$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c36b1bb-e18c-3155-959a-559f31095b03.roa File: 4c36b1bb-e18c-3155-959a-559f31095b03.roa (raw, json) Hash identifier: CxM3XCHzCN2sWtBarigepQQ3MK4qYDkipDMD5Y2Q10E= Subject key identifier: E9:2B:32:E5:F7:D7:42:D7:62:F5:F0:AD:11:13:1A:9D:28:01:94:19 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C03629968E351B8759A8080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c36b1bb-e18c-3155-959a-559f31095b03.roa Signing time: Tue 03 Mar 2026 15:18:06 +0000 ROA not before: Tue 03 Mar 2026 15:18:06 +0000 ROA not after: Mon 01 Jun 2026 14:18:06 +0000 asID: 22547 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:62:99:68:e3:51:b8:75:9a:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:06 2026 GMT Not After : Jun 1 14:18:06 2026 GMT Subject: CN=245d2903-45a5-4eb0-995a-8dad0da276f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d5:67:ab:fb:2c:80:f8:81:01:db:1d:80:0e: f6:4f:92:3a:53:ea:79:2f:31:1b:c1:8a:2f:c4:45: 7d:40:d0:5f:59:0f:86:f2:a1:e8:ef:dc:db:d0:76: d3:7a:c5:47:f0:4b:12:ea:db:18:84:45:09:a6:a6: 0c:a2:f5:7e:5e:73:e0:fc:da:07:03:01:da:c7:5c: a2:71:58:60:d0:71:5d:2c:da:fa:0e:c4:c8:3d:97: 2a:0f:14:20:73:f2:e1:56:f2:60:74:4f:73:0b:ee: ef:18:ae:fe:ad:51:b2:1c:ec:81:77:55:c8:ac:38: 12:c4:5c:6c:ca:46:bb:be:a0:54:07:52:4a:09:87: f3:2e:ab:52:73:fe:23:25:16:4d:3f:57:02:d1:1c: 35:d8:58:0c:de:1e:75:db:88:e3:a5:e2:a1:3a:fd: 4b:d8:f1:44:e3:25:3c:c0:17:2d:49:ca:fd:47:29: 21:59:3d:7a:21:12:c9:14:30:b8:e9:41:86:98:dc: 43:b5:f2:89:82:db:0a:c2:ca:bc:a0:d3:76:03:98: b6:ee:f1:03:8f:2c:0d:dc:32:46:30:8d:90:3f:e2: df:44:e5:64:de:88:9e:4d:49:a0:b3:b7:38:8e:11: 8f:f8:40:cf:44:e3:d0:7e:72:7a:3b:f8:9c:fc:6d: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:2B:32:E5:F7:D7:42:D7:62:F5:F0:AD:11:13:1A:9D:28:01:94:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4c36b1bb-e18c-3155-959a-559f31095b03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b9:0e:51:35:f0:75:f4:9a:1f:7a:36:5f:44:75:fa:e4:3e: 25:02:57:ea:7a:03:44:b4:d0:62:bd:18:78:02:ec:49:3a:ba: 1c:6f:5e:a5:45:3a:43:35:d3:9e:2e:08:64:13:42:4b:97:3d: 59:57:20:ac:33:00:8b:ef:f9:3d:25:a2:4d:b1:cf:1e:0e:5c: 1c:cf:5b:47:ed:03:4b:70:96:dc:d9:9c:26:c5:f5:c2:40:57: 08:be:20:9b:05:b4:c6:d0:70:e8:9a:b2:90:81:3d:e5:9c:89: 48:dd:ea:52:4d:9b:09:23:a8:a1:d0:1b:24:61:bf:97:20:a2: 19:43:6e:84:be:9e:65:61:08:b0:88:59:04:88:5d:57:a7:c6: 7b:59:cb:19:3f:0a:3e:d3:e9:39:d7:d6:98:86:82:fb:fc:cf: a9:8f:6a:4f:00:4a:e8:9b:59:4e:e3:99:f7:9a:01:5b:34:51: b4:ed:b4:b6:64:0b:9f:19:d0:f9:ad:c0:f2:52:41:60:40:f9: 15:07:2b:1c:54:e9:d8:9c:1f:d2:a0:8d:58:5f:06:20:6f:b3: fa:44:6b:91:99:b9:8c:4a:fe:a9:d0:76:cb:20:8c:23:9a:df: d4:03:12:58:dc:c5:a0:87:b0:bb:71:67:c9:1a:4a:8c:e4:9b: 84:e4:56:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2KZaONRuHWagIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwNloXDTI2MDYwMTE0MTgwNlowLzEtMCsGA1UEAxMk MjQ1ZDI5MDMtNDVhNS00ZWIwLTk5NWEtOGRhZDBkYTI3NmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktVnq/ssgPiBAdsdgA72T5I6U+p5LzEbwYov xEV9QNBfWQ+G8qHo79zb0HbTesVH8EsS6tsYhEUJpqYMovV+XnPg/NoHAwHax1yi cVhg0HFdLNr6DsTIPZcqDxQgc/LhVvJgdE9zC+7vGK7+rVGyHOyBd1XIrDgSxFxs yka7vqBUB1JKCYfzLqtSc/4jJRZNP1cC0Rw12FgM3h5124jjpeKhOv1L2PFE4yU8 wBctScr9RykhWT16IRLJFDC46UGGmNxDtfKJgtsKwsq8oNN2A5i27vEDjywN3DJG MI2QP+LfROVk3oieTUmgs7c4jhGP+EDPROPQfnJ6O/ic/G3ZkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOkrMuX310LXYvXwrRETGp0oAZQZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGMzNmIxYmItZTE4Yy0z MTU1LTk1OWEtNTU5ZjMxMDk1YjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA65DlE18HX0mh96Nl9EdfrkPiUCV+p6A0S00GK9GHgC7Ek6uhxv XqVFOkM1054uCGQTQkuXPVlXIKwzAIvv+T0lok2xzx4OXBzPW0ftA0twltzZnCbF 9cJAVwi+IJsFtMbQcOiaspCBPeWciUjd6lJNmwkjqKHQGyRhv5cgohlDboS+nmVh CLCIWQSIXVenxntZyxk/Cj7T6TnX1piGgvv8z6mPak8ASuibWU7jmfeaAVs0UbTt tLZkC58Z0PmtwPJSQWBA+RUHKxxU6dicH9KgjVhfBiBvs/pEa5GZuYxK/qnQdssg jCOa39QDEljcxaCHsLtxZ8kaSozkm4TkVmE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:29:44 2026 by rpki-client