$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86e40ae2-d15d-398d-ad9e-1fa773eddd23.roa File: 86e40ae2-d15d-398d-ad9e-1fa773eddd23.roa (raw, json) Hash identifier: IZCfUjZbOAENksRwOwFzcLtLjDrViHbcGy6zTRZfvAk= Subject key identifier: 1E:75:F3:A9:C6:CD:CF:0A:9C:16:7A:23:0D:74:67:2B:1F:D9:35:E6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFFA17BB777E958E5F1BB6C Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86e40ae2-d15d-398d-ad9e-1fa773eddd23.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396560 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:a1:7b:b7:77:e9:58:e5:f1:bb:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=d5c39499-d5bf-4436-b3d2-1c04e0768503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:cf:f0:e4:d8:6f:83:34:2d:ee:29:0b:63: e8:a4:2a:8c:bb:40:92:35:74:63:5e:95:b9:07:70: a8:19:b7:6f:41:4b:83:82:d7:1d:5f:a1:54:18:5e: 6f:a5:91:36:17:b8:1a:cd:86:6b:c4:b6:cb:dc:41: 78:4d:96:90:0f:43:9a:de:5c:a0:bb:c7:d3:b5:65: 57:72:38:de:d7:4d:e5:6a:17:c0:28:9a:e5:d7:9d: 82:fa:2c:2d:8f:a2:cd:1c:61:09:9e:ea:3c:2a:90: 43:f5:11:f9:7f:f3:d3:f9:65:3e:24:f2:e1:a1:bd: ed:5c:76:5a:8c:b5:09:9f:cc:4f:34:b0:7f:f8:0e: 92:3e:65:4e:06:67:70:5d:ce:5d:78:a7:18:ff:d1: 4b:79:c3:03:98:66:24:5e:36:8f:a4:00:11:72:be: 86:50:e4:32:d4:3f:6a:a8:67:b4:b0:6f:16:25:ee: 36:90:e3:e0:d8:f8:e0:5d:e9:49:1b:a6:56:3e:bf: 14:60:39:80:4f:a6:82:80:0f:7a:06:1c:5e:1f:57: a4:86:c1:fc:41:3f:e7:e2:49:cb:6a:7f:fa:d7:e6: 10:5c:02:c0:92:54:bb:04:5c:fe:00:7d:a8:5d:03: 5a:8a:65:23:f2:51:66:bc:f3:e0:12:2b:04:55:10: b4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:75:F3:A9:C6:CD:CF:0A:9C:16:7A:23:0D:74:67:2B:1F:D9:35:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/86e40ae2-d15d-398d-ad9e-1fa773eddd23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0b:3d:06:03:45:fc:2e:b0:28:45:86:81:ca:84:91:88:76: 54:2d:29:1e:7a:67:a7:79:c2:26:fa:b6:70:90:1a:55:10:08: 51:e1:c3:c1:1f:3e:b7:7f:c8:18:b3:fb:c0:2b:5d:3a:09:40: 1a:86:75:23:0c:7a:93:88:c1:6f:19:4d:d9:f0:88:b6:3a:10: 00:19:fb:b5:f2:9e:42:d1:c8:36:50:66:1d:39:29:89:44:58: f4:cc:45:2e:5e:aa:87:f3:1d:bb:11:bf:4f:3d:3c:28:a3:27: e5:29:4f:87:f4:14:6d:10:3a:74:6d:db:c1:97:6a:13:d9:52: 5f:5c:48:8d:61:fb:a5:91:69:e9:c4:56:23:92:c3:69:45:9d: 29:99:32:ea:65:46:d1:bf:d7:97:f5:01:3c:2c:66:60:9c:48: 2e:89:e9:a0:36:36:c3:f9:79:d0:05:9e:82:5a:99:95:18:e8: 8e:4e:76:a8:40:5b:b7:b3:23:e0:d8:e0:0e:bd:cf:e4:25:1e: 3f:58:56:f6:b6:7c:25:26:dc:e9:4d:df:da:f5:98:82:9d:c8: 61:56:a1:af:24:0a:19:68:09:3a:d8:d5:01:52:d2:a2:a6:a9: 6b:91:15:fd:02:8c:da:d3:be:36:40:b6:7f:41:94:36:a0:29: a4:d7:5e:cf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/6F7t3fpWOXxu2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDVjMzk0OTktZDViZi00NDM2LWIzZDItMWMwNGUwNzY4NTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0nP8OTYb4M0Le4pC2PopCqMu0CSNXRjXpW5 B3CoGbdvQUuDgtcdX6FUGF5vpZE2F7gazYZrxLbL3EF4TZaQD0Oa3lygu8fTtWVX cjje103lahfAKJrl152C+iwtj6LNHGEJnuo8KpBD9RH5f/PT+WU+JPLhob3tXHZa jLUJn8xPNLB/+A6SPmVOBmdwXc5deKcY/9FLecMDmGYkXjaPpAARcr6GUOQy1D9q qGe0sG8WJe42kOPg2PjgXelJG6ZWPr8UYDmAT6aCgA96BhxeH1ekhsH8QT/n4knL an/61+YQXALAklS7BFz+AH2oXQNaimUj8lFmvPPgEisEVRC0XwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB5186nGzc8KnBZ6Iw10Zysf2TXmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODZlNDBhZTItZDE1ZC0z OThkLWFkOWUtMWZhNzczZWRkZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACgLPQYDRfwusChFhoHKhJGIdlQtKR56Z6d5wib6tnCQGlUQCFHh w8EfPrd/yBiz+8ArXToJQBqGdSMMepOIwW8ZTdnwiLY6EAAZ+7XynkLRyDZQZh05 KYlEWPTMRS5eqofzHbsRv089PCijJ+UpT4f0FG0QOnRt28GXahPZUl9cSI1h+6WR aenEViOSw2lFnSmZMuplRtG/15f1ATwsZmCcSC6J6aA2NsP5edAFnoJamZUY6I5O dqhAW7ezI+DY4A69z+QlHj9YVva2fCUm3OlN39r1mIKdyGFWoa8kChloCTrY1QFS 0qKmqWuRFf0CjNrTvjZAtn9BlDagKaTXXs8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:29:20 2026 by rpki-client