$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bf399ca-3f4d-30d1-ae12-211f0280ac40.roa File: 5bf399ca-3f4d-30d1-ae12-211f0280ac40.roa (raw, json) Hash identifier: JJHpSwht459867tA4+Q+zQx1ihiHlfEIRZiHgYxIcGA= Subject key identifier: E9:59:22:8F:43:30:BB:BB:DD:76:89:74:FF:CC:5C:3A:1A:51:17:01 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A297B42B3AE9AB108D00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bf399ca-3f4d-30d1-ae12-211f0280ac40.roa Signing time: Tue 10 Mar 2026 14:28:39 +0000 ROA not before: Tue 10 Mar 2026 14:28:39 +0000 ROA not after: Mon 08 Jun 2026 14:28:39 +0000 asID: 20172 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a2:97:b4:2b:3a:e9:ab:10:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:39 2026 GMT Not After : Jun 8 14:28:39 2026 GMT Subject: CN=a6ac6ee3-494c-4715-bf26-58d47b9881a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:5d:d7:b3:b6:87:e7:60:3d:90:e8:b8:04: bc:dc:24:4b:0f:aa:7a:6d:65:34:7a:f7:48:bb:94: 3f:52:3a:5f:e4:6e:76:92:b3:c1:d8:bf:c3:e5:07: cc:34:8e:c7:3e:7c:0e:0c:92:79:35:6c:3d:86:d5: 6f:db:5c:a8:a4:db:26:49:f3:16:dd:1a:73:7d:03: 48:20:a8:2d:88:b4:26:3c:a7:7e:02:1e:bd:c7:48: 97:8c:b2:6b:13:61:b2:8f:7a:06:16:43:3a:6d:72: 95:d4:3b:fb:6c:c0:62:0b:14:6f:e5:f0:e0:d9:03: ac:d4:07:6c:9b:00:93:9d:d9:b8:cf:c1:f1:46:23: 34:96:8a:db:78:c2:b4:7b:0e:25:cc:57:c1:1d:40: c1:99:9b:2e:b9:66:cc:86:5c:bd:af:54:42:6d:05: b3:32:8e:cc:a5:39:2a:a7:0b:fa:71:ba:60:2c:f2: b0:7e:83:03:d6:93:84:b6:27:25:07:52:f3:84:94: 5e:9f:d4:0a:5f:ee:f8:a1:ac:18:20:57:2c:32:c0: e8:5e:12:86:10:f8:2e:67:ab:d3:ba:a9:57:ea:68: ef:c9:36:19:37:9d:12:b0:56:bb:a8:15:46:a9:ad: 35:90:bd:f7:a7:57:10:21:54:fb:92:94:7b:e3:2a: f4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:59:22:8F:43:30:BB:BB:DD:76:89:74:FF:CC:5C:3A:1A:51:17:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5bf399ca-3f4d-30d1-ae12-211f0280ac40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f5:8c:e0:4e:9c:65:ce:1d:1b:7e:f3:10:48:1e:67:24:77: 8a:93:69:77:67:87:a2:53:b4:98:fe:f0:64:c0:52:19:c1:49: 98:64:df:06:f4:58:33:17:37:f0:1f:d6:0f:52:aa:78:26:d6: 3f:5d:46:c8:52:f0:bb:29:45:1a:1f:a5:64:11:61:78:c5:74: 94:65:5d:40:a2:d0:65:e9:70:4c:4f:54:f7:ed:c9:63:19:0f: 49:60:7b:1a:09:58:31:14:e9:88:1f:fb:26:a0:cd:52:43:a6: 03:5d:37:0f:61:33:95:fe:b7:1f:69:6d:a8:68:f9:9a:83:2b: da:5c:5c:0d:05:52:49:f5:53:6e:4d:9e:8e:09:80:b5:d3:09: c2:79:f8:78:f7:a2:21:c5:4d:84:97:c5:2b:7c:58:13:b2:90: 35:93:7f:e0:c1:85:97:70:02:16:8e:74:be:61:61:f1:77:26: 3c:c0:3d:5b:d6:02:c8:70:c9:a9:44:83:58:d2:10:0d:18:e0: a4:69:f6:aa:2f:72:38:2c:92:f1:fb:4f:af:fe:bf:14:5b:3d: a0:bb:80:b0:e2:78:89:cc:f9:09:14:60:67:fb:8f:b5:4f:92: ca:7f:79:a2:d2:a2:ac:56:45:d8:a1:1b:05:af:cb:81:73:72: 0b:14:d7:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdaKXtCs66asQjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzOVoXDTI2MDYwODE0MjgzOVowLzEtMCsGA1UEAxMk YTZhYzZlZTMtNDk0Yy00NzE1LWJmMjYtNThkNDdiOTg4MWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSRd17O2h+dgPZDouAS83CRLD6p6bWU0evdI u5Q/Ujpf5G52krPB2L/D5QfMNI7HPnwODJJ5NWw9htVv21yopNsmSfMW3RpzfQNI IKgtiLQmPKd+Ah69x0iXjLJrE2Gyj3oGFkM6bXKV1Dv7bMBiCxRv5fDg2QOs1Ads mwCTndm4z8HxRiM0lorbeMK0ew4lzFfBHUDBmZsuuWbMhly9r1RCbQWzMo7MpTkq pwv6cbpgLPKwfoMD1pOEticlB1LzhJRen9QKX+74oawYIFcsMsDoXhKGEPguZ6vT uqlX6mjvyTYZN50SsFa7qBVGqa01kL33p1cQIVT7kpR74yr0swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOlZIo9DMLu73XaJdP/MXDoaURcBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWJmMzk5Y2EtM2Y0ZC0z MGQxLWFlMTItMjExZjAyODBhYzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABH1jOBOnGXOHRt+8xBIHmckd4qTaXdnh6JTtJj+8GTAUhnBSZhk 3wb0WDMXN/Af1g9Sqngm1j9dRshS8LspRRofpWQRYXjFdJRlXUCi0GXpcExPVPft yWMZD0lgexoJWDEU6Ygf+yagzVJDpgNdNw9hM5X+tx9pbaho+ZqDK9pcXA0FUkn1 U25Nno4JgLXTCcJ5+Hj3oiHFTYSXxSt8WBOykDWTf+DBhZdwAhaOdL5hYfF3JjzA PVvWAshwyalEg1jSEA0Y4KRp9qovcjgskvH7T6/+vxRbPaC7gLDieInM+QkUYGf7 j7VPksp/eaLSoqxWRdihGwWvy4FzcgsU1wA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:10 2026 by rpki-client