$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65d54075-13a7-33b0-8f85-81ef9cb7c02c.roa File: 65d54075-13a7-33b0-8f85-81ef9cb7c02c.roa (raw, json) Hash identifier: Q/DhqPSYmQ4vHjlWYbW2uTTIGg8Z/XdQ7BoPNT2yDF4= Subject key identifier: 41:BB:9F:6D:0F:50:97:8E:84:90:FF:46:82:DC:34:5F:A7:66:41:02 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F4A6A7493A16A228333C540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65d54075-13a7-33b0-8f85-81ef9cb7c02c.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396584 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:6a:74:93:a1:6a:22:83:33:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=0ed9b0fa-6563-409d-a2cb-42062d609bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a3:dd:30:79:f9:57:f1:4c:73:24:a8:b9:84: 8d:cd:d8:7b:e5:ed:db:de:55:3d:e1:6d:e5:1d:3e: a9:4b:46:88:4c:48:c2:f1:23:a6:06:31:4a:54:42: 4c:06:6e:85:20:ec:67:1c:c7:d2:f9:fd:ea:8b:e1: d2:00:98:3f:dd:53:e8:92:cc:d9:99:7d:3f:21:11: d0:0f:ee:d4:19:fe:66:32:5e:00:bb:d8:8e:8b:c7: 79:88:be:e3:c3:cb:47:9a:48:4c:21:bf:47:68:23: 3d:fd:aa:a7:7b:d2:42:30:c7:7a:0a:42:8d:e2:75: 8a:c7:c1:fa:2c:93:16:6b:e3:8d:08:f1:47:88:5b: d0:9c:f4:40:7e:42:f0:59:a9:52:ca:a4:30:2b:05: 58:ec:bb:c7:26:e2:ae:e3:fd:92:6d:2e:90:50:71: 12:43:c8:ae:a8:f6:60:55:3c:b6:6a:59:72:52:3a: 87:69:49:e4:c7:ea:e6:5c:0b:ae:e2:26:e1:72:aa: 9b:af:e3:3b:55:5b:ea:a1:5d:84:d3:13:cd:cc:f4: 91:16:f5:b7:c9:8f:0c:af:89:2e:22:b6:45:34:8a: 5c:12:42:bd:6e:94:ce:2f:96:80:50:3c:0f:99:13: 9e:94:4c:b9:c4:7f:ca:f8:e6:57:bd:11:b2:37:ba: 40:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:BB:9F:6D:0F:50:97:8E:84:90:FF:46:82:DC:34:5F:A7:66:41:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/65d54075-13a7-33b0-8f85-81ef9cb7c02c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:8b:24:7f:d0:2c:08:ce:97:40:6b:1d:6b:cf:72:89:81:1b: 83:d7:52:07:77:fd:5e:57:be:60:12:88:fb:3a:a2:38:35:86: fc:cd:7e:9d:76:0a:78:e2:e6:f6:6a:18:1f:19:79:69:8e:66: 47:47:69:e9:fc:d9:9f:53:f9:e4:4a:6d:77:26:dc:02:f5:1d: 0d:2d:46:0c:53:93:0e:16:83:45:77:9b:03:c9:e3:b3:2c:f5: 14:b2:dc:5b:a0:aa:1d:de:1b:87:38:31:ad:d1:9e:36:80:51: 1e:a1:77:ff:e4:3f:98:67:62:24:cd:29:ab:87:80:9a:2f:f7: a6:69:07:1a:8a:96:77:fd:20:d2:99:af:f6:89:6f:5d:bb:5b: 59:89:c9:3a:b7:ed:fd:1d:d3:18:c4:f7:70:37:b5:15:b9:34: 30:3d:56:0e:50:6c:36:e7:90:62:24:68:a1:9b:88:05:c8:3b: c3:e7:4b:92:ed:e7:d8:ab:75:0a:9b:85:1b:f1:0a:03:e5:e3: 51:ff:2c:b5:cb:34:95:97:62:f7:8d:b0:15:ae:a1:19:d6:8d: b7:f6:38:4c:0f:ff:a1:6f:a2:df:74:cf:5c:79:ba:90:9f:7e: 07:2c:3d:16:32:6f:ec:88:2a:80:f4:57:55:55:93:10:8a:67: b3:0f:99:ad -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmp0k6FqIoMzxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MGVkOWIwZmEtNjU2My00MDlkLWEyY2ItNDIwNjJkNjA5YmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqPdMHn5V/FMcySouYSNzdh75e3b3lU94W3l HT6pS0aITEjC8SOmBjFKVEJMBm6FIOxnHMfS+f3qi+HSAJg/3VPokszZmX0/IRHQ D+7UGf5mMl4Au9iOi8d5iL7jw8tHmkhMIb9HaCM9/aqne9JCMMd6CkKN4nWKx8H6 LJMWa+ONCPFHiFvQnPRAfkLwWalSyqQwKwVY7LvHJuKu4/2SbS6QUHESQ8iuqPZg VTy2allyUjqHaUnkx+rmXAuu4ibhcqqbr+M7VVvqoV2E0xPNzPSRFvW3yY8Mr4ku IrZFNIpcEkK9bpTOL5aAUDwPmROelEy5xH/K+OZXvRGyN7pAuQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEG7n20PUJeOhJD/RoLcNF+nZkECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjVkNTQwNzUtMTNhNy0z M2IwLThmODUtODFlZjljYjdjMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQACiyR/0CwIzpdAax1rz3KJgRuD11IHd/1eV75g Eoj7OqI4NYb8zX6ddgp44ub2ahgfGXlpjmZHR2np/NmfU/nkSm13JtwC9R0NLUYM U5MOFoNFd5sDyeOzLPUUstxboKod3huHODGt0Z42gFEeoXf/5D+YZ2IkzSmrh4Ca L/emaQcaipZ3/SDSma/2iW9du1tZick6t+39HdMYxPdwN7UVuTQwPVYOUGw255Bi JGihm4gFyDvD50uS7efYq3UKm4Ub8QoD5eNR/yy1yzSVl2L3jbAVrqEZ1o239jhM D/+hb6LfdM9cebqQn34HLD0WMm/siCqA9FdVVZMQimezD5mt -----END CERTIFICATE-----Generated at Thu Mar 26 13:25:02 2026 by rpki-client