$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8641ba7-87ae-3e47-a873-a4b25965fead.roa File: b8641ba7-87ae-3e47-a873-a4b25965fead.roa (raw, json) Hash identifier: /6eVksws3CSkdJGlcg/UGbcB0sszj75LdO+dblfWD7U= Subject key identifier: 32:4A:C5:B9:E1:C5:0A:9A:76:A4:5A:C2:55:7A:47:CF:FF:A7:C0:F4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C03600DC26CB61A6EDAA668 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8641ba7-87ae-3e47-a873-a4b25965fead.roa Signing time: Tue 03 Mar 2026 15:18:05 +0000 ROA not before: Tue 03 Mar 2026 15:18:05 +0000 ROA not after: Mon 01 Jun 2026 14:18:05 +0000 asID: 36631 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:60:0d:c2:6c:b6:1a:6e:da:a6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:05 2026 GMT Not After : Jun 1 14:18:05 2026 GMT Subject: CN=ea4b9442-b00b-4683-8dd5-42cc643a0808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6b:ca:9e:4c:39:95:8a:a3:83:57:ce:e6:16: ee:b2:18:f3:f8:0c:ad:0d:d9:f3:c0:5d:6e:84:5d: 97:8a:bd:8d:4e:b6:c6:50:21:a0:d6:ef:e7:6d:b1: 00:5a:c7:29:d9:3e:fb:cd:d0:3c:6b:81:35:cd:e9: 30:0c:69:fe:4b:40:71:91:c3:23:8f:84:1f:3d:fd: d0:a9:0d:b0:68:38:08:38:53:ee:ee:b5:07:44:dd: d6:7f:31:3d:b3:2b:bf:3a:12:c5:21:41:ff:f2:b2: 17:0c:4d:bb:ff:80:db:bb:2e:60:a6:51:77:7d:24: 7e:2c:55:40:ee:56:00:4f:f1:4d:32:c7:aa:f1:53: 42:70:de:17:42:4d:10:42:a8:61:4c:a7:50:27:37: 50:ef:05:bd:87:f9:62:ce:49:2c:93:46:2c:aa:97: 61:8b:8c:e8:b6:53:40:45:37:9e:d6:64:8a:19:0d: 15:f1:1e:41:ab:a1:5b:db:20:df:a2:5d:8f:21:8c: 18:02:6e:b6:eb:1f:40:2b:0c:4b:35:56:95:ac:75: 57:f6:b0:9f:f3:66:53:71:c9:1a:03:0e:7e:6d:b6: ed:19:33:da:df:38:9d:98:e1:7f:cb:f3:d6:de:c3: 60:0e:48:29:83:de:08:7b:c8:66:fa:92:ce:70:9c: ad:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4A:C5:B9:E1:C5:0A:9A:76:A4:5A:C2:55:7A:47:CF:FF:A7:C0:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b8641ba7-87ae-3e47-a873-a4b25965fead.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6d:1a:06:e1:fb:7f:d6:dc:40:08:47:f8:6d:3a:63:4b:a3: 12:de:d1:74:00:58:4b:01:c6:fa:5d:b9:db:2a:b8:e0:da:83: 9c:32:3d:29:eb:8b:66:42:45:87:37:1c:1e:ae:2b:45:6b:10: 2a:d2:32:ee:7e:ac:b2:d6:7a:4d:d2:f2:6c:3c:07:55:55:36: 11:ed:5f:b7:37:6a:30:e4:da:ff:32:c7:a3:12:0f:e4:26:82: e9:fe:01:28:44:29:5b:1c:4a:0e:28:11:66:25:39:b4:19:db: 87:eb:85:f1:46:01:20:09:8f:ab:aa:c6:97:53:25:0c:60:d7: 92:cd:49:52:8c:c8:9e:25:b0:97:e0:d0:14:d7:69:61:f8:eb: f2:e5:c7:58:34:f7:e3:a5:17:f4:41:24:40:ef:a2:2a:0a:d1: 02:3a:ed:6c:bd:e6:79:e1:fc:1b:be:25:1d:f0:7b:81:c7:6d: 73:a1:2d:e8:48:77:25:50:d4:ec:89:e2:c3:d8:86:28:cc:47: 21:ef:50:8a:84:fd:8f:01:b5:8e:b6:d8:c5:a0:ef:06:a7:01: 70:0c:b1:e3:44:7f:9c:51:3e:f3:c2:3a:a7:1d:80:8b:3a:a2: ce:cb:51:fe:d2:f7:cb:77:89:7d:09:82:64:74:bb:fc:3e:08: 78:80:fc:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2ANwmy2Gm7apmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwNVoXDTI2MDYwMTE0MTgwNVowLzEtMCsGA1UEAxMk ZWE0Yjk0NDItYjAwYi00NjgzLThkZDUtNDJjYzY0M2EwODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGvKnkw5lYqjg1fO5hbushjz+AytDdnzwF1u hF2Xir2NTrbGUCGg1u/nbbEAWscp2T77zdA8a4E1zekwDGn+S0BxkcMjj4QfPf3Q qQ2waDgIOFPu7rUHRN3WfzE9syu/OhLFIUH/8rIXDE27/4Dbuy5gplF3fSR+LFVA 7lYAT/FNMseq8VNCcN4XQk0QQqhhTKdQJzdQ7wW9h/lizkksk0Ysqpdhi4zotlNA RTee1mSKGQ0V8R5Bq6Fb2yDfol2PIYwYAm626x9AKwxLNVaVrHVX9rCf82ZTccka Aw5+bbbtGTPa3zidmOF/y/PW3sNgDkgpg94Ie8hm+pLOcJytQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJKxbnhxQqadqRawlV6R8//p8D0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYjg2NDFiYTctODdhZS0z ZTQ3LWE4NzMtYTRiMjU5NjVmZWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB9tGgbh+3/W3EAIR/htOmNLoxLe0XQAWEsBxvpdudsquODag5wy PSnri2ZCRYc3HB6uK0VrECrSMu5+rLLWek3S8mw8B1VVNhHtX7c3ajDk2v8yx6MS D+Qmgun+AShEKVscSg4oEWYlObQZ24frhfFGASAJj6uqxpdTJQxg15LNSVKMyJ4l sJfg0BTXaWH46/Llx1g09+OlF/RBJEDvoioK0QI67Wy95nnh/Bu+JR3we4HHbXOh LehIdyVQ1OyJ4sPYhijMRyHvUIqE/Y8BtY622MWg7wanAXAMseNEf5xRPvPCOqcd gIs6os7LUf7S98t3iX0JgmR0u/w+CHiA/Fg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:07:14 2026 by rpki-client