$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9f31b59-a427-383d-8a2e-f9fc6ea5490d.roa File: a9f31b59-a427-383d-8a2e-f9fc6ea5490d.roa (raw, json) Hash identifier: CdM3STIyPm/M7ouF0j0wbVYaztGxQIZHrSNLb7uomEw= Subject key identifier: ED:D7:68:F2:9D:BB:B5:DD:B5:28:B9:4D:75:6C:8A:22:4A:2E:83:C2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0BDD1723B2BD28D89A7FBC00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9f31b59-a427-383d-8a2e-f9fc6ea5490d.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 36617 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:17:23:b2:bd:28:d8:9a:7f:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=b3ae036b-f8eb-4bfd-ad4f-6937f5e2d48f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e0:14:4a:c4:ec:9c:a2:8d:64:4a:e6:ab:87: 8c:27:e3:2a:da:27:39:53:81:6b:a4:58:ea:c7:7f: c4:c3:a2:1b:82:3c:c8:27:67:aa:c6:d7:12:66:c3: 26:7c:ae:0b:12:b8:4f:28:d3:d7:3c:69:7f:ca:29: a4:85:2e:70:b6:5d:0e:cc:f1:5f:be:8f:c4:65:58: e3:d5:1d:cb:f4:5c:65:e3:11:4c:2b:a3:f5:45:79: 13:49:51:9f:7c:86:2b:a5:db:df:92:d9:19:ff:a1: 48:93:02:ec:db:9e:55:99:cd:5f:0e:8e:d1:1f:f1: f0:7a:7a:8f:f9:58:9d:a6:d4:02:3c:54:9d:67:81: d3:89:47:49:b0:1e:e7:bc:59:1d:59:ab:be:c4:34: 43:27:63:c1:a6:45:a1:48:89:5d:5b:39:3e:78:61: e9:1b:91:24:bb:82:dd:3d:5f:a9:07:62:b7:69:db: 59:6e:db:ef:37:16:85:58:ce:6b:74:f5:f7:6b:26: 08:99:1e:12:47:d0:5d:aa:74:e0:bf:e3:5e:d3:36: a1:d7:e3:07:7a:40:82:85:2e:fd:d5:d9:19:2e:78: f4:21:a9:a4:8f:93:65:12:c5:95:23:56:2b:79:92: 8e:0e:49:ec:47:e3:8e:83:99:11:b6:45:d3:c7:d5: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D7:68:F2:9D:BB:B5:DD:B5:28:B9:4D:75:6C:8A:22:4A:2E:83:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9f31b59-a427-383d-8a2e-f9fc6ea5490d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:0e:87:dc:06:f9:64:a1:9e:7f:fd:b7:41:d1:b1:36:38:81: 50:cc:73:c4:45:13:78:7e:ac:aa:1c:97:ff:5f:df:7b:d7:0b: c1:4a:be:1d:33:b7:40:f2:72:82:dc:99:80:dc:5d:0e:89:ed: 50:b6:ee:d7:8b:e6:c1:db:5c:ea:5e:0f:b6:1d:5b:82:d0:6b: fe:1b:11:cd:41:91:df:ac:8d:a5:bf:72:9f:b6:62:b3:fc:08: fe:ee:3e:e0:ae:81:0b:f1:87:fa:a8:f8:16:3d:6b:2b:70:5b: 51:93:cd:62:1b:03:bc:73:6d:3c:5b:85:bf:74:9f:c2:e6:68: 1a:78:26:8f:09:cb:b9:37:30:9b:49:6c:33:50:f0:f6:82:15: 42:68:c1:03:88:96:8d:3f:33:a1:1f:52:4a:96:43:71:9f:06: 1a:cb:f2:46:ac:80:5f:83:1e:4a:de:bb:09:af:32:42:d2:e6: 19:af:0b:59:20:61:91:01:49:83:74:dc:5a:fc:36:2e:82:c1: c0:d7:80:1a:67:6c:bd:13:72:f3:50:20:cb:c6:2c:7b:ad:f1: 2f:48:2a:2a:86:af:b4:0c:52:0f:d2:3a:02:68:01:f5:07:9d: 5d:25:20:76:bc:cb:39:aa:cf:13:71:7d:dc:ac:b7:c5:d9:0e: d0:38:a0:c0 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0L3Rcjsr0o2Jp/vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk YjNhZTAzNmItZjhlYi00YmZkLWFkNGYtNjkzN2Y1ZTJkNDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueAUSsTsnKKNZErmq4eMJ+Mq2ic5U4FrpFjq x3/Ew6IbgjzIJ2eqxtcSZsMmfK4LErhPKNPXPGl/yimkhS5wtl0OzPFfvo/EZVjj 1R3L9Fxl4xFMK6P1RXkTSVGffIYrpdvfktkZ/6FIkwLs255Vmc1fDo7RH/HwenqP +VidptQCPFSdZ4HTiUdJsB7nvFkdWau+xDRDJ2PBpkWhSIldWzk+eGHpG5Eku4Ld PV+pB2K3adtZbtvvNxaFWM5rdPX3ayYImR4SR9BdqnTgv+Ne0zah1+MHekCChS79 1dkZLnj0Iamkj5NlEsWVI1YreZKODknsR+OOg5kRtkXTx9VJNQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFO3XaPKdu7XdtSi5TXVsiiJKLoPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTlmMzFiNTktYTQyNy0z ODNkLThhMmUtZjlmYzZlYTU0OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA7DofcBvlkoZ5//bdB0bE2OIFQzHPERRN4fqyq HJf/X9971wvBSr4dM7dA8nKC3JmA3F0Oie1Qtu7Xi+bB21zqXg+2HVuC0Gv+GxHN QZHfrI2lv3KftmKz/Aj+7j7groEL8Yf6qPgWPWsrcFtRk81iGwO8c208W4W/dJ/C 5mgaeCaPCcu5NzCbSWwzUPD2ghVCaMEDiJaNPzOhH1JKlkNxnwYay/JGrIBfgx5K 3rsJrzJC0uYZrwtZIGGRAUmDdNxa/DYugsHA14AaZ2y9E3LzUCDLxix7rfEvSCoq hq+0DFIP0joCaAH1B51dJSB2vMs5qs8TcX3crLfF2Q7QOKDA -----END CERTIFICATE-----Generated at Thu Mar 26 15:45:10 2026 by rpki-client