$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa File: 43df424b-8041-30e0-bf83-a35ba1b54f1a.roa (raw, json) Hash identifier: Niicj6mf2IP+sP1C5ZYaWWGB5S7HrlWWMlw/+gBDYjg= Subject key identifier: CA:4A:07:0D:EB:4A:1B:94:D7:A0:F3:BF:C3:5B:14:55:EA:2A:BF:20 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F4A66245ACA26B41897E900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 397203 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:66:24:5a:ca:26:b4:18:97:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=2e88275f-1abd-4d57-a883-2ced44563c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:22:96:9e:2d:32:c5:3d:c2:02:01:96:d7: a5:5f:6e:86:83:15:97:f8:2f:c8:78:67:ef:20:36: a6:54:09:5c:bc:c7:c4:a6:8a:d7:62:35:7a:86:e6: eb:90:90:c9:04:07:ff:7c:02:1c:8e:55:e2:18:e9: 2f:6d:a2:46:73:1b:76:8a:e0:4e:97:bd:3b:80:fe: 01:05:73:4b:74:1f:1e:c4:7f:89:1e:f7:e0:ee:e4: da:9d:a0:ec:97:d8:7b:57:8b:92:76:ff:d4:42:43: 74:10:90:8f:2c:44:2d:54:c9:de:b6:9b:d3:ee:74: 28:56:f8:e6:c5:45:e7:81:fd:4f:db:1e:15:b9:68: a6:cc:de:2c:b8:78:d8:20:47:23:df:3e:1a:ab:d1: d8:7d:8d:43:5e:9f:80:95:2b:6f:a6:33:6e:65:6a: 92:e2:5c:e3:88:8e:67:ea:a9:2b:e9:dc:b7:f9:0b: 37:b2:5c:3d:ac:86:d6:af:9e:60:bc:2f:fe:7d:84: a9:78:bd:bb:ed:44:38:19:56:9a:b8:2f:39:2e:5f: ae:36:a3:56:44:ef:18:c1:32:9d:a6:f5:9e:35:46: 46:b3:2e:c4:27:de:0d:12:95:18:8c:5e:06:d3:04: ba:54:18:18:3e:b1:cb:38:42:ed:48:f5:90:62:17: 90:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4A:07:0D:EB:4A:1B:94:D7:A0:F3:BF:C3:5B:14:55:EA:2A:BF:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/43df424b-8041-30e0-bf83-a35ba1b54f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:12:b2:9e:18:58:f9:ec:6c:77:3e:19:c0:60:f6:85:8a:b1: 62:53:83:f8:68:e5:64:1c:12:fe:79:5f:9b:2b:e3:aa:96:7d: 10:7f:2a:3b:54:44:28:82:8c:58:bc:6f:90:e8:6d:72:57:b9: fa:dd:33:e7:a4:a3:69:45:b1:07:8d:01:79:43:3d:29:34:39: eb:72:d7:12:0c:17:81:69:53:d8:90:be:02:3c:b1:86:e7:06: cd:72:94:98:ef:10:77:52:91:c7:c3:8b:2e:6d:b5:18:78:50: 98:7e:34:72:fc:4e:e2:cd:22:6e:c0:41:f9:ad:fa:13:b6:64: f8:20:ad:5e:69:b4:a4:06:ba:19:3f:b7:c5:39:b3:1b:f5:36: 4f:9f:e1:67:02:fe:af:1e:09:d1:ab:d4:39:c3:87:fc:c8:2a: 38:df:ff:da:3d:dd:b2:4d:e0:34:da:13:ae:00:61:db:66:e6: 85:23:23:e8:ad:cc:8b:d7:14:40:0f:53:ab:34:bb:b1:05:e6: 0c:e8:db:fa:11:6b:e4:23:e1:01:5e:d3:37:b1:bc:65:35:8e: 40:4d:49:ad:44:a5:8c:9b:00:70:6b:f0:8f:dd:b1:36:3c:44: d2:b2:b5:97:b9:f0:4d:99:06:c6:17:35:05:6a:0b:4b:8b:01: 0a:15:49:15 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmYkWsomtBiX6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MmU4ODI3NWYtMWFiZC00ZDU3LWE4ODMtMmNlZDQ0NTYzYzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OUilp4tMsU9wgIBltelX26GgxWX+C/IeGfv IDamVAlcvMfEporXYjV6hubrkJDJBAf/fAIcjlXiGOkvbaJGcxt2iuBOl707gP4B BXNLdB8exH+JHvfg7uTanaDsl9h7V4uSdv/UQkN0EJCPLEQtVMnetpvT7nQoVvjm xUXngf1P2x4VuWimzN4suHjYIEcj3z4aq9HYfY1DXp+AlStvpjNuZWqS4lzjiI5n 6qkr6dy3+Qs3slw9rIbWr55gvC/+fYSpeL277UQ4GVaauC85Ll+uNqNWRO8YwTKd pvWeNUZGsy7EJ94NEpUYjF4G0wS6VBgYPrHLOELtSPWQYheQiwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMpKBw3rShuU16Dzv8NbFFXqKr8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDNkZjQyNGItODA0MS0z MGUwLWJmODMtYTM1YmExYjU0ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB2ErKeGFj57Gx3PhnAYPaFirFiU4P4aOVkHBL+ eV+bK+Oqln0Qfyo7VEQogoxYvG+Q6G1yV7n63TPnpKNpRbEHjQF5Qz0pNDnrctcS DBeBaVPYkL4CPLGG5wbNcpSY7xB3UpHHw4subbUYeFCYfjRy/E7izSJuwEH5rfoT tmT4IK1eabSkBroZP7fFObMb9TZPn+FnAv6vHgnRq9Q5w4f8yCo43//aPd2yTeA0 2hOuAGHbZuaFIyPorcyL1xRAD1OrNLuxBeYM6Nv6EWvkI+EBXtM3sbxlNY5ATUmt RKWMmwBwa/CP3bE2PETSsrWXufBNmQbGFzUFagtLiwEKFUkV -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:36 2026 by rpki-client