$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/952e28fc-4136-3a09-91d5-525ca1cadc1d.roa File: 952e28fc-4136-3a09-91d5-525ca1cadc1d.roa (raw, json) Hash identifier: BggFlLWpejmaXJ9C3CDv+ZHejchnnDLa0lqnHygivVs= Subject key identifier: 40:64:2A:EB:61:23:A5:BA:58:CE:3D:55:95:2A:5D:4D:1F:B6:D1:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759DB7BD3FBAB2C7F90238 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/952e28fc-4136-3a09-91d5-525ca1cadc1d.roa Signing time: Tue 10 Mar 2026 14:28:37 +0000 ROA not before: Tue 10 Mar 2026 14:28:37 +0000 ROA not after: Mon 08 Jun 2026 14:28:37 +0000 asID: 211369 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9d:b7:bd:3f:ba:b2:c7:f9:02:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:37 2026 GMT Not After : Jun 8 14:28:37 2026 GMT Subject: CN=6867847f-ca16-4140-94fd-ffa0ed9fc4f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ee:80:c9:16:68:61:91:c8:33:c8:30:8b:66: aa:1c:65:0a:9f:15:06:6b:f0:ad:f1:83:5f:58:b8: c3:29:b6:9b:9f:56:61:20:82:66:05:19:ab:5d:a6: f7:16:d1:d6:ab:ba:bf:3f:89:9b:7a:ab:f4:81:26: a7:5e:65:45:1d:2c:24:97:cd:0b:79:8b:e5:6a:3d: 9d:2e:f7:81:5c:c3:f7:91:c8:e1:e4:41:9a:7d:e0: 8d:7f:ad:41:f0:9f:53:5f:20:0e:bc:06:a5:75:92: a4:cd:16:1c:9b:67:b9:7b:d7:ec:66:31:d4:6b:e3: 95:5c:01:4e:13:d2:f1:34:ed:99:d2:fd:dc:0a:6d: 44:84:94:c4:72:75:1d:1a:6c:aa:d2:59:45:79:59: 75:bc:d4:df:fc:d2:d7:76:54:28:f5:c8:12:84:bf: 30:51:02:66:97:e9:83:88:a9:80:37:16:11:aa:31: e4:b7:f6:ae:29:ae:66:5c:cf:53:e8:d1:fa:93:4b: 33:5a:af:2e:c6:ce:87:71:4f:16:9a:0c:a8:7c:00: d4:37:bb:e4:46:2a:80:a0:26:af:99:0a:2e:3b:0f: f5:ff:b4:d9:4d:e9:7a:96:6d:10:05:21:7b:20:f8: f7:2f:54:09:12:1f:f6:98:c0:17:e6:de:a1:12:07: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:64:2A:EB:61:23:A5:BA:58:CE:3D:55:95:2A:5D:4D:1F:B6:D1:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/952e28fc-4136-3a09-91d5-525ca1cadc1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:9d:70:a2:8e:50:f1:62:1a:19:69:40:86:28:ff:85:a2:1d: f9:ac:c4:9f:fd:6d:1e:26:5a:ee:90:f9:a2:19:ce:12:58:9e: e1:e4:4e:90:97:5a:74:e4:ee:bd:89:6f:c9:55:84:72:d4:19: 0b:2d:96:66:a7:35:50:6d:14:12:26:3b:fe:bd:7d:09:50:db: 74:7a:f2:0e:75:0d:04:2e:a2:b4:e1:29:3d:49:15:0c:a0:ce: 7b:36:01:a5:82:dd:fb:31:87:90:40:d8:72:ae:14:b4:58:b8: 4c:56:40:96:d0:12:e4:1a:f0:3f:67:60:da:7a:69:0c:b2:75: f1:f9:85:4f:a5:ec:00:c8:61:a4:37:a9:c7:9f:84:2a:a9:4b: 34:4c:cf:83:1b:bc:17:88:fd:bb:20:74:04:e5:18:09:e6:35: eb:04:c1:ef:fd:3e:7f:c8:7f:e9:ad:de:cb:5a:b2:9e:4e:8b: b2:a7:23:db:32:d2:a2:46:db:17:65:0d:84:20:6e:e6:32:b1: 53:9e:36:4b:52:04:83:ae:4c:ab:53:75:69:ac:19:9e:57:40: 13:58:46:bc:92:38:09:ee:14:7d:03:09:07:78:5b:cf:9f:e5: 1a:1e:d1:3c:bc:9a:5a:af:87:0e:38:d6:94:94:72:4f:8a:2c: 31:16:e3:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZ23vT+6ssf5AjgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzN1oXDTI2MDYwODE0MjgzN1owLzEtMCsGA1UEAxMk Njg2Nzg0N2YtY2ExNi00MTQwLTk0ZmQtZmZhMGVkOWZjNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+6AyRZoYZHIM8gwi2aqHGUKnxUGa/Ct8YNf WLjDKbabn1ZhIIJmBRmrXab3FtHWq7q/P4mbeqv0gSanXmVFHSwkl80LeYvlaj2d LveBXMP3kcjh5EGafeCNf61B8J9TXyAOvAaldZKkzRYcm2e5e9fsZjHUa+OVXAFO E9LxNO2Z0v3cCm1EhJTEcnUdGmyq0llFeVl1vNTf/NLXdlQo9cgShL8wUQJml+mD iKmANxYRqjHkt/auKa5mXM9T6NH6k0szWq8uxs6HcU8WmgyofADUN7vkRiqAoCav mQouOw/1/7TZTel6lm0QBSF7IPj3L1QJEh/2mMAX5t6hEgcp8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEBkKuthI6W6WM49VZUqXU0fttE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTUyZTI4ZmMtNDEzNi0z YTA5LTkxZDUtNTI1Y2ExY2FkYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJGdcKKOUPFiGhlpQIYo/4WiHfmsxJ/9bR4mWu6Q+aIZzhJYnuHk TpCXWnTk7r2Jb8lVhHLUGQstlmanNVBtFBImO/69fQlQ23R68g51DQQuorThKT1J FQygzns2AaWC3fsxh5BA2HKuFLRYuExWQJbQEuQa8D9nYNp6aQyydfH5hU+l7ADI YaQ3qcefhCqpSzRMz4MbvBeI/bsgdATlGAnmNesEwe/9Pn/If+mt3stasp5Oi7Kn I9sy0qJG2xdlDYQgbuYysVOeNktSBIOuTKtTdWmsGZ5XQBNYRrySOAnuFH0DCQd4 W8+f5Roe0Ty8mlqvhw441pSUck+KLDEW41g= -----END CERTIFICATE-----Generated at Thu Mar 26 10:59:42 2026 by rpki-client