$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa File: 43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa (raw, json) Hash identifier: MPgUxzdWtvSieYqssqeBbva28VUUNw9XMHz3Rumz0BQ= Subject key identifier: 9E:B4:7F:99:DD:B6:AE:66:2D:CF:0B:C9:AE:12:94:3F:26:1F:C6:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2644AD960CB2CD3BEC28A014 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 397203 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:ad:96:0c:b2:cd:3b:ec:28:a0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=f1f1c746-f287-43f1-aa46-89387a895ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:73:31:45:cf:b9:3a:c9:5f:47:1d:9b:02:81: 6f:d3:12:dc:4f:70:6d:c3:26:99:d5:59:90:d2:32: b1:79:04:c6:2f:db:7c:94:2d:51:37:bb:31:3c:ed: d7:53:ad:60:ab:45:bf:01:02:0c:dd:5d:d7:f4:a1: b8:ae:f2:e1:1f:ea:06:f6:93:58:93:df:87:25:f6: da:39:30:a4:f2:95:58:00:bb:13:e0:c4:23:98:25: 7b:dc:16:09:8f:49:e0:d6:7c:25:83:ff:a3:ae:4e: bf:c8:ce:85:c0:37:6e:8d:91:0e:2d:c1:05:3c:b5: 23:39:08:fd:56:63:67:db:79:3a:28:2e:8f:36:a8: e0:8e:52:ad:29:83:1e:fd:06:47:24:6e:a8:b9:f1: 19:06:fc:f3:4c:9c:e4:e7:27:27:86:08:a9:44:5f: 2c:5f:d3:fc:59:22:6f:b0:39:39:d5:d2:d8:c4:b0: ed:6c:fa:de:fb:2f:69:91:2e:e6:60:f6:d2:b5:7b: 8c:f7:d1:b6:48:7b:56:00:a7:05:c0:e4:c3:47:77: 5f:54:5e:0a:f0:27:ce:89:9d:e1:1b:c2:5f:28:c7: 65:fc:0f:b3:26:af:2e:86:48:fb:ed:d8:a0:39:81: 20:33:18:05:c1:bb:77:4f:72:6d:24:b2:cb:8a:af: 60:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B4:7F:99:DD:B6:AE:66:2D:CF:0B:C9:AE:12:94:3F:26:1F:C6:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43b5e404-da95-3f85-b39f-2ae8c85ebeb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:79:39:f3:7b:94:d8:e3:c0:0c:89:ee:96:c9:3b:c8:2b:ac: 15:d6:6d:e0:de:4d:c5:dd:3c:89:a8:fd:28:33:d8:96:80:7c: 6c:3e:85:5c:f9:bb:0b:5b:11:b7:59:9b:7b:f0:14:35:1e:87: 2e:08:25:b1:0e:1e:33:85:d8:25:73:ab:31:a2:11:2d:14:7f: 65:8f:68:02:60:16:97:0f:36:68:1b:f0:06:42:c1:5b:b2:2d: ed:04:cf:76:19:97:3c:d9:9f:99:d8:e2:bd:0d:98:63:fe:15: 88:5b:fe:f8:cb:6f:14:aa:d6:78:bb:d7:c7:e2:fd:ac:5f:43: 1c:42:ce:bd:b3:0e:d8:14:4f:74:ca:bb:8f:c8:e3:a0:d8:53: 2e:5b:00:49:5e:d1:b3:ec:34:eb:8f:39:df:ad:d0:bd:23:80: 39:1d:ae:84:2e:c8:1d:51:6c:4f:ea:8f:bc:fc:cb:06:7b:76: a5:12:30:09:0c:4d:4d:91:b6:c7:45:80:61:b6:11:78:c7:dc: 0e:37:11:bb:04:93:a8:d5:ff:c3:ce:ed:0a:d4:29:21:52:d1: a8:e2:9f:24:d0:bd:b1:ab:4d:8b:24:52:8b:0f:84:02:b2:93: 2a:f2:b4:5a:66:e3:26:61:f5:f7:43:79:28:67:a5:4f:c7:ef: f4:15:72:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRK2WDLLNO+wooBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk ZjFmMWM3NDYtZjI4Ny00M2YxLWFhNDYtODkzODdhODk1ZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnMxRc+5OslfRx2bAoFv0xLcT3BtwyaZ1VmQ 0jKxeQTGL9t8lC1RN7sxPO3XU61gq0W/AQIM3V3X9KG4rvLhH+oG9pNYk9+HJfba OTCk8pVYALsT4MQjmCV73BYJj0ng1nwlg/+jrk6/yM6FwDdujZEOLcEFPLUjOQj9 VmNn23k6KC6PNqjgjlKtKYMe/QZHJG6oufEZBvzzTJzk5ycnhgipRF8sX9P8WSJv sDk51dLYxLDtbPre+y9pkS7mYPbStXuM99G2SHtWAKcFwOTDR3dfVF4K8CfOiZ3h G8JfKMdl/A+zJq8uhkj77digOYEgMxgFwbt3T3JtJLLLiq9gGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ60f5ndtq5mLc8Lya4SlD8mH8ZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNiNWU0MDQtZGE5NS0z Zjg1LWIzOWYtMmFlOGM4NWViZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAER5OfN7lNjjwAyJ7pbJO8grrBXWbeDeTcXdPImo/Sgz2JaAfGw+ hVz5uwtbEbdZm3vwFDUehy4IJbEOHjOF2CVzqzGiES0Uf2WPaAJgFpcPNmgb8AZC wVuyLe0Ez3YZlzzZn5nY4r0NmGP+FYhb/vjLbxSq1ni718fi/axfQxxCzr2zDtgU T3TKu4/I46DYUy5bAEle0bPsNOuPOd+t0L0jgDkdroQuyB1RbE/qj7z8ywZ7dqUS MAkMTU2RtsdFgGG2EXjH3A43EbsEk6jV/8PO7QrUKSFS0ajinyTQvbGrTYskUosP hAKykyrytFpm4yZh9fdDeShnpU/H7/QVcnI= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:02 2026 by rpki-client