$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/749be1da-cab9-316d-8b21-96a2a6ab5d33.roa File: 749be1da-cab9-316d-8b21-96a2a6ab5d33.roa (raw, json) Hash identifier: 0/Yx8AP4uZpTqWu9klDmmos0OsH3ckUE7WkDMQKsb6Y= Subject key identifier: 1B:8A:8E:2C:89:D2:12:05:7E:8F:26:92:DD:AB:CE:74:4A:DA:3B:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C03670F0C0D963AB6276F40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/749be1da-cab9-316d-8b21-96a2a6ab5d33.roa Signing time: Tue 03 Mar 2026 15:18:08 +0000 ROA not before: Tue 03 Mar 2026 15:18:08 +0000 ROA not after: Mon 01 Jun 2026 14:18:08 +0000 asID: 20172 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:67:0f:0c:0d:96:3a:b6:27:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:08 2026 GMT Not After : Jun 1 14:18:08 2026 GMT Subject: CN=50d981e5-1fa8-420c-aec3-d3913d0f08a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:cf:4b:4b:87:06:f5:1d:68:63:12:53:2c: e4:fb:13:3a:dc:69:3c:1c:e0:92:12:4d:b5:74:c9: 22:e2:04:c5:bf:17:1a:a6:75:9b:dd:0e:a5:4d:55: b1:07:6f:42:6d:51:2d:c5:19:a6:17:47:80:5a:32: 95:3e:99:24:21:1f:cd:21:e5:3b:a9:fa:50:b1:4c: a1:d5:a3:a3:9c:05:9c:be:83:6c:6a:45:13:e4:1c: 87:8a:a4:be:c9:47:19:4c:db:f8:cd:9f:dd:03:47: b0:c4:3f:80:37:49:0a:03:cc:c8:d8:25:82:ac:55: e3:e5:81:91:5b:f2:f2:9b:f3:c5:ca:1f:49:3d:2e: 0a:64:a9:e1:69:d1:bf:c9:94:bc:0d:91:af:a6:a8: 5f:af:78:75:a3:59:27:fd:1f:ae:00:bf:54:7c:b2: 92:b7:eb:a6:86:cc:59:87:90:f9:08:63:9d:75:b1: e3:da:c1:9e:63:9e:a4:2d:fb:1e:4d:5a:60:35:85: bd:5a:2c:76:0a:78:62:2a:72:7d:f0:ba:9b:59:40: 99:a2:0b:da:e8:1e:82:64:7a:20:24:40:5a:d6:b6: a1:f4:cc:78:fc:c3:34:b8:50:9a:0f:c6:89:54:0d: 94:bb:ff:00:4f:2e:64:f5:64:2c:af:23:ef:47:7d: 31:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8A:8E:2C:89:D2:12:05:7E:8F:26:92:DD:AB:CE:74:4A:DA:3B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/749be1da-cab9-316d-8b21-96a2a6ab5d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:35:5b:a0:6a:4f:39:d2:88:aa:57:e9:21:21:86:0c:73:b6: 99:e6:85:fa:10:1a:75:52:fa:92:1a:b8:c1:94:fc:2a:36:d2: f7:16:7e:41:d5:73:ed:7c:eb:87:2c:fb:83:58:83:ae:74:69: 6a:de:58:20:08:8d:38:9d:bf:b5:43:2d:b5:94:fc:9f:3a:2a: c2:76:30:e0:bb:63:ab:d7:ec:54:a5:83:83:b2:77:32:4f:e8: 8d:53:af:f3:8d:6b:e5:47:ef:c9:e8:0e:ef:74:24:c3:7b:69: 5e:91:b3:db:28:78:97:45:97:5e:7d:89:66:f9:63:13:d0:28: 98:02:34:31:39:ae:e2:98:a3:d3:74:da:8c:33:94:25:4e:3a: 68:a9:64:63:33:13:e2:ba:1a:84:cb:12:67:4d:f8:c8:9b:c4: 19:1b:6e:42:e1:91:40:46:9a:f7:ff:9c:23:bc:b9:93:b6:c9: 10:88:0b:60:cc:fb:f2:62:3f:6a:7b:2e:c8:33:17:57:23:c0: 3a:6b:b2:db:f5:0f:fc:5d:66:60:80:bb:c5:a8:20:12:a3:66: cf:41:e5:79:23:2f:51:13:2e:e2:06:78:8e:a1:9f:5f:49:b6: d9:b9:c8:93:9d:a8:aa:0a:c0:22:45:35:ee:93:cb:a8:90:85: b8:12:45:8f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2cPDA2WOrYnb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwOFoXDTI2MDYwMTE0MTgwOFowLzEtMCsGA1UEAxMk NTBkOTgxZTUtMWZhOC00MjBjLWFlYzMtZDM5MTNkMGYwOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplXPS0uHBvUdaGMSUyzk+xM63Gk8HOCSEk21 dMki4gTFvxcapnWb3Q6lTVWxB29CbVEtxRmmF0eAWjKVPpkkIR/NIeU7qfpQsUyh 1aOjnAWcvoNsakUT5ByHiqS+yUcZTNv4zZ/dA0ewxD+AN0kKA8zI2CWCrFXj5YGR W/Lym/PFyh9JPS4KZKnhadG/yZS8DZGvpqhfr3h1o1kn/R+uAL9UfLKSt+umhsxZ h5D5CGOddbHj2sGeY56kLfseTVpgNYW9Wix2CnhiKnJ98LqbWUCZogva6B6CZHog JEBa1rah9Mx4/MM0uFCaD8aJVA2Uu/8ATy5k9WQsryPvR30xpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBuKjiyJ0hIFfo8mkt2rznRK2juZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNzQ5YmUxZGEtY2FiOS0z MTZkLThiMjEtOTZhMmE2YWI1ZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKs1W6BqTznSiKpX6SEhhgxztpnmhfoQGnVS+pIauMGU/Co20vcW fkHVc+1864cs+4NYg650aWreWCAIjTidv7VDLbWU/J86KsJ2MOC7Y6vX7FSlg4Oy dzJP6I1Tr/ONa+VH78noDu90JMN7aV6Rs9soeJdFl159iWb5YxPQKJgCNDE5ruKY o9N02owzlCVOOmipZGMzE+K6GoTLEmdN+MibxBkbbkLhkUBGmvf/nCO8uZO2yRCI C2DM+/JiP2p7LsgzF1cjwDprstv1D/xdZmCAu8WoIBKjZs9B5XkjL1ETLuIGeI6h n19Jttm5yJOdqKoKwCJFNe6Ty6iQhbgSRY8= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:19 2026 by rpki-client