$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/864c4f05-5cea-3509-a48f-1091345c7dde.roa File: 864c4f05-5cea-3509-a48f-1091345c7dde.roa (raw, json) Hash identifier: 14JcppxzLqILkWwsiDr/PprznSsf6dnfD9O5vm/bckw= Subject key identifier: 24:4D:FC:BA:45:82:CE:37:15:26:FD:90:C9:F4:79:16:25:B1:00:FE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759F1931C290510B716F40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/864c4f05-5cea-3509-a48f-1091345c7dde.roa Signing time: Tue 10 Mar 2026 14:28:38 +0000 ROA not before: Tue 10 Mar 2026 14:28:38 +0000 ROA not after: Mon 08 Jun 2026 14:28:38 +0000 asID: 396567 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9f:19:31:c2:90:51:0b:71:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:38 2026 GMT Not After : Jun 8 14:28:38 2026 GMT Subject: CN=761e654f-b083-47db-8b55-79b211025492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e7:03:78:0c:fa:77:25:d1:18:c6:bd:9d:a0: c6:3a:18:4a:fa:f3:c0:e3:82:35:e6:2f:15:63:92: 68:dc:58:25:4a:c2:29:d4:11:b4:d3:35:c7:72:0f: 2e:b8:3a:9a:3d:a0:f4:b7:62:83:79:f8:da:e1:04: 25:1c:18:fb:e1:ab:6d:29:0c:7e:ed:8a:c6:c6:3e: 5b:a5:5b:3e:b7:ef:a5:9d:a5:a6:0b:fd:d5:4f:3f: 7b:fa:be:8c:ed:5f:6d:44:5c:db:ec:8e:d7:df:29: 2b:50:10:c5:67:5a:ad:2b:1d:1b:b1:6b:eb:f7:c2: 15:59:35:e0:ba:60:ed:e7:f6:4b:be:dc:29:7a:5d: 81:e8:f9:e6:77:cc:af:ac:cf:cf:a0:cd:b7:89:4e: 07:0a:e8:6d:ab:0b:fc:64:72:ea:71:d5:22:1e:06: b6:0a:29:e7:b5:98:29:f8:f9:b0:19:63:78:68:72: 31:b6:2b:ee:5d:4a:e8:79:76:7a:02:e8:c4:ad:b4: 60:2a:28:68:b0:a8:7e:e0:68:cd:3f:14:c1:0f:95: 86:00:54:84:7e:12:04:3b:a3:15:cc:69:ef:0c:4b: 2e:17:33:e7:93:ca:a8:27:f1:79:f1:bf:36:3f:58: 6c:f3:12:4a:3e:7c:d9:01:0d:db:8c:0e:fe:ac:a5: 3c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4D:FC:BA:45:82:CE:37:15:26:FD:90:C9:F4:79:16:25:B1:00:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/864c4f05-5cea-3509-a48f-1091345c7dde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d9:bd:f9:67:60:b3:98:ee:61:a0:82:68:c0:3d:b7:d6:99: d4:fb:f4:12:19:5e:87:0c:3a:e4:49:6f:67:a7:e0:65:04:c9: ae:53:45:d2:23:eb:a6:e6:0e:07:6b:7f:f0:d9:ab:ec:0c:3d: 62:e6:f4:74:30:78:9d:75:ef:44:2d:2c:a2:56:49:0d:45:84: 0e:1e:7f:b5:e1:ab:e0:6c:fe:1a:b8:63:d4:b8:50:68:b5:8c: 21:d6:d6:82:5c:41:5b:ae:08:a8:c4:7d:76:2b:dd:5b:38:4a: 1e:9d:1e:76:3e:7d:12:d7:6e:85:67:60:f5:08:d1:08:e8:ea: c2:8b:e3:87:da:cc:f6:00:e8:66:76:27:5a:91:9c:74:08:1c: e6:23:80:70:fb:ca:09:75:b3:61:b8:c6:ea:3b:15:65:a5:73: 37:fd:36:a3:09:9f:1a:83:01:53:8b:11:1f:89:1f:a4:f5:6a: 17:42:11:ba:df:ce:3e:2c:25:3a:f6:b4:63:3a:6a:5a:1a:57: ce:d1:a9:39:7c:bd:6d:ab:39:cd:ec:35:07:5d:ae:7f:64:31: b2:58:5b:60:78:ce:39:5d:13:1a:2d:64:81:03:b0:3b:52:81: a0:42:a7:12:2e:56:b8:4a:07:68:81:72:07:ce:ec:71:ca:db: 8d:48:53:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZ8ZMcKQUQtxb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzOFoXDTI2MDYwODE0MjgzOFowLzEtMCsGA1UEAxMk NzYxZTY1NGYtYjA4My00N2RiLThiNTUtNzliMjExMDI1NDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlucDeAz6dyXRGMa9naDGOhhK+vPA44I15i8V Y5Jo3FglSsIp1BG00zXHcg8uuDqaPaD0t2KDefja4QQlHBj74attKQx+7YrGxj5b pVs+t++lnaWmC/3VTz97+r6M7V9tRFzb7I7X3ykrUBDFZ1qtKx0bsWvr98IVWTXg umDt5/ZLvtwpel2B6Pnmd8yvrM/PoM23iU4HCuhtqwv8ZHLqcdUiHga2CinntZgp +PmwGWN4aHIxtivuXUroeXZ6AujErbRgKihosKh+4GjNPxTBD5WGAFSEfhIEO6MV zGnvDEsuFzPnk8qoJ/F58b82P1hs8xJKPnzZAQ3bjA7+rKU8sQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCRN/LpFgs43FSb9kMn0eRYlsQD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODY0YzRmMDUtNWNlYS0z NTA5LWE0OGYtMTA5MTM0NWM3ZGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHzZvflnYLOY7mGggmjAPbfWmdT79BIZXocMOuRJb2en4GUEya5T RdIj66bmDgdrf/DZq+wMPWLm9HQweJ1170QtLKJWSQ1FhA4ef7Xhq+Bs/hq4Y9S4 UGi1jCHW1oJcQVuuCKjEfXYr3Vs4Sh6dHnY+fRLXboVnYPUI0Qjo6sKL44fazPYA 6GZ2J1qRnHQIHOYjgHD7ygl1s2G4xuo7FWWlczf9NqMJnxqDAVOLER+JH6T1ahdC Ebrfzj4sJTr2tGM6aloaV87RqTl8vW2rOc3sNQddrn9kMbJYW2B4zjldExotZIED sDtSgaBCpxIuVrhKB2iBcgfO7HHK241IU0A= -----END CERTIFICATE-----Generated at Thu Mar 26 15:39:28 2026 by rpki-client