$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8689b51-a31e-3a1d-a3c6-e1b5546472d4.roa File: a8689b51-a31e-3a1d-a3c6-e1b5546472d4.roa (raw, json) Hash identifier: D9RB2SjS7s9uR3VUE2MfWvBWitqZfPQ9oy/DnJmE9Kc= Subject key identifier: 6E:F7:68:CB:5D:8D:FD:A2:F2:1B:04:91:89:0F:FB:74:1F:81:95:AC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C0365A46330C57245178B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8689b51-a31e-3a1d-a3c6-e1b5546472d4.roa Signing time: Tue 03 Mar 2026 15:18:07 +0000 ROA not before: Tue 03 Mar 2026 15:18:07 +0000 ROA not after: Mon 01 Jun 2026 14:18:07 +0000 asID: 396588 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:65:a4:63:30:c5:72:45:17:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:07 2026 GMT Not After : Jun 1 14:18:07 2026 GMT Subject: CN=14f609a6-eb21-4e73-9653-3949f9a8509f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0d:27:52:ae:2d:58:24:73:00:4b:7f:cb:32: 37:0f:8c:d1:0a:86:cc:49:1d:a2:76:77:dd:c8:00: ac:08:0a:57:16:a0:25:3b:50:f9:f8:3e:33:af:1c: 74:f8:ff:76:d4:70:54:8f:38:32:c2:1b:67:22:f1: a5:0b:80:94:1a:e1:10:31:f6:8c:41:b3:95:f7:36: 4d:b0:c9:1e:2f:d8:71:bb:e0:05:b4:00:90:12:82: 3c:e5:f2:2c:6a:1f:b5:81:64:7b:6f:b7:76:9f:a4: 65:22:95:dc:3d:05:32:46:0e:1e:77:42:88:51:cf: 2b:4b:dd:b7:51:62:0b:37:bd:b6:e8:b7:ed:0e:75: 56:d6:5b:9a:92:ee:44:45:78:f9:d5:a1:62:9e:72: f0:9d:44:63:39:5b:e6:6a:93:96:9e:17:90:9d:70: 07:2e:fc:bd:c4:10:64:f9:e2:50:ea:09:a4:6b:14: 7e:d8:74:2e:be:84:f5:6e:7a:1a:7f:f3:d6:c6:66: 75:33:07:91:bf:ea:e9:c7:3e:86:6f:bc:3b:7e:5d: 40:0f:ff:60:cc:da:19:d0:6e:ac:d7:66:9c:42:45: 0d:6d:cf:2d:30:26:8a:ee:0a:71:1a:f0:c0:30:93: 51:15:e1:0a:27:f1:8e:8b:d0:3a:d1:99:09:12:71: 4a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F7:68:CB:5D:8D:FD:A2:F2:1B:04:91:89:0F:FB:74:1F:81:95:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a8689b51-a31e-3a1d-a3c6-e1b5546472d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:5b:6b:2c:fe:7b:77:80:db:db:48:9a:a4:42:5c:8f:43:16: cf:12:4c:b9:fd:3a:84:d1:5a:57:dd:ae:b7:56:3d:ac:ad:1f: 51:a1:e3:00:93:e7:0f:57:f0:12:5a:3c:9f:d1:ac:ce:57:1e: 47:c0:ba:07:a7:87:6a:82:0a:31:41:8c:fb:0a:30:57:e2:6d: 23:cd:48:06:42:23:ec:b2:da:46:49:06:2f:0d:fd:5b:40:b4: 44:10:de:e9:42:05:76:c3:61:5e:43:19:9c:17:83:ee:7d:13: b6:28:cf:b7:6e:47:3a:0e:ff:4f:87:c1:28:42:7e:31:e5:d8: f1:8f:00:9e:5f:e4:9b:d5:31:f5:77:36:5e:7b:13:80:63:70: 16:84:84:04:aa:8a:6e:9b:6e:a0:10:81:69:8c:91:21:6e:9a: 4a:3e:ff:be:85:15:2f:49:28:b0:25:08:16:91:74:8f:72:8b: aa:23:e4:df:d2:a9:75:93:b5:d4:33:47:f9:4a:a3:32:5e:70: 32:e5:c2:7e:2d:65:a2:6f:08:3d:91:d6:5d:63:18:0d:1e:40: b5:bf:52:57:eb:06:60:c6:95:42:6f:87:0e:cc:40:a7:4f:f6: e4:d4:57:a7:89:e5:3e:ca:8c:08:23:9a:a2:e0:ba:4a:f0:46: 6a:4f:be:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2WkYzDFckUXi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwN1oXDTI2MDYwMTE0MTgwN1owLzEtMCsGA1UEAxMk MTRmNjA5YTYtZWIyMS00ZTczLTk2NTMtMzk0OWY5YTg1MDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig0nUq4tWCRzAEt/yzI3D4zRCobMSR2idnfd yACsCApXFqAlO1D5+D4zrxx0+P921HBUjzgywhtnIvGlC4CUGuEQMfaMQbOV9zZN sMkeL9hxu+AFtACQEoI85fIsah+1gWR7b7d2n6RlIpXcPQUyRg4ed0KIUc8rS923 UWILN7226LftDnVW1luaku5ERXj51aFinnLwnURjOVvmapOWnheQnXAHLvy9xBBk +eJQ6gmkaxR+2HQuvoT1bnoaf/PWxmZ1MweRv+rpxz6Gb7w7fl1AD/9gzNoZ0G6s 12acQkUNbc8tMCaK7gpxGvDAMJNRFeEKJ/GOi9A60ZkJEnFKLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG73aMtdjf2i8hsEkYkP+3QfgZWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg2ODliNTEtYTMxZS0z YTFkLWEzYzYtZTFiNTU0NjQ3MmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALRbayz+e3eA29tImqRCXI9DFs8STLn9OoTRWlfdrrdWPaytH1Gh 4wCT5w9X8BJaPJ/RrM5XHkfAugenh2qCCjFBjPsKMFfibSPNSAZCI+yy2kZJBi8N /VtAtEQQ3ulCBXbDYV5DGZwXg+59E7Yoz7duRzoO/0+HwShCfjHl2PGPAJ5f5JvV MfV3Nl57E4BjcBaEhASqim6bbqAQgWmMkSFumko+/76FFS9JKLAlCBaRdI9yi6oj 5N/SqXWTtdQzR/lKozJecDLlwn4tZaJvCD2R1l1jGA0eQLW/UlfrBmDGlUJvhw7M QKdP9uTUV6eJ5T7KjAgjmqLgukrwRmpPvns= -----END CERTIFICATE-----Generated at Thu Mar 26 17:12:35 2026 by rpki-client