$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9fddc9-0fd3-302d-af5f-9421d50926c8.roa File: 8b9fddc9-0fd3-302d-af5f-9421d50926c8.roa (raw, json) Hash identifier: Z3x7RWqZpQIrjJxe5SU2tIeJC9bnguzD/jq67yg6rIA= Subject key identifier: C5:14:D9:97:7E:97:A4:10:6D:7E:28:59:1E:25:74:40:19:1B:77:88 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759C9985E0EE3B76D256A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9fddc9-0fd3-302d-af5f-9421d50926c8.roa Signing time: Tue 10 Mar 2026 14:28:36 +0000 ROA not before: Tue 10 Mar 2026 14:28:36 +0000 ROA not after: Mon 08 Jun 2026 14:28:36 +0000 asID: 20362 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9c:99:85:e0:ee:3b:76:d2:56:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:36 2026 GMT Not After : Jun 8 14:28:36 2026 GMT Subject: CN=c91094cc-a79a-4ee2-92a7-17de3f53b94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:43:10:71:73:aa:02:7f:1b:2d:c4:36:f8: 48:48:0e:f9:68:94:fc:d9:d0:c2:63:20:71:8d:0c: db:c1:4c:09:a1:89:00:6c:e2:89:c6:e4:42:09:3b: c1:50:77:d6:b9:57:5b:54:f6:56:7f:02:ec:b6:08: 52:93:f5:d0:eb:48:0e:cf:82:92:4a:87:c7:38:f6: ef:8f:35:17:98:4c:78:da:1e:04:4b:33:2e:9d:66: 68:da:36:78:cf:b9:73:91:7b:91:14:32:43:b2:ad: 3c:eb:5d:ad:9b:fc:83:61:ea:cd:fd:58:31:5a:12: 5d:5c:cb:b2:d0:ec:4d:c6:fa:c3:b9:f1:0b:86:69: 03:2d:bf:63:ab:b5:8e:90:7b:3e:59:b0:04:9a:21: f2:e9:a3:73:5c:31:17:7a:45:fc:2d:86:28:f2:fb: 0f:17:8e:7c:f6:dd:56:ca:29:83:07:de:fd:f3:88: 18:4c:4e:b6:50:54:ce:d9:e7:5c:b9:88:4d:26:17: 60:fe:25:65:8c:8e:82:74:89:23:63:21:9f:90:0c: f7:d3:7e:da:5b:50:df:14:5b:a1:0e:67:1b:19:c1: 10:89:42:07:d2:3f:e9:61:24:91:f1:82:f1:e9:e2: 29:e5:b1:00:ae:4e:46:31:e2:c9:fd:9d:b5:64:22: 82:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:14:D9:97:7E:97:A4:10:6D:7E:28:59:1E:25:74:40:19:1B:77:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8b9fddc9-0fd3-302d-af5f-9421d50926c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:76:a7:48:70:64:6d:eb:19:6c:7a:42:2b:e9:14:fb:73:ab: 4a:d1:62:cc:b5:95:40:49:bc:e9:ad:25:bd:f7:c3:91:34:a6: 8d:66:a0:69:cb:cd:8e:17:fc:a2:74:da:3b:c3:b9:28:b8:fc: 4c:ec:30:70:96:c7:39:4e:f8:68:da:e1:5e:8c:ca:d2:2a:1d: ab:66:b7:60:a4:7d:c2:2a:4c:eb:fc:f2:28:11:6c:3e:8f:44: fb:69:c9:3f:52:55:f8:ed:18:4a:bd:a1:31:85:80:f3:a8:66: 44:46:0b:ea:43:90:da:8d:02:16:5c:ab:e9:fa:d4:98:b2:c0: 40:fd:67:f2:94:e1:47:34:43:14:52:88:ad:8b:37:64:a2:3f: 6e:4b:92:01:18:99:93:76:5c:de:69:44:0f:cf:51:44:48:ac: 32:bb:00:ec:b5:76:ff:39:de:ad:2d:42:d7:4d:d1:59:e5:09: 65:cb:83:31:96:48:9b:70:e7:5c:be:56:d8:95:ba:1d:c3:54: f9:fe:1a:7b:70:5a:6d:e0:3a:47:47:fc:ee:2c:19:82:72:d5: b2:a5:71:4d:c3:20:7b:f3:22:bc:46:5f:c0:d5:16:be:96:0b: c5:85:35:e1:65:30:6d:4c:5c:90:a1:c6:a7:b8:78:2e:8c:14: 7d:bc:ce:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZyZheDuO3bSVqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzNloXDTI2MDYwODE0MjgzNlowLzEtMCsGA1UEAxMk YzkxMDk0Y2MtYTc5YS00ZWUyLTkyYTctMTdkZTNmNTNiOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKRDEHFzqgJ/Gy3ENvhISA75aJT82dDCYyBx jQzbwUwJoYkAbOKJxuRCCTvBUHfWuVdbVPZWfwLstghSk/XQ60gOz4KSSofHOPbv jzUXmEx42h4ESzMunWZo2jZ4z7lzkXuRFDJDsq08612tm/yDYerN/VgxWhJdXMuy 0OxNxvrDufELhmkDLb9jq7WOkHs+WbAEmiHy6aNzXDEXekX8LYYo8vsPF4589t1W yimDB97984gYTE62UFTO2edcuYhNJhdg/iVljI6CdIkjYyGfkAz3037aW1DfFFuh DmcbGcEQiUIH0j/pYSSR8YLx6eIp5bEArk5GMeLJ/Z21ZCKCPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUU2Zd+l6QQbX4oWR4ldEAZG3eIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGI5ZmRkYzktMGZkMy0z MDJkLWFmNWYtOTQyMWQ1MDkyNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGR2p0hwZG3rGWx6QivpFPtzq0rRYsy1lUBJvOmtJb33w5E0po1m oGnLzY4X/KJ02jvDuSi4/EzsMHCWxzlO+Gja4V6MytIqHatmt2CkfcIqTOv88igR bD6PRPtpyT9SVfjtGEq9oTGFgPOoZkRGC+pDkNqNAhZcq+n61JiywED9Z/KU4Uc0 QxRSiK2LN2SiP25LkgEYmZN2XN5pRA/PUURIrDK7AOy1dv853q0tQtdN0VnlCWXL gzGWSJtw51y+VtiVuh3DVPn+GntwWm3gOkdH/O4sGYJy1bKlcU3DIHvzIrxGX8DV Fr6WC8WFNeFlMG1MXJChxqe4eC6MFH28znQ= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:20 2026 by rpki-client