCv3mt331D7BzQ70NFWevTK4Hf7y1u3G -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:31 2026 by rpki-client