$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3650e65-d47d-3e8d-b03a-6078f0012c3a.roa File: b3650e65-d47d-3e8d-b03a-6078f0012c3a.roa (raw, json) Hash identifier: bLEak06qbf4P1Fb6KZEoAFTY+EfxPmel6vzwdmJflQY= Subject key identifier: B4:80:8B:E6:80:30:BB:F8:0D:1E:7C:FA:92:1B:20:E8:1E:85:DD:3A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C0364674217FD1595535840 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3650e65-d47d-3e8d-b03a-6078f0012c3a.roa Signing time: Tue 03 Mar 2026 15:18:07 +0000 ROA not before: Tue 03 Mar 2026 15:18:07 +0000 ROA not after: Mon 01 Jun 2026 14:18:07 +0000 asID: 36627 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:64:67:42:17:fd:15:95:53:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:07 2026 GMT Not After : Jun 1 14:18:07 2026 GMT Subject: CN=4667d8a1-87f8-4307-935c-cf5f2bb04035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2c:8d:f6:73:fe:e6:aa:29:4a:28:7d:60:c4: a6:93:a3:f2:7f:b6:b6:89:00:79:73:05:ad:45:fc: 53:64:27:bc:5e:c7:d0:9d:31:ca:dd:a6:62:8d:a9: 2e:47:ae:ab:e7:06:be:7f:28:78:82:84:6e:e3:c1: 74:86:60:c9:59:9e:32:de:8d:9e:9e:93:55:50:0f: ad:06:5f:f1:f3:a7:cd:c2:34:03:02:0e:1c:3d:5a: d1:c6:46:bf:e3:7c:43:5f:63:66:0f:46:17:cd:92: 8d:90:bf:45:7d:2b:ac:ca:ec:96:63:91:aa:94:7d: b7:de:1d:cf:70:9d:cf:dc:47:c0:4e:4b:0d:8b:63: 1b:03:b1:da:c6:42:2c:e0:f1:55:63:d9:c7:d4:5a: db:63:76:90:ca:73:f7:53:3e:88:c4:99:d7:d1:36: b5:0c:0c:e7:4e:d6:35:0d:af:96:37:d2:f6:11:ca: 09:c9:a3:58:a9:b5:bc:af:53:7d:b0:4e:ee:e4:5e: 48:2d:06:8d:c5:90:51:cf:b6:51:7d:09:9c:8a:c1: ae:25:1f:5a:3f:8d:12:ac:89:5b:ac:a8:fb:b7:f9: 4b:fb:f2:2c:d1:d4:88:e1:86:a8:35:83:6e:70:fa: dd:a1:fe:5d:b1:4d:08:91:83:e6:7a:39:7f:d0:8b: a0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:80:8B:E6:80:30:BB:F8:0D:1E:7C:FA:92:1B:20:E8:1E:85:DD:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b3650e65-d47d-3e8d-b03a-6078f0012c3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:5b:bf:87:ed:8d:dc:a0:3e:72:af:1d:d2:44:ce:09:d6:18: 14:5a:a6:fe:b8:06:67:3f:09:91:3d:91:65:d0:7f:9b:f0:34: 0e:1b:fd:54:a3:c4:b4:9e:13:92:10:ca:d7:5a:e1:dd:d4:96: 7c:d3:47:7b:f8:f4:e1:70:cd:db:4a:09:66:5a:20:90:4d:79: de:ba:fe:3b:68:0e:d2:82:58:06:19:ef:d9:c4:a8:f0:2a:2f: 9e:bc:5d:fe:d3:07:49:22:7d:92:c2:26:c4:57:1a:9b:f1:5d: 0b:93:b1:37:7b:49:98:98:0b:76:0d:d6:f5:6a:b4:b7:00:f7: d1:78:2c:05:3a:ce:7d:20:1c:22:05:cf:52:0b:f8:52:34:e3: 24:15:9d:2e:fc:1d:ca:ba:08:50:a1:0e:36:7b:71:f6:7d:22: aa:a8:ed:a2:1b:48:4b:bf:12:aa:4f:90:36:85:de:2d:89:99: 96:9c:38:05:53:04:f4:24:35:11:73:e8:42:a1:72:c3:98:99: 68:57:f2:c6:12:95:88:64:2b:5b:8e:05:ef:c7:4b:55:ef:35: 91:c0:f5:37:9d:a0:d0:01:a4:a6:30:1d:99:e8:83:91:f6:b3: 48:2e:9f:61:b6:51:3b:b6:c7:5e:ba:d9:81:ec:41:69:0f:eb: 6d:7b:ae:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2RnQhf9FZVTWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwN1oXDTI2MDYwMTE0MTgwN1owLzEtMCsGA1UEAxMk NDY2N2Q4YTEtODdmOC00MzA3LTkzNWMtY2Y1ZjJiYjA0MDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CyN9nP+5qopSih9YMSmk6Pyf7a2iQB5cwWt RfxTZCe8XsfQnTHK3aZijakuR66r5wa+fyh4goRu48F0hmDJWZ4y3o2enpNVUA+t Bl/x86fNwjQDAg4cPVrRxka/43xDX2NmD0YXzZKNkL9FfSusyuyWY5GqlH233h3P cJ3P3EfATksNi2MbA7HaxkIs4PFVY9nH1FrbY3aQynP3Uz6IxJnX0Ta1DAznTtY1 Da+WN9L2EcoJyaNYqbW8r1N9sE7u5F5ILQaNxZBRz7ZRfQmcisGuJR9aP40SrIlb rKj7t/lL+/Is0dSI4YaoNYNucPrdof5dsU0IkYPmejl/0Iug3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLSAi+aAMLv4DR58+pIbIOgehd06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjM2NTBlNjUtZDQ3ZC0z ZThkLWIwM2EtNjA3OGYwMDEyYzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGVbv4ftjdygPnKvHdJEzgnWGBRapv64Bmc/CZE9kWXQf5vwNA4b /VSjxLSeE5IQytda4d3UlnzTR3v49OFwzdtKCWZaIJBNed66/jtoDtKCWAYZ79nE qPAqL568Xf7TB0kifZLCJsRXGpvxXQuTsTd7SZiYC3YN1vVqtLcA99F4LAU6zn0g HCIFz1IL+FI04yQVnS78Hcq6CFChDjZ7cfZ9Iqqo7aIbSEu/EqpPkDaF3i2JmZac OAVTBPQkNRFz6EKhcsOYmWhX8sYSlYhkK1uOBe/HS1XvNZHA9TedoNABpKYwHZno g5H2s0gun2G2UTu2x1662YHsQWkP6217rgk= -----END CERTIFICATE-----Generated at Thu Mar 26 11:07:28 2026 by rpki-client