$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4884dfd2-7dd5-3c16-8f9e-ac339a1e9f2e.roa File: 4884dfd2-7dd5-3c16-8f9e-ac339a1e9f2e.roa (raw, json) Hash identifier: N6v+guJqSO43zcrA5T4Yp7q8LuavmcezcDwFp+tEcm0= Subject key identifier: 47:D4:FF:65:37:04:74:7D:3B:1A:8E:51:C0:7C:B5:F4:B3:7F:87:03 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C0367E30A812D9DE3FDA200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4884dfd2-7dd5-3c16-8f9e-ac339a1e9f2e.roa Signing time: Tue 03 Mar 2026 15:18:08 +0000 ROA not before: Tue 03 Mar 2026 15:18:08 +0000 ROA not after: Mon 01 Jun 2026 14:18:08 +0000 asID: 396616 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:67:e3:0a:81:2d:9d:e3:fd:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:08 2026 GMT Not After : Jun 1 14:18:08 2026 GMT Subject: CN=e5b00766-ccb7-4768-af21-c7e4cebdba00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d3:38:91:ad:05:9f:56:1e:9e:4d:6f:f8:eb: ba:0a:05:44:47:69:b7:1f:68:09:dc:ee:34:72:04: e5:72:45:5e:dd:88:eb:bb:32:ce:3e:50:dc:ac:48: 6b:cd:6c:fb:13:c9:26:a7:e7:38:bb:36:1a:d4:3e: 05:72:86:36:b3:c5:e1:19:b8:a2:68:ea:1b:37:e5: d9:3a:37:48:2a:a2:45:56:c2:66:a3:52:ca:db:ff: 3a:58:e3:7a:cf:63:72:89:ad:25:2b:f1:6a:f9:b3: 55:42:ee:99:fa:15:c3:54:b0:8c:c8:4e:92:d8:9b: 58:30:dc:6a:f9:0d:4c:c9:51:89:a2:8e:fc:38:ad: d8:96:c5:90:17:aa:62:6f:0a:d5:bd:b1:c3:b8:20: 2e:ce:19:7b:13:fa:f9:d4:6c:91:b0:71:c5:7b:fb: 17:7f:e9:27:c2:19:f8:2f:41:83:45:22:e8:ec:19: 0d:40:81:b8:e8:1f:6c:56:db:e2:03:b9:3d:10:b4: 4d:9b:a8:6b:01:22:fe:ed:5e:a9:dc:c3:4a:08:8d: cc:04:cb:69:09:88:f2:3e:cf:61:0f:b2:d2:ff:83: 41:70:55:a0:0f:cb:52:2a:35:d5:8a:a8:9e:50:fa: 93:b9:f5:05:91:b6:b2:1e:7b:3f:4d:3f:b3:20:da: 15:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D4:FF:65:37:04:74:7D:3B:1A:8E:51:C0:7C:B5:F4:B3:7F:87:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4884dfd2-7dd5-3c16-8f9e-ac339a1e9f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:97:3c:ee:99:33:c6:93:8f:b9:07:3c:37:ec:02:3b:3f:4e: bb:ac:24:82:91:52:ea:fe:c7:e5:e0:af:36:bc:49:c0:ee:ec: 32:ef:52:65:7d:f5:e1:31:89:dc:2c:79:c4:aa:8d:2e:22:bc: b1:2f:d7:8f:bc:90:ba:af:dc:d8:a2:4f:b1:ad:31:62:f0:e9: a1:7a:1e:3e:a3:44:6d:c8:00:99:f9:7d:18:9f:5e:d6:0c:1d: 2e:62:35:f4:70:3c:5c:a1:8a:36:1e:89:cd:d3:f9:de:1b:8d: 5e:a3:26:6c:8f:02:aa:53:fb:47:66:2e:dd:99:a6:f2:2e:25: 94:84:ce:ec:ef:00:a3:f0:c0:d9:c0:6d:ed:c9:02:ec:bc:4f: 2f:73:5f:cf:2d:95:a3:86:1d:c4:1d:df:bc:93:00:70:06:1f: e8:65:15:45:0c:ec:21:31:a4:7b:37:e0:38:fc:61:6e:58:40: bb:f9:65:35:2d:ce:f4:77:b9:d5:96:2f:27:eb:76:28:ba:86: ac:f1:f1:34:f2:2b:68:43:83:9c:20:63:8a:bd:05:e1:fc:5e: 88:08:0a:5e:91:5f:ea:1e:ce:3a:65:7d:80:26:ef:56:2e:67: d1:17:3f:c3:97:4d:e9:81:3f:d4:fd:76:af:af:86:e1:8d:56: a5:7d:24:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2fjCoEtneP9ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwOFoXDTI2MDYwMTE0MTgwOFowLzEtMCsGA1UEAxMk ZTViMDA3NjYtY2NiNy00NzY4LWFmMjEtYzdlNGNlYmRiYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNM4ka0Fn1Yenk1v+Ou6CgVER2m3H2gJ3O40 cgTlckVe3YjruzLOPlDcrEhrzWz7E8kmp+c4uzYa1D4FcoY2s8XhGbiiaOobN+XZ OjdIKqJFVsJmo1LK2/86WON6z2Nyia0lK/Fq+bNVQu6Z+hXDVLCMyE6S2JtYMNxq +Q1MyVGJoo78OK3YlsWQF6pibwrVvbHDuCAuzhl7E/r51GyRsHHFe/sXf+knwhn4 L0GDRSLo7BkNQIG46B9sVtviA7k9ELRNm6hrASL+7V6p3MNKCI3MBMtpCYjyPs9h D7LS/4NBcFWgD8tSKjXViqieUPqTufUFkbayHns/TT+zINoVtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEfU/2U3BHR9OxqOUcB8tfSzf4cDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDg4NGRmZDItN2RkNS0z YzE2LThmOWUtYWMzMzlhMWU5ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADGXPO6ZM8aTj7kHPDfsAjs/TrusJIKRUur+x+Xgrza8ScDu7DLv UmV99eExidwsecSqjS4ivLEv14+8kLqv3NiiT7GtMWLw6aF6Hj6jRG3IAJn5fRif XtYMHS5iNfRwPFyhijYeic3T+d4bjV6jJmyPAqpT+0dmLt2ZpvIuJZSEzuzvAKPw wNnAbe3JAuy8Ty9zX88tlaOGHcQd37yTAHAGH+hlFUUM7CExpHs34Dj8YW5YQLv5 ZTUtzvR3udWWLyfrdii6hqzx8TTyK2hDg5wgY4q9BeH8XogICl6RX+oezjplfYAm 71YuZ9EXP8OXTemBP9T9dq+vhuGNVqV9JGg= -----END CERTIFICATE-----Generated at Thu Mar 26 09:47:42 2026 by rpki-client