$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71ed29e9-62d4-38f7-9035-9ca02b5642ca.roa File: 71ed29e9-62d4-38f7-9035-9ca02b5642ca.roa (raw, json) Hash identifier: CTyCpVQvT/WA0Q1s0wNMIH0hcKx2I3q93t/cTYDXCaM= Subject key identifier: BB:73:E8:43:9B:39:22:97:F7:85:5F:40:FF:C5:13:BF:E1:83:53:BD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C03671DAAC254CEE3F39010 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71ed29e9-62d4-38f7-9035-9ca02b5642ca.roa Signing time: Tue 03 Mar 2026 15:18:08 +0000 ROA not before: Tue 03 Mar 2026 15:18:08 +0000 ROA not after: Mon 01 Jun 2026 14:18:08 +0000 asID: 396608 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:67:1d:aa:c2:54:ce:e3:f3:90:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:08 2026 GMT Not After : Jun 1 14:18:08 2026 GMT Subject: CN=29f41ac5-0b13-411a-8ada-63b2fd5dbfdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ba:ec:f0:a1:71:a0:68:02:20:09:43:73:f8: 1a:d9:52:f1:9c:13:41:f3:eb:e0:bf:cc:3f:ad:74: 86:e8:67:e2:06:c9:5f:35:ea:32:5b:65:8f:1d:f0: 64:9c:36:91:f1:62:3d:11:d3:c9:37:60:06:5d:91: 14:df:58:7b:f0:eb:e1:10:50:ce:f1:46:38:7a:59: f7:80:9b:79:69:2a:b3:cc:92:eb:ca:c1:b1:a3:fe: 30:03:18:49:3c:82:1d:ae:a2:4c:12:4a:e1:a5:20: b4:59:0d:eb:3c:ed:30:b1:1b:4c:dc:80:81:4b:5e: dc:01:79:fd:a1:ad:50:63:d5:c9:9f:a8:ee:90:ed: ff:a4:ae:bd:6c:7f:19:e6:a3:2e:89:b6:a6:59:de: b3:66:cc:67:52:5c:17:8e:8a:2e:da:d8:0a:b8:ba: f3:3d:85:74:18:ab:7f:3a:cc:be:82:94:6d:4a:20: b8:e4:b3:49:3a:9e:7e:80:2d:ab:be:8e:f4:6f:f2: 41:5f:d8:12:75:a4:88:87:d8:fb:98:4a:90:11:4c: a6:37:84:db:19:d8:cd:e1:33:9f:c7:42:6b:21:81: 8a:ca:f1:30:24:a6:af:36:e1:a5:84:d5:d5:da:38: 97:44:88:ce:29:74:1f:06:47:79:12:38:03:66:e9: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:73:E8:43:9B:39:22:97:F7:85:5F:40:FF:C5:13:BF:E1:83:53:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/71ed29e9-62d4-38f7-9035-9ca02b5642ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:98:f6:91:91:20:ce:1e:2a:eb:21:da:99:e4:85:91:1d:fc: 6c:4c:b1:ea:9e:ae:a0:5c:03:b4:0d:d3:81:58:3b:45:c0:bc: 41:75:6a:23:25:0b:56:d5:ef:54:3a:ff:5f:4e:2c:38:56:5e: db:11:93:cc:12:2f:05:95:81:83:0d:80:0a:ac:74:1b:9b:04: 13:45:8c:49:19:55:68:60:3f:b6:2f:74:c1:02:36:9e:7d:c9: 13:10:3c:33:54:da:e5:ce:63:2f:fc:34:d6:34:bf:81:e3:da: 47:5f:48:d9:a7:22:50:66:ff:8d:69:29:bb:1e:b3:29:75:c4: 1f:56:0a:1e:a2:33:56:16:22:b4:a5:19:17:60:e6:c0:34:a1: 92:e3:3c:25:0a:41:1e:b1:93:13:55:60:d7:cf:18:e5:53:ef: 0e:2e:fe:dc:6c:51:3f:3b:9d:9e:00:65:c5:b0:dd:b8:49:1e: f1:dd:81:81:e4:8b:ff:4f:88:4a:7e:bf:a1:fa:f5:42:35:e0: 13:5c:61:d9:ac:92:5f:4a:d0:98:b6:17:ae:af:3a:08:f7:44: 3e:7c:35:f9:3e:57:49:e0:13:6e:e0:ed:82:4d:56:cb:5f:f0: 1d:0f:c8:d5:37:cf:b8:88:24:d8:cc:7a:b8:ff:04:c7:96:9b: 82:ac:84:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2cdqsJUzuPzkBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwOFoXDTI2MDYwMTE0MTgwOFowLzEtMCsGA1UEAxMk MjlmNDFhYzUtMGIxMy00MTFhLThhZGEtNjNiMmZkNWRiZmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6brs8KFxoGgCIAlDc/ga2VLxnBNB8+vgv8w/ rXSG6GfiBslfNeoyW2WPHfBknDaR8WI9EdPJN2AGXZEU31h78OvhEFDO8UY4eln3 gJt5aSqzzJLrysGxo/4wAxhJPIIdrqJMEkrhpSC0WQ3rPO0wsRtM3ICBS17cAXn9 oa1QY9XJn6jukO3/pK69bH8Z5qMuibamWd6zZsxnUlwXjoou2tgKuLrzPYV0GKt/ Osy+gpRtSiC45LNJOp5+gC2rvo70b/JBX9gSdaSIh9j7mEqQEUymN4TbGdjN4TOf x0JrIYGKyvEwJKavNuGlhNXV2jiXRIjOKXQfBkd5EjgDZulteQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLtz6EObOSKX94VfQP/FE7/hg1O9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzFlZDI5ZTktNjJkNC0z OGY3LTkwMzUtOWNhMDJiNTY0MmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKKY9pGRIM4eKush2pnkhZEd/GxMseqerqBcA7QN04FYO0XAvEF1 aiMlC1bV71Q6/19OLDhWXtsRk8wSLwWVgYMNgAqsdBubBBNFjEkZVWhgP7YvdMEC Np59yRMQPDNU2uXOYy/8NNY0v4Hj2kdfSNmnIlBm/41pKbsesyl1xB9WCh6iM1YW IrSlGRdg5sA0oZLjPCUKQR6xkxNVYNfPGOVT7w4u/txsUT87nZ4AZcWw3bhJHvHd gYHki/9PiEp+v6H69UI14BNcYdmskl9K0Ji2F66vOgj3RD58Nfk+V0ngE27g7YJN Vstf8B0PyNU3z7iIJNjMerj/BMeWm4KshA8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:11 2026 by rpki-client