$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a86e7e9d-a796-3d09-80e6-c5586ebcea20.roa File: a86e7e9d-a796-3d09-80e6-c5586ebcea20.roa (raw, json) Hash identifier: GJVHUho/Qu8VMNeIrpK3dJphz3zA0a9x6N0KCWSPFXc= Subject key identifier: 3E:6B:4D:A6:C8:CE:1A:D8:25:C5:1C:17:B7:8C:AB:86:50:51:3C:26 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C036B688B517852ED13C700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a86e7e9d-a796-3d09-80e6-c5586ebcea20.roa Signing time: Tue 03 Mar 2026 15:18:10 +0000 ROA not before: Tue 03 Mar 2026 15:18:10 +0000 ROA not after: Mon 01 Jun 2026 14:18:10 +0000 asID: 396610 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:6b:68:8b:51:78:52:ed:13:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:10 2026 GMT Not After : Jun 1 14:18:10 2026 GMT Subject: CN=13be9802-4743-4075-a2b0-2e440e3b3452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:01:4e:cd:89:6b:1e:29:e4:1c:b1:27:4a:42: 03:69:2f:62:99:45:64:ca:e3:c7:7c:5e:bb:a3:b6: 80:07:2b:21:8c:40:46:5a:29:cf:3d:f5:9e:dd:6e: 15:97:a2:40:f6:f0:39:3d:38:7d:89:eb:45:d6:08: 98:66:d4:a9:fb:93:6c:bb:13:f1:e1:ef:2f:4e:4f: cb:f8:f6:d7:08:ff:7c:50:74:b9:35:62:62:6d:4e: a1:2a:97:5c:6d:00:c5:02:e3:ee:12:d1:42:1c:5d: b0:d5:71:6d:64:94:ab:3b:37:d7:78:7f:09:7e:b6: f9:1b:4a:ec:ba:43:0b:17:20:8d:d5:10:f4:67:8c: ff:46:9e:9d:f5:f9:52:46:36:94:1d:60:33:ab:ab: 61:e8:dc:a7:c4:0e:dc:a1:cb:45:38:dd:9b:67:c0: 9f:2f:34:c4:f6:2c:9c:81:20:45:24:a5:6a:46:aa: 53:9a:f2:1d:2d:1a:b9:0b:83:b6:d0:60:05:ef:f8: be:ec:6d:47:d7:91:a1:91:7f:7c:b0:1c:b1:31:34: 16:d5:23:86:aa:46:19:29:18:04:cd:6c:85:21:01: 02:b9:7c:01:7a:20:a6:65:a1:33:78:da:85:26:4a: b8:b7:ee:63:f5:49:b9:0d:21:be:46:ad:78:13:08: dc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6B:4D:A6:C8:CE:1A:D8:25:C5:1C:17:B7:8C:AB:86:50:51:3C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a86e7e9d-a796-3d09-80e6-c5586ebcea20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bc:08:23:e7:03:92:53:37:a7:7a:45:9a:f9:d4:63:f5:0b: bf:6a:35:7e:14:f4:02:f7:1e:49:d6:52:c0:cb:c1:1f:36:8b: e0:4e:ae:4c:40:35:5f:2a:ae:b4:89:8c:f7:76:21:44:6f:63: e7:91:fc:ff:84:ca:52:ab:4f:db:f3:63:9e:13:ef:b1:a0:e8: a1:bf:f9:71:d9:7b:48:8b:4b:b5:63:52:b8:80:87:3f:d4:ed: 3d:6e:82:c9:a6:51:61:9f:6f:1f:f6:b9:6c:7c:cc:c4:96:bc: b3:85:2b:0b:b9:66:51:76:fc:ee:04:55:a1:3e:ec:03:61:2c: cc:cf:23:fe:13:cf:66:37:ff:3b:ae:f9:3b:28:fc:7c:2d:fc: 41:56:89:44:54:2e:b8:cb:ba:97:97:7d:ce:7d:eb:e6:19:d7: 53:50:31:d2:30:e5:4c:50:bf:ac:39:ca:c7:70:13:71:60:f8: f1:65:91:08:f6:8b:be:b8:aa:ae:91:71:ce:88:db:ad:15:89: 84:5a:cf:7d:d0:55:e3:9a:1d:d4:bc:89:ec:ab:f1:69:10:da: a0:93:ee:5e:c4:4e:af:02:23:27:f1:53:a3:ce:23:f4:08:fb: 95:25:ac:5d:05:59:66:2f:5e:60:a1:df:ad:7c:d4:f2:39:93: 4f:bb:a0:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2toi1F4Uu0TxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgxMFoXDTI2MDYwMTE0MTgxMFowLzEtMCsGA1UEAxMk MTNiZTk4MDItNDc0My00MDc1LWEyYjAtMmU0NDBlM2IzNDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAFOzYlrHinkHLEnSkIDaS9imUVkyuPHfF67 o7aAByshjEBGWinPPfWe3W4Vl6JA9vA5PTh9ietF1giYZtSp+5NsuxPx4e8vTk/L +PbXCP98UHS5NWJibU6hKpdcbQDFAuPuEtFCHF2w1XFtZJSrOzfXeH8Jfrb5G0rs ukMLFyCN1RD0Z4z/Rp6d9flSRjaUHWAzq6th6NynxA7coctFON2bZ8CfLzTE9iyc gSBFJKVqRqpTmvIdLRq5C4O20GAF7/i+7G1H15GhkX98sByxMTQW1SOGqkYZKRgE zWyFIQECuXwBeiCmZaEzeNqFJkq4t+5j9Um5DSG+Rq14EwjcqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD5rTabIzhrYJcUcF7eMq4ZQUTwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTg2ZTdlOWQtYTc5Ni0z ZDA5LTgwZTYtYzU1ODZlYmNlYTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAC8CCPnA5JTN6d6RZr51GP1C79qNX4U9AL3HknWUsDLwR82i+BO rkxANV8qrrSJjPd2IURvY+eR/P+EylKrT9vzY54T77Gg6KG/+XHZe0iLS7VjUriA hz/U7T1ugsmmUWGfbx/2uWx8zMSWvLOFKwu5ZlF2/O4EVaE+7ANhLMzPI/4Tz2Y3 /zuu+Tso/Hwt/EFWiURULrjLupeXfc596+YZ11NQMdIw5UxQv6w5ysdwE3Fg+PFl kQj2i764qq6Rcc6I260ViYRaz33QVeOaHdS8ieyr8WkQ2qCT7l7ETq8CIyfxU6PO I/QI+5UlrF0FWWYvXmCh36181PI5k0+7oFk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:13:31 2026 by rpki-client