$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/698f6731-dcf5-35dd-a082-544ed26c8c18.roa File: 698f6731-dcf5-35dd-a082-544ed26c8c18.roa (raw, json) Hash identifier: nrqSFjEphhQ0eG4YSwt/GuK2THgX5MP/6je8TY3Fpcs= Subject key identifier: 22:54:6E:8F:FE:32:D9:46:25:9D:2B:37:EA:57:54:85:2F:51:64:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C03622B5A674299256FA800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/698f6731-dcf5-35dd-a082-544ed26c8c18.roa Signing time: Tue 03 Mar 2026 15:18:06 +0000 ROA not before: Tue 03 Mar 2026 15:18:06 +0000 ROA not after: Mon 01 Jun 2026 14:18:06 +0000 asID: 396612 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:62:2b:5a:67:42:99:25:6f:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:06 2026 GMT Not After : Jun 1 14:18:06 2026 GMT Subject: CN=94461d86-061a-4061-97b4-b67cfba6818f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:96:f6:4d:72:ab:0b:a5:82:cb:40:9f:2f: dc:1a:65:1a:b7:f6:36:e0:40:78:05:fe:6a:00:b1: ec:fc:6b:c3:54:8b:41:51:94:d9:29:78:88:44:5b: 49:64:a2:9b:79:6b:1b:77:f4:3a:da:b7:2d:7e:4c: 6d:b7:c1:be:6a:e5:f5:15:5e:b8:05:b4:76:5e:8b: 54:60:a8:83:78:c2:bd:04:37:3f:95:7d:1d:14:82: 02:73:d8:01:c5:c0:3d:d8:93:b0:bf:c8:b6:54:20: a4:ee:c8:0d:d4:df:a8:54:c0:3d:bf:5f:2a:92:40: a2:90:a6:7c:7c:87:fd:46:9a:76:f0:bf:81:21:e1: 2a:8e:e1:05:fe:59:b5:b9:fe:49:6b:fa:ce:20:b5: f5:1e:3f:84:e2:64:5c:e4:c0:eb:53:7e:6f:1f:76: 2c:7e:c0:c9:27:83:6a:ec:84:d7:4b:25:16:10:ff: 00:3d:dc:91:73:5e:50:f5:a3:d1:e3:84:da:d1:d9: 45:92:16:bc:1e:3d:cd:26:37:b9:0d:33:ea:60:13: 77:12:40:20:01:43:38:6e:82:59:b9:c7:12:90:5b: c7:84:34:34:90:f6:d9:07:99:f7:fd:5a:66:3c:3d: 65:76:14:a1:46:64:72:cf:46:e7:f2:4b:34:04:74: d2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:54:6E:8F:FE:32:D9:46:25:9D:2B:37:EA:57:54:85:2F:51:64:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/698f6731-dcf5-35dd-a082-544ed26c8c18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:e1:69:72:c2:bb:5a:84:ce:8d:94:48:e7:e1:f9:98:bd:d4: c4:f6:a4:15:76:e3:9c:09:4a:a4:90:73:c4:c5:77:42:09:ee: a0:6d:75:a1:a2:f9:65:3d:a2:de:e4:70:de:cc:cd:14:90:c8: e9:4e:e9:0d:d0:e5:96:d9:dc:af:f7:83:71:06:c8:93:10:0c: 84:28:61:f8:5d:98:4d:5a:16:e1:5d:1a:ba:72:38:a2:a0:f0: 5a:1b:3f:05:ed:15:74:99:07:75:1b:55:6c:cd:b8:08:0a:aa: f6:0b:ce:39:80:73:78:75:98:24:05:21:f6:c3:a2:f5:c1:c4: 8e:07:81:85:07:a4:e5:08:8a:79:16:37:72:55:57:2a:ae:7a: 4f:e0:58:f6:b6:a7:87:2b:71:f2:f0:e8:f2:f2:e9:b9:6b:91: 41:62:39:ee:13:c2:ed:b2:91:60:c5:16:45:af:3e:e6:4d:7f: cf:1b:e8:c7:ad:27:11:c7:a9:fc:0e:bc:d3:24:74:f9:dc:64: 7d:f6:19:c2:46:3f:d4:94:ba:94:7c:40:df:49:13:af:4b:5c: 17:37:32:2e:91:09:a0:d8:11:0e:c9:2c:41:02:29:80:78:0f: 19:83:3d:e0:6a:95:97:fd:f5:9e:b8:2c:ff:b7:b4:63:30:bc: d2:07:ab:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2IrWmdCmSVvqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwNloXDTI2MDYwMTE0MTgwNlowLzEtMCsGA1UEAxMk OTQ0NjFkODYtMDYxYS00MDYxLTk3YjQtYjY3Y2ZiYTY4MThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmW9k1yqwulgstAny/cGmUat/Y24EB4Bf5q ALHs/GvDVItBUZTZKXiIRFtJZKKbeWsbd/Q62rctfkxtt8G+auX1FV64BbR2XotU YKiDeMK9BDc/lX0dFIICc9gBxcA92JOwv8i2VCCk7sgN1N+oVMA9v18qkkCikKZ8 fIf9Rpp28L+BIeEqjuEF/lm1uf5Ja/rOILX1Hj+E4mRc5MDrU35vH3YsfsDJJ4Nq 7ITXSyUWEP8APdyRc15Q9aPR44Ta0dlFkha8Hj3NJje5DTPqYBN3EkAgAUM4boJZ uccSkFvHhDQ0kPbZB5n3/VpmPD1ldhShRmRyz0bn8ks0BHTSAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCJUbo/+MtlGJZ0rN+pXVIUvUWREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjk4ZjY3MzEtZGNmNS0z NWRkLWEwODItNTQ0ZWQyNmM4YzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKHhaXLCu1qEzo2USOfh+Zi91MT2pBV245wJSqSQc8TFd0IJ7qBt daGi+WU9ot7kcN7MzRSQyOlO6Q3Q5ZbZ3K/3g3EGyJMQDIQoYfhdmE1aFuFdGrpy OKKg8FobPwXtFXSZB3UbVWzNuAgKqvYLzjmAc3h1mCQFIfbDovXBxI4HgYUHpOUI inkWN3JVVyquek/gWPa2p4crcfLw6PLy6blrkUFiOe4Twu2ykWDFFkWvPuZNf88b 6MetJxHHqfwOvNMkdPncZH32GcJGP9SUupR8QN9JE69LXBc3Mi6RCaDYEQ7JLEEC KYB4DxmDPeBqlZf99Z64LP+3tGMwvNIHqzE= -----END CERTIFICATE-----Generated at Thu Mar 26 13:14:45 2026 by rpki-client