$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68e0710c-b4dd-36d4-955d-c0781251a3e9.roa File: 68e0710c-b4dd-36d4-955d-c0781251a3e9.roa (raw, json) Hash identifier: A827f+HgClxegdABtBYCy+sC+EdBbp83P8Iw93rSoZI= Subject key identifier: AD:43:E8:02:E0:F4:9A:A4:C4:61:98:B1:E7:AC:4B:6F:C8:5E:88:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A81BDB5D71AA8ABCBB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68e0710c-b4dd-36d4-955d-c0781251a3e9.roa Signing time: Tue 10 Mar 2026 14:28:42 +0000 ROA not before: Tue 10 Mar 2026 14:28:42 +0000 ROA not after: Mon 08 Jun 2026 14:28:42 +0000 asID: 396603 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a8:1b:db:5d:71:aa:8a:bc:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:42 2026 GMT Not After : Jun 8 14:28:42 2026 GMT Subject: CN=e3402d6a-963f-40de-ae6f-1760e48251ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f1:68:49:d4:77:3c:f2:9e:d9:3e:8f:a5:51: 1f:ac:79:3e:bb:f6:5f:09:1a:f3:9c:67:aa:76:85: 1c:be:3d:00:ce:bd:5f:d9:a1:08:4a:d2:56:a2:37: d7:53:26:f1:25:39:26:7e:60:bd:24:53:99:66:da: b6:51:fe:82:e6:f1:19:13:d8:ce:9b:dc:58:56:a1: 92:93:fa:a1:7e:0e:b2:d9:98:cc:3a:ed:c3:35:bc: 93:58:73:d5:9c:fe:80:04:cb:b8:3c:72:86:2b:f9: 22:3a:19:0c:5c:06:6d:fd:79:65:cb:48:b4:05:6f: 55:23:a3:4f:d6:df:7c:8f:33:16:10:09:a1:74:35: 89:50:23:4a:2e:71:e5:09:15:1e:04:f2:31:16:cf: bb:ff:b8:26:99:ee:cb:0e:ac:39:da:a6:2b:31:95: 55:30:55:93:9d:a1:90:8e:80:96:69:e7:8a:19:f5: f0:e7:7a:56:bd:35:3d:e2:39:f1:9e:71:e8:a0:cc: 59:e9:24:56:fb:6f:5d:be:ca:d6:f2:27:f4:e9:9b: 88:7c:46:d7:01:de:b8:fd:cd:f4:d9:c6:13:72:de: 56:02:cf:b7:61:51:94:b3:95:c5:82:61:fa:a8:a0: 4a:09:bd:fc:4c:e5:02:f4:6a:31:4c:38:01:01:8b: 8a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:43:E8:02:E0:F4:9A:A4:C4:61:98:B1:E7:AC:4B:6F:C8:5E:88:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/68e0710c-b4dd-36d4-955d-c0781251a3e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b3:f1:53:ff:59:d9:02:3e:2e:55:5b:5b:12:fa:65:73:89: 15:95:7c:ff:aa:e0:14:41:00:32:f3:4e:b5:8e:dc:cf:2f:41: 41:d6:a3:76:ce:20:23:1d:f0:8a:73:ce:e6:21:98:b1:bd:9d: a7:f8:f0:79:8b:15:a1:4a:8b:0e:20:3e:46:ad:b2:da:fb:3a: ef:52:ce:4a:9e:c2:e3:02:a8:be:35:8f:33:b2:64:17:f2:b0: d6:0c:1f:38:37:50:a7:58:dc:45:c1:c7:58:e5:35:f2:7a:9d: 9a:f3:b4:71:4a:91:b3:b0:eb:41:9d:12:d8:0c:15:8b:10:bd: 78:ed:e4:c1:9c:f9:57:dd:40:9c:45:8d:07:e1:79:a2:b9:20: 45:23:d7:25:68:34:ed:67:54:b3:ce:91:70:e9:fb:60:49:e4: 65:39:38:dd:b8:b7:8c:2e:fa:99:20:72:2a:c7:74:9f:e9:20: 64:38:ce:7a:df:d0:24:69:ae:a7:0e:2d:40:1d:a0:39:ba:ce: a3:11:0c:ce:0c:6e:0d:c7:4a:d3:e0:4f:db:92:3b:14:46:56: 8c:fa:65:38:89:25:3f:73:e7:ac:b5:32:91:63:dd:3d:17:eb: 83:76:56:33:14:b6:67:d7:4e:8d:ec:3b:4b:7b:a7:22:87:dd: 0d:ad:c4:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdagb211xqoq8u4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0Mjg0MloXDTI2MDYwODE0Mjg0MlowLzEtMCsGA1UEAxMk ZTM0MDJkNmEtOTYzZi00MGRlLWFlNmYtMTc2MGU0ODI1MWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/FoSdR3PPKe2T6PpVEfrHk+u/ZfCRrznGeq doUcvj0Azr1f2aEIStJWojfXUybxJTkmfmC9JFOZZtq2Uf6C5vEZE9jOm9xYVqGS k/qhfg6y2ZjMOu3DNbyTWHPVnP6ABMu4PHKGK/kiOhkMXAZt/Xlly0i0BW9VI6NP 1t98jzMWEAmhdDWJUCNKLnHlCRUeBPIxFs+7/7gmme7LDqw52qYrMZVVMFWTnaGQ joCWaeeKGfXw53pWvTU94jnxnnHooMxZ6SRW+29dvsrW8if06ZuIfEbXAd64/c30 2cYTct5WAs+3YVGUs5XFgmH6qKBKCb38TOUC9GoxTDgBAYuKiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK1D6ALg9JqkxGGYseesS2/IXoj6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjhlMDcxMGMtYjRkZC0z NmQ0LTk1NWQtYzA3ODEyNTFhM2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEiz8VP/WdkCPi5VW1sS+mVziRWVfP+q4BRBADLzTrWO3M8vQUHW o3bOICMd8IpzzuYhmLG9naf48HmLFaFKiw4gPkatstr7Ou9SzkqewuMCqL41jzOy ZBfysNYMHzg3UKdY3EXBx1jlNfJ6nZrztHFKkbOw60GdEtgMFYsQvXjt5MGc+Vfd QJxFjQfheaK5IEUj1yVoNO1nVLPOkXDp+2BJ5GU5ON24t4wu+pkgcirHdJ/pIGQ4 znrf0CRprqcOLUAdoDm6zqMRDM4Mbg3HStPgT9uSOxRGVoz6ZTiJJT9z56y1MpFj 3T0X64N2VjMUtmfXTo3sO0t7pyKH3Q2txL0= -----END CERTIFICATE-----Generated at Thu Mar 26 08:38:58 2026 by rpki-client