$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a749ea5a-05b7-3ec5-ac64-bb60d8a20240.roa File: a749ea5a-05b7-3ec5-ac64-bb60d8a20240.roa (raw, json) Hash identifier: iLHH1wnjPDCT2aICg4mI8icsiJb2rUqj1a2bOH/mn28= Subject key identifier: FB:1A:3D:A2:F0:A4:52:22:22:9C:0C:C4:29:46:C6:C8:4D:B2:F0:D8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A6CC4FB1655C3A1ACE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a749ea5a-05b7-3ec5-ac64-bb60d8a20240.roa Signing time: Tue 10 Mar 2026 14:28:41 +0000 ROA not before: Tue 10 Mar 2026 14:28:41 +0000 ROA not after: Mon 08 Jun 2026 14:28:41 +0000 asID: 396583 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a6:cc:4f:b1:65:5c:3a:1a:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:41 2026 GMT Not After : Jun 8 14:28:41 2026 GMT Subject: CN=cfd4ec6a-d0df-4420-bec1-4d0e8c8baa28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f8:ed:ed:05:ec:66:52:02:9d:d0:50:8a:43: 21:43:21:bf:1d:84:01:0b:5a:6b:57:7b:ce:12:dc: e9:a6:05:8b:8a:8d:f3:d8:b4:1a:73:7a:97:15:5d: 04:49:f5:35:8a:de:11:45:c1:54:6b:7f:66:12:1b: b4:bc:b7:93:83:3e:1c:5b:0c:bf:82:d7:b6:a8:70: a3:08:40:d1:6c:43:87:25:90:ef:65:99:1b:3d:b6: 26:64:cc:56:88:79:71:61:35:70:2f:50:ad:b5:ec: 18:b5:f7:3d:b0:a5:65:90:ad:a7:7c:8e:b1:d6:16: 33:4f:47:3c:58:45:ae:f0:cc:b4:c3:56:de:11:b7: a7:9b:34:ad:44:a0:ff:4b:17:16:04:9b:71:b9:b6: b1:68:b1:ec:b0:68:29:5a:ea:e7:7c:b4:07:c1:e1: 6c:d2:31:da:70:53:e0:47:af:76:56:e1:bb:56:1f: 11:9d:08:c1:b1:e4:de:2d:b8:0b:a1:bb:d0:2d:e5: 33:c2:2f:c9:52:18:12:e2:ab:51:43:c4:a6:d9:b8: f1:10:56:e3:3d:d0:d0:ed:5e:93:a3:b7:5a:5b:01: 6e:cf:cd:16:d4:ec:9c:fb:bd:23:55:f1:fb:9e:31: 08:07:79:d5:61:47:88:67:98:3f:9b:c9:f7:89:0d: 5a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:1A:3D:A2:F0:A4:52:22:22:9C:0C:C4:29:46:C6:C8:4D:B2:F0:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a749ea5a-05b7-3ec5-ac64-bb60d8a20240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:29:56:07:75:dc:a7:9c:a3:12:cc:d0:a8:9c:2b:bf:c1:07: 9c:c9:0c:69:77:9f:27:00:e8:49:ef:5f:6a:cb:aa:9c:91:35: 7f:76:4b:74:72:d2:0d:92:ea:71:ea:7a:8b:7d:95:5a:53:7b: b9:2f:59:6d:76:0f:91:a2:56:2c:b6:31:4e:86:67:61:3d:0c: fe:1b:71:11:86:df:72:eb:33:1d:ed:3d:80:11:fc:90:e5:42: d1:d1:30:39:89:cc:1c:f0:be:64:09:7e:9f:87:a1:78:da:47: 74:8f:25:3c:17:f6:c7:f1:74:0f:51:81:b6:cb:1d:2d:9e:f0: a1:17:e1:2a:86:da:ec:b5:32:3f:f2:d2:6b:ec:e7:83:70:68: 65:21:7c:76:93:b8:08:44:a6:96:49:6c:ef:c1:15:02:59:a3: bc:a8:b5:db:e5:e6:fe:50:ca:16:28:98:fb:67:41:aa:0c:e0: 8d:30:62:62:43:91:2a:c1:4c:c5:41:cc:76:be:e3:37:60:85: d1:cd:10:55:f3:f9:26:e9:65:bf:5a:0f:75:0a:23:b2:19:6b: 81:3b:7f:1d:d6:19:6e:02:08:3e:03:7f:e2:9c:53:c6:ba:96: aa:83:e9:6d:93:49:4c:0d:33:ab:f3:96:c5:b9:29:a8:18:89: 8d:e0:c1:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdabMT7FlXDoazgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0Mjg0MVoXDTI2MDYwODE0Mjg0MVowLzEtMCsGA1UEAxMk Y2ZkNGVjNmEtZDBkZi00NDIwLWJlYzEtNGQwZThjOGJhYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/jt7QXsZlICndBQikMhQyG/HYQBC1prV3vO EtzppgWLio3z2LQac3qXFV0ESfU1it4RRcFUa39mEhu0vLeTgz4cWwy/gte2qHCj CEDRbEOHJZDvZZkbPbYmZMxWiHlxYTVwL1CttewYtfc9sKVlkK2nfI6x1hYzT0c8 WEWu8My0w1beEbenmzStRKD/SxcWBJtxubaxaLHssGgpWurnfLQHweFs0jHacFPg R692VuG7Vh8RnQjBseTeLbgLobvQLeUzwi/JUhgS4qtRQ8Sm2bjxEFbjPdDQ7V6T o7daWwFuz80W1Oyc+70jVfH7njEIB3nVYUeIZ5g/m8n3iQ1arwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPsaPaLwpFIiIpwMxClGxshNsvDYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTc0OWVhNWEtMDViNy0z ZWM1LWFjNjQtYmI2MGQ4YTIwMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIcpVgd13KecoxLM0KicK7/BB5zJDGl3nycA6EnvX2rLqpyRNX92 S3Ry0g2S6nHqeot9lVpTe7kvWW12D5GiViy2MU6GZ2E9DP4bcRGG33LrMx3tPYAR /JDlQtHRMDmJzBzwvmQJfp+HoXjaR3SPJTwX9sfxdA9RgbbLHS2e8KEX4SqG2uy1 Mj/y0mvs54NwaGUhfHaTuAhEppZJbO/BFQJZo7yotdvl5v5QyhYomPtnQaoM4I0w YmJDkSrBTMVBzHa+4zdghdHNEFXz+SbpZb9aD3UKI7IZa4E7fx3WGW4CCD4Df+Kc U8a6lqqD6W2TSUwNM6vzlsW5KagYiY3gwcU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:34:09 2026 by rpki-client