$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5251a092-58c1-3eac-adb5-940f962de7b4.roa File: 5251a092-58c1-3eac-adb5-940f962de7b4.roa (raw, json) Hash identifier: agTca940Q9Y2anWuPqa53SdyxoUWE66E0TNpZsmUFBM= Subject key identifier: F2:A8:4E:19:E7:0A:D2:C5:55:DA:39:6E:95:8D:67:F1:ED:E1:B5:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C0366F140F1397AE9ADFC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5251a092-58c1-3eac-adb5-940f962de7b4.roa Signing time: Tue 03 Mar 2026 15:18:08 +0000 ROA not before: Tue 03 Mar 2026 15:18:08 +0000 ROA not after: Mon 01 Jun 2026 14:18:08 +0000 asID: 396555 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:66:f1:40:f1:39:7a:e9:ad:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:08 2026 GMT Not After : Jun 1 14:18:08 2026 GMT Subject: CN=7d270759-d5dc-43da-ae66-be299bf83051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a9:e5:3e:58:0e:da:68:e9:3f:a0:31:75:e9: 8c:bd:d0:4a:e6:8d:6a:95:7b:28:56:3f:0e:d8:18: a9:90:7d:02:85:af:4f:7b:0c:ab:a0:01:45:5d:3d: 89:ca:34:65:8f:11:98:b2:85:0b:88:a4:30:63:23: 65:f6:ee:4d:6b:9b:a9:a0:18:a9:0f:80:7a:2f:10: 90:37:ff:9f:33:37:62:59:8a:75:18:c3:e1:f1:bc: 11:21:5c:33:b3:4e:bf:97:68:b4:3b:8f:b2:cc:1d: f6:0b:d9:0d:f2:c2:e3:b0:18:fc:60:a0:f6:03:54: 7e:0c:ea:65:64:c5:75:52:0f:1e:7d:4c:6e:eb:76: 85:84:dd:38:09:19:4e:50:76:44:4b:08:3e:04:fd: 12:66:ed:ee:67:e5:3d:10:94:5a:8b:03:9b:8e:33: a7:59:86:95:cc:48:97:ec:8b:7f:8d:5c:ec:a4:93: b7:ad:4f:56:93:1d:89:9e:7a:ca:29:01:12:ff:7e: 7c:e8:c7:d1:62:47:e2:0b:fb:ea:84:fd:c9:00:9a: 5c:3d:54:02:42:94:58:0f:65:3d:41:1a:5b:0e:47: 4d:b4:40:d3:92:76:32:6c:a8:ae:9f:7e:73:c5:f9: 4d:af:37:dd:54:c9:7d:70:4f:b1:8e:1a:42:ab:bc: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A8:4E:19:E7:0A:D2:C5:55:DA:39:6E:95:8D:67:F1:ED:E1:B5:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5251a092-58c1-3eac-adb5-940f962de7b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:71:15:33:ca:0a:73:2d:8c:42:7c:b7:29:f9:e5:a0:ab:3f: d9:9e:1b:1c:a7:a4:de:61:7c:34:17:f9:56:49:af:fa:37:08: 41:03:26:b6:5a:50:f2:69:00:50:cd:bd:1a:e3:0d:6d:d5:af: 89:f4:ca:a2:b1:d8:92:33:db:c4:18:15:6e:a2:da:11:dd:97: 75:e2:ca:90:8e:23:30:be:40:b6:10:cd:c4:11:9c:ed:9e:a1: 78:86:df:89:23:27:c9:d0:77:f0:df:69:ff:6b:e4:e8:01:60: d0:23:c8:ed:c3:03:6f:64:c9:2b:ca:4c:77:85:f0:fb:28:3b: 59:e1:d7:15:4a:53:a9:1a:50:e6:70:67:25:76:a5:50:3f:67: ef:c6:0b:9a:a6:ac:40:d4:21:96:da:b8:0a:db:79:02:7e:7e: 62:8c:51:8f:08:df:f9:81:dc:7b:78:d2:83:76:c3:06:cd:33: 5d:80:79:84:45:d1:18:07:b6:9c:dc:71:93:3b:1a:b1:d2:91: 2a:0e:d5:26:48:da:42:f3:53:52:4f:75:f1:00:b5:d9:0e:69: 54:f3:0a:c6:0a:02:41:f3:91:80:6a:80:8f:50:b0:c4:b2:88: e3:35:a1:07:be:12:20:6d:fd:ab:fc:e2:a1:1a:78:a6:f7:d7: 95:fd:5c:b8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2bxQPE5eumt/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwOFoXDTI2MDYwMTE0MTgwOFowLzEtMCsGA1UEAxMk N2QyNzA3NTktZDVkYy00M2RhLWFlNjYtYmUyOTliZjgzMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKnlPlgO2mjpP6AxdemMvdBK5o1qlXsoVj8O 2BipkH0Cha9PewyroAFFXT2JyjRljxGYsoULiKQwYyNl9u5Na5upoBipD4B6LxCQ N/+fMzdiWYp1GMPh8bwRIVwzs06/l2i0O4+yzB32C9kN8sLjsBj8YKD2A1R+DOpl ZMV1Ug8efUxu63aFhN04CRlOUHZESwg+BP0SZu3uZ+U9EJRaiwObjjOnWYaVzEiX 7It/jVzspJO3rU9Wkx2JnnrKKQES/3586MfRYkfiC/vqhP3JAJpcPVQCQpRYD2U9 QRpbDkdNtEDTknYybKiun35zxflNrzfdVMl9cE+xjhpCq7y6DQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPKoThnnCtLFVdo5bpWNZ/Ht4bWlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTI1MWEwOTItNThjMS0z ZWFjLWFkYjUtOTQwZjk2MmRlN2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHdxFTPKCnMtjEJ8tyn55aCrP9meGxynpN5hfDQX+VZJr/o3CEED JrZaUPJpAFDNvRrjDW3Vr4n0yqKx2JIz28QYFW6i2hHdl3XiypCOIzC+QLYQzcQR nO2eoXiG34kjJ8nQd/Dfaf9r5OgBYNAjyO3DA29kySvKTHeF8PsoO1nh1xVKU6ka UOZwZyV2pVA/Z+/GC5qmrEDUIZbauArbeQJ+fmKMUY8I3/mB3Ht40oN2wwbNM12A eYRF0RgHtpzccZM7GrHSkSoO1SZI2kLzU1JPdfEAtdkOaVTzCsYKAkHzkYBqgI9Q sMSyiOM1oQe+EiBt/av84qEaeKb315X9XLg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:06:40 2026 by rpki-client