$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/640d6979-0ed4-3c47-85c2-51422061e3e8.roa File: 640d6979-0ed4-3c47-85c2-51422061e3e8.roa (raw, json) Hash identifier: 2QlSowGEqLQYtYZUYaGyO+X6GfvAaGu+wYfnLAOQuOU= Subject key identifier: 1A:35:C7:A0:90:0D:B9:1D:7D:35:71:0D:07:B0:1D:E8:2F:45:58:D7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A3A741CB81FB0D1E3560 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/640d6979-0ed4-3c47-85c2-51422061e3e8.roa Signing time: Tue 10 Mar 2026 14:28:40 +0000 ROA not before: Tue 10 Mar 2026 14:28:40 +0000 ROA not after: Mon 08 Jun 2026 14:28:40 +0000 asID: 396542 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a3:a7:41:cb:81:fb:0d:1e:35:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:40 2026 GMT Not After : Jun 8 14:28:40 2026 GMT Subject: CN=97160333-df9b-499b-8039-baf84d02430f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:41:c6:0e:9d:b2:6a:f1:71:e3:b5:89:d5: 21:76:57:6d:51:86:1c:e5:f2:43:68:a1:4e:21:2f: d6:ad:95:d3:0d:26:42:4a:38:b3:04:00:05:07:c6: 7e:b1:c4:34:e5:0b:66:e4:5e:19:89:d9:c6:2b:da: 0b:93:a0:6d:57:88:d1:3c:db:a9:9b:95:04:7c:14: 07:3f:88:d6:dc:74:f1:f2:95:96:8f:0d:74:ce:90: c8:7c:0a:91:8e:2a:df:c9:1d:f3:4b:13:18:c9:8a: 16:ae:76:64:5e:7e:5e:02:26:f3:7e:bf:24:c2:12: 4d:50:24:e8:33:1b:b4:81:1e:2f:12:7d:8b:68:1b: 05:58:1a:ca:8f:5d:38:11:e1:d2:bf:0a:f3:86:97: 49:17:5b:24:8f:4c:1e:d1:cd:61:e2:79:7b:42:a0: 5c:39:f0:ab:62:93:4b:31:8c:a4:6e:d1:8d:ee:3b: e1:81:fc:4e:58:ca:00:5a:50:6c:3f:d0:10:fc:b5: da:8f:3b:7c:75:1a:ee:e3:c9:3c:11:b3:04:5a:0e: 36:69:ff:90:45:01:97:54:21:c5:9d:89:4f:96:07: a7:ad:cb:7e:72:d6:18:07:12:4f:9b:1d:4d:56:87: 98:21:06:ea:40:da:9d:77:d8:ab:39:b5:d2:d4:17: 66:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:35:C7:A0:90:0D:B9:1D:7D:35:71:0D:07:B0:1D:E8:2F:45:58:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/640d6979-0ed4-3c47-85c2-51422061e3e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ed:03:fb:c0:71:c8:c7:2f:55:f7:1f:25:e7:57:c3:47:4c: 63:ed:c3:f7:98:3e:8e:87:df:01:9e:fe:47:56:28:fa:6f:d4: 04:01:04:76:32:d0:99:43:f6:e2:cd:84:4e:fd:d9:16:34:93: e4:81:4b:f5:aa:18:c1:1e:8a:07:b8:d1:4d:7e:77:56:01:a9: 4c:66:ec:29:b4:84:04:a6:f7:94:5f:d8:8e:c6:e0:92:00:d9: 11:96:d9:01:b8:95:a6:71:32:47:f4:75:34:d2:9d:55:fa:97: eb:01:e4:72:79:d7:8b:52:f1:9c:22:d2:49:cd:e4:91:2c:d0: 4d:bc:bc:e7:a6:42:48:f5:c7:01:12:94:ad:90:28:75:d1:67: b9:ae:c5:32:fa:9d:ba:71:9f:90:e4:1b:54:1d:c3:a1:f5:c4: 4a:8a:7b:4e:c3:54:02:55:9d:b8:78:0b:7f:b2:40:05:a9:b7: 70:d7:b2:d6:69:11:a9:29:f4:e1:9b:c2:ea:d4:e9:5d:40:b8: 09:94:f6:22:e4:24:17:2f:93:69:17:8b:cb:a2:ca:59:ee:83: a6:a9:23:8a:02:db:b4:83:25:fc:b1:c8:a9:42:bd:cb:8a:a8: 4e:c9:43:8e:63:48:f6:d1:cd:92:f8:58:63:ec:d8:77:70:b9: c8:2e:33:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdaOnQcuB+w0eNWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0Mjg0MFoXDTI2MDYwODE0Mjg0MFowLzEtMCsGA1UEAxMk OTcxNjAzMzMtZGY5Yi00OTliLTgwMzktYmFmODRkMDI0MzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngpBxg6dsmrxceO1idUhdldtUYYc5fJDaKFO IS/WrZXTDSZCSjizBAAFB8Z+scQ05Qtm5F4ZidnGK9oLk6BtV4jRPNupm5UEfBQH P4jW3HTx8pWWjw10zpDIfAqRjirfyR3zSxMYyYoWrnZkXn5eAibzfr8kwhJNUCTo Mxu0gR4vEn2LaBsFWBrKj104EeHSvwrzhpdJF1skj0we0c1h4nl7QqBcOfCrYpNL MYykbtGN7jvhgfxOWMoAWlBsP9AQ/LXajzt8dRru48k8EbMEWg42af+QRQGXVCHF nYlPlgenrct+ctYYBxJPmx1NVoeYIQbqQNqdd9irObXS1BdmfwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBo1x6CQDbkdfTVxDQewHegvRVjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjQwZDY5NzktMGVkNC0z YzQ3LTg1YzItNTE0MjIwNjFlM2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3tA/vAccjHL1X3HyXnV8NHTGPtw/eYPo6H3wGe/kdWKPpv1AQB BHYy0JlD9uLNhE792RY0k+SBS/WqGMEeige40U1+d1YBqUxm7Cm0hASm95Rf2I7G 4JIA2RGW2QG4laZxMkf0dTTSnVX6l+sB5HJ514tS8Zwi0knN5JEs0E28vOemQkj1 xwESlK2QKHXRZ7muxTL6nbpxn5DkG1Qdw6H1xEqKe07DVAJVnbh4C3+yQAWpt3DX stZpEakp9OGbwurU6V1AuAmU9iLkJBcvk2kXi8uiylnug6apI4oC27SDJfyxyKlC vcuKqE7JQ45jSPbRzZL4WGPs2HdwucguMws= -----END CERTIFICATE-----Generated at Thu Mar 26 15:09:02 2026 by rpki-client