$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04aa5a2-20e3-3412-9ada-745c1b83d315.roa File: b04aa5a2-20e3-3412-9ada-745c1b83d315.roa (raw, json) Hash identifier: O94QXeFrYtntHbmtzYfM0qQwLhYl/sE04twghlhmINI= Subject key identifier: 92:8A:F5:66:64:A7:E1:68:64:67:AC:DD:BE:B8:F8:69:CD:FC:A1:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C0364D17BE924D2592B853E Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04aa5a2-20e3-3412-9ada-745c1b83d315.roa Signing time: Tue 03 Mar 2026 15:18:07 +0000 ROA not before: Tue 03 Mar 2026 15:18:07 +0000 ROA not after: Mon 01 Jun 2026 14:18:07 +0000 asID: 396567 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:64:d1:7b:e9:24:d2:59:2b:85:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:07 2026 GMT Not After : Jun 1 14:18:07 2026 GMT Subject: CN=4bd5c79f-0ebd-4a3f-8adc-52ef05bc15f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:c1:93:c9:62:b7:64:d9:91:bf:67:69:f0: f9:51:60:fe:3a:6e:f5:35:ff:d3:3c:5f:d6:90:4c: 66:5c:42:bb:c0:d7:3c:2e:ad:30:bc:44:0c:be:c5: 12:a5:88:b5:88:61:98:08:ef:13:b5:7d:da:ee:27: e8:d2:bf:20:58:ba:67:11:32:94:1c:eb:be:a1:32: 6c:14:69:10:30:f7:9e:b4:66:d5:d3:09:b8:0f:03: ae:93:42:af:ad:ae:b4:93:1b:1f:f2:77:3f:56:9b: f8:ac:96:21:8c:d2:a9:81:10:89:ce:ce:db:49:d8: 36:d2:0a:ee:5c:dd:23:ef:d7:ae:de:fa:b9:41:e8: 02:74:28:e4:3d:8a:2e:63:0f:5f:02:d6:3a:b5:f5: 7d:37:d7:24:23:79:34:48:5b:0e:2e:bf:67:f0:9a: c5:94:17:32:2a:c9:04:e4:2c:1c:18:4e:cd:16:15: 95:b1:a3:e3:77:61:c7:37:fe:c5:f6:c8:db:b3:e8: 35:2f:0c:19:96:c1:f3:f8:26:02:fa:18:d9:87:8e: 91:20:67:4d:ce:6c:a7:43:17:65:76:5b:21:8a:ad: 30:27:bd:d6:1c:51:94:22:53:a6:81:19:21:31:34: 6d:e6:a9:bb:1b:f1:a6:44:1a:3a:80:6f:e9:74:7b: 01:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:8A:F5:66:64:A7:E1:68:64:67:AC:DD:BE:B8:F8:69:CD:FC:A1:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b04aa5a2-20e3-3412-9ada-745c1b83d315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:66:57:d5:0e:78:cb:07:7c:ec:76:f0:60:7b:e0:ca:da:69: be:01:ec:b5:67:56:1d:b9:e1:7c:42:81:45:63:d2:3f:88:02: 3e:c6:54:50:3d:df:0c:cb:2c:79:88:ea:4d:9f:07:26:a0:2e: 0f:13:49:f7:3c:b6:3b:f9:33:8d:83:a2:a9:7b:d4:33:3d:e5: 8b:2d:b2:d3:f8:89:47:35:00:a0:6d:0e:65:5d:d3:b6:29:26: ef:5c:c7:ee:5c:ef:f0:98:f3:16:38:87:fe:23:2b:ce:a1:8c: 97:34:c7:7f:6f:c0:84:de:6a:e6:59:7f:7e:a5:96:bb:57:a7: df:14:23:db:39:43:bd:21:ec:3d:01:7d:43:98:a5:ad:43:8f: 7d:c9:9b:9a:86:62:36:a0:cf:29:71:9a:8d:45:df:ba:c7:da: 90:b7:b9:32:b6:a3:40:55:9b:19:ab:6a:0b:f2:5f:88:07:68: af:af:cc:2a:df:db:c3:9b:6c:7d:b5:ac:64:07:d5:85:7d:48: c4:f9:a9:ac:b9:34:f1:d5:12:6b:17:e7:0d:78:a5:4a:ff:47: 62:54:df:e9:9f:ef:9d:ed:80:5d:f4:4a:b2:f7:d0:51:78:0d: 61:f3:18:8c:f1:f4:61:0e:94:77:d0:34:61:08:d0:a5:c0:6f: 18:67:e8:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2TRe+kk0lkrhT4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwN1oXDTI2MDYwMTE0MTgwN1owLzEtMCsGA1UEAxMk NGJkNWM3OWYtMGViZC00YTNmLThhZGMtNTJlZjA1YmMxNWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqfBk8lit2TZkb9nafD5UWD+Om71Nf/TPF/W kExmXEK7wNc8Lq0wvEQMvsUSpYi1iGGYCO8TtX3a7ifo0r8gWLpnETKUHOu+oTJs FGkQMPeetGbV0wm4DwOuk0Kvra60kxsf8nc/Vpv4rJYhjNKpgRCJzs7bSdg20gru XN0j79eu3vq5QegCdCjkPYouYw9fAtY6tfV9N9ckI3k0SFsOLr9n8JrFlBcyKskE 5CwcGE7NFhWVsaPjd2HHN/7F9sjbs+g1LwwZlsHz+CYC+hjZh46RIGdNzmynQxdl dlshiq0wJ73WHFGUIlOmgRkhMTRt5qm7G/GmRBo6gG/pdHsBPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJKK9WZkp+FoZGes3b64+GnN/KE7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjA0YWE1YTItMjBlMy0z NDEyLTlhZGEtNzQ1YzFiODNkMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACFmV9UOeMsHfOx28GB74Mraab4B7LVnVh254XxCgUVj0j+IAj7G VFA93wzLLHmI6k2fByagLg8TSfc8tjv5M42Doql71DM95YststP4iUc1AKBtDmVd 07YpJu9cx+5c7/CY8xY4h/4jK86hjJc0x39vwITeauZZf36llrtXp98UI9s5Q70h 7D0BfUOYpa1Dj33Jm5qGYjagzylxmo1F37rH2pC3uTK2o0BVmxmragvyX4gHaK+v zCrf28ObbH21rGQH1YV9SMT5qay5NPHVEmsX5w14pUr/R2JU3+mf753tgF30SrL3 0FF4DWHzGIzx9GEOlHfQNGEI0KXAbxhn6KM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:43 2026 by rpki-client