$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955d7c7f-1fa6-3070-90ed-2aa9a8826c66.roa File: 955d7c7f-1fa6-3070-90ed-2aa9a8826c66.roa (raw, json) Hash identifier: q8dEyKjyq/5RG8Hgk3CSkTzLqsSm6k3dsau7Il5wgBQ= Subject key identifier: 6C:53:C6:82:7C:FC:2C:4C:BF:54:99:41:81:CF:5A:96:E9:8A:8D:00 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759B2EDA27B93D4907D7C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955d7c7f-1fa6-3070-90ed-2aa9a8826c66.roa Signing time: Tue 10 Mar 2026 14:28:36 +0000 ROA not before: Tue 10 Mar 2026 14:28:36 +0000 ROA not after: Mon 08 Jun 2026 14:28:36 +0000 asID: 396575 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9b:2e:da:27:b9:3d:49:07:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:36 2026 GMT Not After : Jun 8 14:28:36 2026 GMT Subject: CN=8d3cf81a-6a2f-41eb-af66-0144e9845a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7b:08:cc:06:aa:2b:20:4e:c8:17:9c:9d:93: 94:85:25:45:fc:f6:ba:41:84:16:ee:7d:63:26:cc: 68:18:a7:cc:42:14:97:4f:d1:fd:59:b0:cb:37:9f: d9:b8:51:c1:b6:40:af:0b:b2:88:9f:8a:02:5e:c4: b6:01:f6:e5:d7:93:d8:f9:24:c4:4b:94:6b:e8:c7: ed:6e:10:ac:97:83:9f:11:90:17:c9:f8:b1:f3:77: b2:36:bb:50:99:0e:21:3a:6c:9e:68:11:22:58:43: 3c:64:ed:23:21:b3:91:25:66:9c:4e:0a:e7:3a:f2: e1:86:ba:e5:f0:64:09:20:c2:63:03:e3:6b:9a:42: e8:15:e5:e1:d6:a3:10:4b:50:e5:a3:84:e2:6d:0d: 62:a4:2b:64:e6:94:56:d5:70:7c:3a:83:97:a2:9a: 3d:71:7c:25:ad:af:f9:ed:46:a5:2a:79:dc:05:dc: af:e5:af:e7:3e:b3:55:8e:61:10:c3:c1:5c:e1:d1: ca:6f:3e:25:9d:98:79:b3:9b:24:1b:02:05:30:13: 12:cb:38:b7:6f:e4:d3:1f:38:39:cd:36:4a:13:62: c5:b0:b0:64:49:f9:31:8e:ef:94:cc:f9:98:0f:c9: fa:a2:af:b9:05:13:4d:b1:52:b0:43:a3:c3:d3:1f: a2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:53:C6:82:7C:FC:2C:4C:BF:54:99:41:81:CF:5A:96:E9:8A:8D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/955d7c7f-1fa6-3070-90ed-2aa9a8826c66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:5e:b7:78:bc:b2:85:2b:1d:72:43:f4:ce:ee:4b:07:a9:9e: d7:48:31:d5:2a:dd:0b:59:39:54:0f:66:42:85:04:9b:d2:70: 70:69:4e:04:21:23:f4:93:b7:d6:4e:2a:9b:7c:41:f4:ac:3f: 79:3a:f7:9e:ed:2d:b9:81:0b:85:dd:c8:e2:d5:81:ce:47:b4: f7:5c:81:37:64:67:91:27:12:7e:72:93:bb:5b:0d:f4:e5:01: dc:79:2a:f9:a1:af:d3:ec:51:80:d3:f6:78:18:bd:ef:96:0f: 07:6a:37:7d:ea:f5:6b:cd:29:e4:59:68:ed:de:c7:f2:4b:5b: aa:b8:19:db:79:0d:50:f2:20:54:78:2a:a3:a2:64:08:88:d6: 71:f0:42:cc:b8:97:1c:99:ed:48:75:26:dc:06:84:d0:0f:31: b8:e0:e7:b1:43:09:4f:6d:9f:53:21:dc:48:1a:19:c0:94:88: 43:33:2d:92:9f:50:ea:9a:60:c0:5a:3f:01:7f:c9:17:ba:f2: ba:37:ed:e0:9e:9b:50:0d:34:e3:37:d0:ec:b8:de:ce:a8:81: e5:0e:78:92:8e:11:35:28:23:ee:03:08:cb:72:9b:5d:dc:34: 67:d3:49:44:80:a2:2f:8e:06:d0:c9:c1:2f:19:8d:e0:ca:81: e3:b2:f6:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZsu2ie5PUkH18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzNloXDTI2MDYwODE0MjgzNlowLzEtMCsGA1UEAxMk OGQzY2Y4MWEtNmEyZi00MWViLWFmNjYtMDE0NGU5ODQ1YTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHsIzAaqKyBOyBecnZOUhSVF/Pa6QYQW7n1j JsxoGKfMQhSXT9H9WbDLN5/ZuFHBtkCvC7KIn4oCXsS2Afbl15PY+STES5Rr6Mft bhCsl4OfEZAXyfix83eyNrtQmQ4hOmyeaBEiWEM8ZO0jIbORJWacTgrnOvLhhrrl 8GQJIMJjA+NrmkLoFeXh1qMQS1Dlo4TibQ1ipCtk5pRW1XB8OoOXopo9cXwlra/5 7UalKnncBdyv5a/nPrNVjmEQw8Fc4dHKbz4lnZh5s5skGwIFMBMSyzi3b+TTHzg5 zTZKE2LFsLBkSfkxju+UzPmYD8n6oq+5BRNNsVKwQ6PD0x+itwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGxTxoJ8/CxMv1SZQYHPWpbpio0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTU1ZDdjN2YtMWZhNi0z MDcwLTkwZWQtMmFhOWE4ODI2YzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALZet3i8soUrHXJD9M7uSwepntdIMdUq3QtZOVQPZkKFBJvScHBp TgQhI/STt9ZOKpt8QfSsP3k6957tLbmBC4XdyOLVgc5HtPdcgTdkZ5EnEn5yk7tb DfTlAdx5Kvmhr9PsUYDT9ngYve+WDwdqN33q9WvNKeRZaO3ex/JLW6q4Gdt5DVDy IFR4KqOiZAiI1nHwQsy4lxyZ7Uh1JtwGhNAPMbjg57FDCU9tn1Mh3EgaGcCUiEMz LZKfUOqaYMBaPwF/yRe68ro37eCem1ANNOM30Oy43s6ogeUOeJKOETUoI+4DCMty m13cNGfTSUSAoi+OBtDJwS8ZjeDKgeOy9g4= -----END CERTIFICATE-----Generated at Thu Mar 26 14:01:36 2026 by rpki-client