$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cfbee91-9b8f-3d9c-a277-92a447a73f16.roa File: 6cfbee91-9b8f-3d9c-a277-92a447a73f16.roa (raw, json) Hash identifier: hvAS5A8Hztz1KIJi24L41jgCpatSV4rs9TVy4DoMlWc= Subject key identifier: C9:47:8D:C9:94:6D:F5:F6:5D:91:88:FB:BA:E6:4A:92:97:94:38:DB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759E4171A82813404BC320 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cfbee91-9b8f-3d9c-a277-92a447a73f16.roa Signing time: Tue 10 Mar 2026 14:28:37 +0000 ROA not before: Tue 10 Mar 2026 14:28:37 +0000 ROA not after: Mon 08 Jun 2026 14:28:37 +0000 asID: 396546 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9e:41:71:a8:28:13:40:4b:c3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:37 2026 GMT Not After : Jun 8 14:28:37 2026 GMT Subject: CN=2c03ff80-23af-43d0-b875-d30ce7872912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d6:03:e9:ce:15:cd:5e:98:79:df:fc:60:31: b0:de:dd:8f:d1:34:e3:19:bc:10:d5:a8:16:e0:70: 16:0c:83:2e:c6:9d:8c:e6:c2:2e:65:df:b8:16:dc: 25:72:8b:f2:11:7e:90:ca:1b:6d:fd:27:65:8e:f2: ea:6c:28:9c:da:e2:fb:4f:25:7c:9b:e2:c6:dd:e7: 44:8d:56:b2:2b:17:f9:40:6d:7b:d8:a2:fe:be:f5: 30:6a:9b:bd:d7:4c:7c:6b:73:ec:75:eb:b8:63:5b: 23:93:cd:03:83:64:2a:28:96:62:82:6c:2c:60:66: 03:12:32:7b:ea:20:48:ac:88:57:3b:d5:cd:29:00: ca:b4:21:0c:c2:89:d6:f7:8d:31:f2:d9:6e:a8:08: 0b:02:f4:4b:c9:32:6c:a9:99:63:e1:05:7e:f1:0f: 4f:ac:f3:62:27:59:39:96:7e:34:31:d5:6f:c7:3c: 2b:2a:0c:25:22:97:ac:59:2d:ff:89:41:ca:b2:8f: 4e:e0:38:c5:00:57:18:3a:45:df:b5:e3:9b:6a:e0: bc:28:98:e8:28:48:14:e8:2a:f4:88:98:d2:ed:0e: 38:0c:89:c0:48:ca:0c:5d:37:bf:7b:9c:93:d4:e8: 92:09:d8:a6:a6:de:dc:f2:b1:58:ef:1d:1b:eb:92: 56:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:47:8D:C9:94:6D:F5:F6:5D:91:88:FB:BA:E6:4A:92:97:94:38:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/6cfbee91-9b8f-3d9c-a277-92a447a73f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:37:1b:2d:3f:a5:cd:53:9e:69:82:83:82:3b:5b:77:a9:d3: 83:d8:9c:cc:93:f7:77:7c:6b:f4:49:06:5a:88:b4:61:41:e7: 5e:af:dd:48:88:82:e4:ba:31:ce:70:34:34:29:94:b8:24:6f: f6:5c:e2:c8:0a:c9:f1:09:a9:e0:c0:1b:8c:e9:e4:69:f5:bc: 44:f9:f7:d8:14:30:25:86:e2:e0:71:05:1b:22:43:41:39:35: 19:61:ef:dc:7b:1a:94:fa:47:a7:43:b4:8e:0e:a6:4e:91:b0: 65:29:02:95:9f:7b:fe:f4:7c:6e:94:26:1d:aa:b7:b2:43:d2: b2:c6:42:ee:43:ff:be:36:79:d7:e0:20:72:0e:c5:00:b8:a7: d9:61:57:9d:a1:b3:c0:e6:86:23:5b:03:38:4e:3b:e1:04:3b: 38:00:99:4e:a9:bb:ee:d4:9b:68:23:ff:10:c3:d1:57:2c:15: d3:9d:bd:eb:9a:2c:22:b3:3a:f4:b0:0b:59:8a:cf:7c:d4:f5: b2:a9:43:8d:47:a1:37:96:67:72:24:98:2a:63:8d:85:30:1f: a4:1c:fb:82:ce:f5:96:1d:26:04:33:25:0c:81:40:a2:47:12: 04:4f:86:5a:c2:a3:0f:24:98:3e:13:46:5f:e3:c4:81:87:84: 4f:0b:c9:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZ5BcagoE0BLwyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzN1oXDTI2MDYwODE0MjgzN1owLzEtMCsGA1UEAxMk MmMwM2ZmODAtMjNhZi00M2QwLWI4NzUtZDMwY2U3ODcyOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9YD6c4VzV6Yed/8YDGw3t2P0TTjGbwQ1agW 4HAWDIMuxp2M5sIuZd+4FtwlcovyEX6Qyhtt/SdljvLqbCic2uL7TyV8m+LG3edE jVayKxf5QG172KL+vvUwapu910x8a3Psdeu4Y1sjk80Dg2QqKJZigmwsYGYDEjJ7 6iBIrIhXO9XNKQDKtCEMwonW940x8tluqAgLAvRLyTJsqZlj4QV+8Q9PrPNiJ1k5 ln40MdVvxzwrKgwlIpesWS3/iUHKso9O4DjFAFcYOkXfteObauC8KJjoKEgU6Cr0 iJjS7Q44DInASMoMXTe/e5yT1OiSCdimpt7c8rFY7x0b65JWjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMlHjcmUbfX2XZGI+7rmSpKXlDjbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNmNmYmVlOTEtOWI4Zi0z ZDljLWEyNzctOTJhNDQ3YTczZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABg3Gy0/pc1TnmmCg4I7W3ep04PYnMyT93d8a/RJBlqItGFB516v 3UiIguS6Mc5wNDQplLgkb/Zc4sgKyfEJqeDAG4zp5Gn1vET599gUMCWG4uBxBRsi Q0E5NRlh79x7GpT6R6dDtI4Opk6RsGUpApWfe/70fG6UJh2qt7JD0rLGQu5D/742 edfgIHIOxQC4p9lhV52hs8DmhiNbAzhOO+EEOzgAmU6pu+7Um2gj/xDD0VcsFdOd veuaLCKzOvSwC1mKz3zU9bKpQ41HoTeWZ3IkmCpjjYUwH6Qc+4LO9ZYdJgQzJQyB QKJHEgRPhlrCow8kmD4TRl/jxIGHhE8LyRA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:25 2026 by rpki-client