$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fa2adee-f177-3dfc-be26-a9caaadb2932.roa File: 7fa2adee-f177-3dfc-be26-a9caaadb2932.roa (raw, json) Hash identifier: XDFu/dRkvX+zXlQt6OZYaKk1xao1ax4nOhJC5YMyT24= Subject key identifier: 59:E2:7D:FB:91:61:E7:92:FB:CF:17:50:C9:45:55:BF:CB:9E:C6:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A08A60D87B5F81256240 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fa2adee-f177-3dfc-be26-a9caaadb2932.roa Signing time: Tue 10 Mar 2026 14:28:38 +0000 ROA not before: Tue 10 Mar 2026 14:28:38 +0000 ROA not after: Mon 08 Jun 2026 14:28:38 +0000 asID: 396609 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a0:8a:60:d8:7b:5f:81:25:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:38 2026 GMT Not After : Jun 8 14:28:38 2026 GMT Subject: CN=87a0dc5d-c068-4671-81db-48719a7ce0ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:72:b0:6e:e7:d6:aa:a2:56:eb:1e:6b:1d:22: 2f:ff:70:18:67:e3:a3:e0:87:75:0d:44:22:32:9e: 54:b2:b3:e5:a9:76:c8:39:e8:05:a6:03:7f:5b:72: 39:6f:12:99:e1:3a:48:a0:32:0f:03:bb:3b:08:0c: 5e:78:a0:cd:9b:4f:35:a7:b0:78:6e:c4:64:1f:8b: 96:dd:7d:2d:8c:c5:84:c3:4c:8b:97:ba:a4:cb:42: 9e:f0:e3:a5:bf:39:1f:39:99:93:65:92:d6:d8:22: d0:ea:6d:fd:86:7c:89:d8:79:79:04:f5:67:bd:33: ee:37:75:da:c1:8e:a0:d1:46:32:92:dd:9b:35:b5: db:b0:8c:6b:17:63:14:65:dc:4b:18:e1:7e:25:cc: 1b:02:0e:cf:04:7f:f0:66:6d:08:e5:38:15:05:7d: c2:d7:22:45:09:39:41:74:e6:25:d0:c7:72:b0:bf: 06:dc:82:2f:d1:e4:f8:2c:b4:2d:04:e4:44:27:6c: dd:fb:1d:8d:39:05:0c:37:ac:88:f6:e9:91:4c:1e: 08:91:c5:56:7e:8b:07:43:83:ba:f0:cc:0e:eb:21: 14:b5:7d:8f:0c:9d:b9:ba:34:4e:0b:0b:23:aa:4d: e4:e3:32:d4:51:22:b7:df:b5:af:de:bb:2f:ba:f4: dd:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E2:7D:FB:91:61:E7:92:FB:CF:17:50:C9:45:55:BF:CB:9E:C6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7fa2adee-f177-3dfc-be26-a9caaadb2932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:12:7f:71:d8:9e:84:62:4c:0a:8b:4b:2c:98:d7:98:51:e6: a7:ff:14:81:4f:44:75:f9:5a:3f:b0:de:dd:31:5c:6d:2a:f4: 3f:33:7a:94:79:cf:0c:33:49:8b:22:a9:76:10:a7:60:3a:1f: da:48:ff:c0:1d:72:e1:40:44:d4:95:1e:6e:a0:3c:f7:11:1c: 92:fa:ec:25:df:87:d3:4e:d7:43:0a:d0:74:98:b8:cf:19:82: b1:bf:0e:b2:c2:3f:39:98:cf:72:34:90:37:6a:3b:d4:80:e3: 5c:66:3e:c4:a9:c2:bc:99:69:68:25:70:26:e7:c1:1e:c9:13: bb:d6:a3:98:02:1d:d5:83:88:9b:87:22:74:2f:d0:93:44:16: 2b:05:0a:69:37:39:40:fe:be:f6:89:43:a0:6b:9e:9c:4d:ea: 2d:6e:8e:18:b0:9f:54:21:a2:8c:8d:2c:cb:10:c9:76:85:4a: 7a:06:c6:71:39:26:34:1a:b3:62:ef:c1:31:42:4e:ba:bc:d2: 6f:d8:b6:dd:41:69:7a:c4:a7:66:aa:9d:5b:70:9f:ad:f3:61: 48:be:00:c0:04:32:8f:d9:34:d1:b3:5d:71:30:d9:b7:a8:a3: 09:e7:fa:2e:98:d5:93:39:66:13:da:9c:78:0c:22:50:38:4c: d0:60:e1:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdaCKYNh7X4ElYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzOFoXDTI2MDYwODE0MjgzOFowLzEtMCsGA1UEAxMk ODdhMGRjNWQtYzA2OC00NjcxLTgxZGItNDg3MTlhN2NlMGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnKwbufWqqJW6x5rHSIv/3AYZ+Oj4Id1DUQi Mp5UsrPlqXbIOegFpgN/W3I5bxKZ4TpIoDIPA7s7CAxeeKDNm081p7B4bsRkH4uW 3X0tjMWEw0yLl7qky0Ke8OOlvzkfOZmTZZLW2CLQ6m39hnyJ2Hl5BPVnvTPuN3Xa wY6g0UYykt2bNbXbsIxrF2MUZdxLGOF+JcwbAg7PBH/wZm0I5TgVBX3C1yJFCTlB dOYl0MdysL8G3IIv0eT4LLQtBOREJ2zd+x2NOQUMN6yI9umRTB4IkcVWfosHQ4O6 8MwO6yEUtX2PDJ25ujROCwsjqk3k4zLUUSK337Wv3rsvuvTduQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFniffuRYeeS+88XUMlFVb/LnsYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2ZhMmFkZWUtZjE3Ny0z ZGZjLWJlMjYtYTljYWFhZGIyOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ8Sf3HYnoRiTAqLSyyY15hR5qf/FIFPRHX5Wj+w3t0xXG0q9D8z epR5zwwzSYsiqXYQp2A6H9pI/8AdcuFARNSVHm6gPPcRHJL67CXfh9NO10MK0HSY uM8ZgrG/DrLCPzmYz3I0kDdqO9SA41xmPsSpwryZaWglcCbnwR7JE7vWo5gCHdWD iJuHInQv0JNEFisFCmk3OUD+vvaJQ6BrnpxN6i1ujhiwn1QhooyNLMsQyXaFSnoG xnE5JjQas2LvwTFCTrq80m/Ytt1BaXrEp2aqnVtwn63zYUi+AMAEMo/ZNNGzXXEw 2beoownn+i6Y1ZM5ZhPanHgMIlA4TNBg4Vk= -----END CERTIFICATE-----Generated at Thu Mar 26 11:08:59 2026 by rpki-client