$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a635cf40-1129-391f-af16-b09e6ed51ccd.roa File: a635cf40-1129-391f-af16-b09e6ed51ccd.roa (raw, json) Hash identifier: 08hCRX72u6mCU0bNgu4GCDZxWZSqoXjfc1lKSgxxHA8= Subject key identifier: 3A:40:6D:CB:2B:7F:A7:80:77:50:92:BC:BD:90:05:6E:95:AE:C7:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0BDD19059FD09B7F6530B980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a635cf40-1129-391f-af16-b09e6ed51ccd.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 397210 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:19:05:9f:d0:9b:7f:65:30:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=1e8a3b4d-d20f-4013-834f-0e289bbe7afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0d:b1:55:5d:cd:9e:5a:62:50:61:ce:f5:d3: 6e:6d:f1:d6:b7:15:03:ee:03:9a:1b:40:05:5f:75: 1c:cd:37:96:4c:e2:d6:93:5d:3b:2c:b7:68:3f:b6: ae:80:2a:e9:e5:cd:ea:a3:6f:6f:ea:82:f4:2c:b1: 57:1d:01:6d:e1:0a:23:8e:23:3b:67:13:85:dd:67: 18:08:f8:dd:5b:a9:e8:15:51:81:f2:0d:9c:09:0b: 3b:33:04:6a:53:a3:2f:ad:7a:9b:78:65:e3:45:4c: ab:4f:85:da:04:06:4b:f2:b8:45:ff:5d:74:3d:e7: 2d:97:3f:50:9e:56:9a:93:35:15:88:40:47:56:a7: 62:8f:5f:1d:25:6e:9b:c3:5b:06:5a:86:63:e6:1b: 07:da:04:59:fd:47:ae:fe:51:3e:b8:ea:23:b1:f7: 85:b4:cd:42:dc:8c:7c:88:d4:7f:4d:d4:ce:89:26: 69:b4:c5:ae:dd:e2:60:c4:65:0b:6c:4b:9c:ac:2b: 32:96:d2:70:fb:07:6a:34:a9:86:ea:66:fe:a0:88: db:ff:ab:75:28:e5:b8:a1:a1:6b:29:9a:0a:c0:04: c7:15:2a:8c:f0:24:67:1c:32:1f:02:9a:38:5e:06: 98:cc:96:41:f5:57:6f:81:56:60:95:89:a5:31:88: e1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:40:6D:CB:2B:7F:A7:80:77:50:92:BC:BD:90:05:6E:95:AE:C7:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a635cf40-1129-391f-af16-b09e6ed51ccd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:86:a0:c9:8d:19:67:6b:ab:73:e4:db:cd:0e:2f:7f:94:6e: 74:61:17:c4:1b:b0:47:58:a5:ed:7b:c5:a5:19:b8:97:bf:60: 9a:40:52:01:ec:7c:ce:be:3c:f9:94:c6:b7:7f:79:c7:ac:2c: 4b:38:ff:e4:42:c4:e6:fa:08:4f:1f:11:58:0f:17:47:ac:16: bb:bb:b2:a3:0d:ee:11:75:5a:32:c4:db:88:52:5d:91:d7:3e: 6b:3e:1a:0b:16:7c:c6:bf:32:39:bf:ad:3c:7c:92:b6:39:e0: 8e:2f:e6:99:4d:48:e2:dc:84:bc:d1:c2:49:9d:ca:d8:f4:78: 0d:d5:3b:ac:b8:f8:37:f5:02:32:fd:48:d4:f9:ae:b4:b6:75: d6:84:13:88:2d:94:92:04:b0:10:48:b9:aa:4b:1e:a0:a3:00: 63:9a:71:ae:56:3c:54:2e:f3:f5:3b:e6:4e:9e:22:7e:a1:89: 85:d8:c3:68:9c:7f:7e:66:cc:7f:5c:bf:39:8e:55:c8:3a:d0: a2:77:d6:c8:24:e4:a4:cf:5e:e7:d1:c3:48:36:19:e7:47:5a: f1:c7:e3:1c:9e:8b:e3:d9:de:0e:13:56:d7:84:10:54:9c:79: 4b:21:48:03:8f:6b:43:83:6a:5c:a5:1a:d6:c1:cf:f5:3f:7a: 73:19:ae:2d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0L3RkFn9Cbf2UwuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk MWU4YTNiNGQtZDIwZi00MDEzLTgzNGYtMGUyODliYmU3YWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA2xVV3NnlpiUGHO9dNubfHWtxUD7gOaG0AF X3UczTeWTOLWk107LLdoP7augCrp5c3qo29v6oL0LLFXHQFt4QojjiM7ZxOF3WcY CPjdW6noFVGB8g2cCQs7MwRqU6MvrXqbeGXjRUyrT4XaBAZL8rhF/110Pectlz9Q nlaakzUViEBHVqdij18dJW6bw1sGWoZj5hsH2gRZ/Ueu/lE+uOojsfeFtM1C3Ix8 iNR/TdTOiSZptMWu3eJgxGULbEucrCsyltJw+wdqNKmG6mb+oIjb/6t1KOW4oaFr KZoKwATHFSqM8CRnHDIfApo4XgaYzJZB9VdvgVZglYmlMYjh0QIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDpAbcsrf6eAd1CSvL2QBW6VrscmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTYzNWNmNDAtMTEyOS0z OTFmLWFmMTYtYjA5ZTZlZDUxY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBqhqDJjRlna6tz5NvNDi9/lG50YRfEG7BHWKXt e8WlGbiXv2CaQFIB7HzOvjz5lMa3f3nHrCxLOP/kQsTm+ghPHxFYDxdHrBa7u7Kj De4RdVoyxNuIUl2R1z5rPhoLFnzGvzI5v608fJK2OeCOL+aZTUji3IS80cJJncrY 9HgN1TusuPg39QIy/UjU+a60tnXWhBOILZSSBLAQSLmqSx6gowBjmnGuVjxULvP1 O+ZOniJ+oYmF2MNonH9+Zsx/XL85jlXIOtCid9bIJOSkz17n0cNINhnnR1rxx+Mc novj2d4OE1bXhBBUnHlLIUgDj2tDg2pcpRrWwc/1P3pzGa4t -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:06 2026 by rpki-client