$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fdaf937-ac06-39b0-a3e3-b6796b7a7344.roa File: 8fdaf937-ac06-39b0-a3e3-b6796b7a7344.roa (raw, json) Hash identifier: Fay2dI750tbeHREks+P1trpVUX1hwx/BLmdwZm2HrRw= Subject key identifier: AD:51:FC:23:EF:D2:E1:7B:FA:05:87:84:84:E4:EE:85:1E:5D:7B:76 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759B5F1E9580A6DB1C67C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fdaf937-ac06-39b0-a3e3-b6796b7a7344.roa Signing time: Tue 10 Mar 2026 14:28:36 +0000 ROA not before: Tue 10 Mar 2026 14:28:36 +0000 ROA not after: Mon 08 Jun 2026 14:28:36 +0000 asID: 396565 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9b:5f:1e:95:80:a6:db:1c:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:36 2026 GMT Not After : Jun 8 14:28:36 2026 GMT Subject: CN=27196c12-cd75-46f6-8fc5-a86c4a5bc2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:f2:e1:93:44:8a:13:2f:75:81:a9:5b:63: 1d:61:6f:19:ee:0c:09:9c:f5:ef:b9:66:71:cc:27: c5:a4:68:ea:a7:f5:34:8e:7f:db:c6:63:89:80:90: fe:ec:69:2e:d0:56:e3:1c:ac:e2:d7:f2:8d:db:3f: 54:2c:ed:f3:70:92:75:68:fb:96:54:69:11:68:b4: 4c:b1:67:b1:a0:1c:51:45:75:0d:d4:cf:de:55:32: 53:f3:2a:ed:22:8a:c3:da:e5:60:5b:d6:9d:de:fd: 4f:19:25:a9:49:60:4e:0f:3d:b0:d5:0e:ad:4d:4b: b4:71:55:9d:b0:e8:d0:dd:1b:4c:62:cd:2d:67:34: 16:64:ac:bd:f6:f8:9a:78:2b:e7:b4:b3:4d:a7:c2: 69:47:e0:78:79:a9:b5:bd:80:42:b5:70:65:45:29: 65:93:d6:1f:a7:45:b5:e1:cd:f5:2f:4a:6f:50:3e: 9f:e4:dd:d3:84:fd:10:f1:3e:05:02:13:ad:81:70: e0:ef:0a:2f:c9:ec:22:57:60:32:88:81:c2:1c:8f: b9:fc:72:75:38:e6:d8:65:d9:53:7a:82:6c:72:6f: 4b:56:cb:f4:fa:4e:fb:3b:df:72:4e:70:5d:81:4c: dd:c5:35:a8:c1:bd:c7:bf:1b:8f:4b:05:27:b1:63: 3a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:51:FC:23:EF:D2:E1:7B:FA:05:87:84:84:E4:EE:85:1E:5D:7B:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/8fdaf937-ac06-39b0-a3e3-b6796b7a7344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:d1:ec:98:42:cb:4c:80:d2:c5:03:28:83:69:f7:99:34:68: 6f:77:41:c5:ed:b9:49:8c:2b:14:5d:88:7d:fe:bf:68:79:3a: 72:39:c1:63:10:c5:9f:32:34:8e:2c:c4:6f:48:d2:b2:1c:7a: ed:ae:40:55:6c:f7:59:3e:3a:2f:17:00:f1:bc:02:d3:60:33: 36:1f:4f:f9:a0:f6:97:7a:b6:9e:72:37:84:2d:4b:6a:30:8a: b6:23:5f:9a:e8:8d:fd:f9:a5:90:e3:cf:f4:6e:ef:a5:31:66: 45:4d:cd:41:5e:ed:67:1f:b8:a0:b7:0a:77:2f:f0:34:36:95: 4c:ba:99:c2:26:4e:b1:89:df:ef:bf:83:6b:8a:98:d0:2e:23: d1:75:43:65:ee:7f:43:66:4c:45:e4:a8:f8:85:dd:bc:cd:5c: 43:a9:5c:6f:b0:a7:ae:bd:8e:c9:01:03:92:8d:f4:fa:d8:45: ff:7b:60:2c:a9:75:e9:3c:11:c7:35:a2:05:56:9c:ad:78:50: ca:56:bf:bb:01:ce:32:5a:8a:aa:c1:15:b7:2f:ef:2e:bb:7f: bf:ab:35:43:fe:f7:93:1e:24:fa:c2:3b:24:0c:f0:c0:3f:d1: 7a:2d:a5:4b:9a:d3:b7:d9:eb:9a:ff:66:bd:0a:f4:8b:df:9b: 5e:e6:25:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZtfHpWAptscZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzNloXDTI2MDYwODE0MjgzNlowLzEtMCsGA1UEAxMk MjcxOTZjMTItY2Q3NS00NmY2LThmYzUtYTg2YzRhNWJjMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCPy4ZNEihMvdYGpW2MdYW8Z7gwJnPXvuWZx zCfFpGjqp/U0jn/bxmOJgJD+7Gku0FbjHKzi1/KN2z9ULO3zcJJ1aPuWVGkRaLRM sWexoBxRRXUN1M/eVTJT8yrtIorD2uVgW9ad3v1PGSWpSWBODz2w1Q6tTUu0cVWd sOjQ3RtMYs0tZzQWZKy99viaeCvntLNNp8JpR+B4eam1vYBCtXBlRSllk9Yfp0W1 4c31L0pvUD6f5N3ThP0Q8T4FAhOtgXDg7wovyewiV2AyiIHCHI+5/HJ1OObYZdlT eoJscm9LVsv0+k77O99yTnBdgUzdxTWowb3HvxuPSwUnsWM6kwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK1R/CPv0uF7+gWHhITk7oUeXXt2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOGZkYWY5MzctYWMwNi0z OWIwLWEzZTMtYjY3OTZiN2E3MzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALbR7JhCy0yA0sUDKINp95k0aG93QcXtuUmMKxRdiH3+v2h5OnI5 wWMQxZ8yNI4sxG9I0rIceu2uQFVs91k+Oi8XAPG8AtNgMzYfT/mg9pd6tp5yN4Qt S2owirYjX5rojf35pZDjz/Ru76UxZkVNzUFe7WcfuKC3Cncv8DQ2lUy6mcImTrGJ 3++/g2uKmNAuI9F1Q2Xuf0NmTEXkqPiF3bzNXEOpXG+wp669jskBA5KN9PrYRf97 YCypdek8Ecc1ogVWnK14UMpWv7sBzjJaiqrBFbcv7y67f7+rNUP+95MeJPrCOyQM 8MA/0XotpUua07fZ65r/Zr0K9Ivfm17mJWg= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:52 2026 by rpki-client