$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba16aa6a-a26d-3ffc-ac8c-b9f68a39c421.roa File: ba16aa6a-a26d-3ffc-ac8c-b9f68a39c421.roa (raw, json) Hash identifier: t7a0obZH1LF+Ui470qiF8X0gH/f294j3sDQjLrpcqg0= Subject key identifier: 73:91:66:4F:0C:E8:11:47:15:9E:79:4A:92:BB:3F:65:F8:FE:76:22 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759FEED1DBC29510658E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba16aa6a-a26d-3ffc-ac8c-b9f68a39c421.roa Signing time: Tue 10 Mar 2026 14:28:38 +0000 ROA not before: Tue 10 Mar 2026 14:28:38 +0000 ROA not after: Mon 08 Jun 2026 14:28:38 +0000 asID: 396551 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9f:ee:d1:db:c2:95:10:65:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:38 2026 GMT Not After : Jun 8 14:28:38 2026 GMT Subject: CN=818b5ade-8b0a-40ef-9a8b-aadd248aa293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b9:d2:d9:2a:82:70:49:1c:70:94:9c:37:32: ea:b6:29:de:f3:ce:25:3f:74:3a:c0:cc:38:e5:c9: 42:89:de:d3:5c:3d:31:df:2c:6d:c3:8d:76:76:90: da:5d:9b:ed:d2:a7:57:7d:97:9c:c5:2b:7d:a5:d5: 99:47:65:21:f6:a4:44:d6:62:d3:64:f2:bb:d3:c3: c9:82:14:e4:49:f8:ad:9d:4f:95:ca:57:6e:99:e9: 9f:a3:fa:2d:8b:8c:dc:ee:a6:0d:aa:8e:11:f0:b3: 7f:7c:c9:9c:9f:9f:64:8b:83:7c:e2:0f:ba:c7:47: 57:6b:57:dd:5e:a3:93:ad:58:54:e9:6e:7b:1d:89: 7c:e3:fa:80:2a:6a:de:3f:1a:e1:52:6b:99:47:3e: f6:2b:b1:f8:12:e7:8f:0c:e7:38:d6:00:53:c0:3d: 0a:ec:65:9c:ea:1d:e5:2d:43:a5:9e:66:29:c6:71: 74:3f:04:e2:61:14:a2:c9:dc:de:72:59:ff:58:1d: d1:85:1c:bd:0c:d9:59:e5:49:52:12:5c:6f:95:e4: 6a:bb:2b:be:46:16:eb:a7:78:32:31:a3:cc:c0:aa: a9:a5:6e:d8:c1:58:7d:79:19:f7:15:32:3d:38:e6: c9:ac:03:ad:22:53:f7:75:cb:bd:7a:b8:c2:60:94: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:91:66:4F:0C:E8:11:47:15:9E:79:4A:92:BB:3F:65:F8:FE:76:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba16aa6a-a26d-3ffc-ac8c-b9f68a39c421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:8c:61:8d:ce:db:4c:6a:72:2c:b9:fe:5d:2b:d8:b2:fd:fc: a7:da:bf:69:1b:10:4f:84:80:25:fc:53:b1:ef:08:b5:9c:fa: 16:8f:f9:64:89:cb:25:30:31:a7:1c:50:84:ff:a6:36:63:d5: ee:66:39:a9:02:55:22:fc:f8:45:ea:a6:6c:04:63:30:f4:21: 2e:81:7a:01:b9:ad:e1:40:72:c0:3b:83:39:4f:b1:e6:f6:68: ba:fa:69:31:05:e3:59:1f:c3:ce:ae:26:6e:d8:bd:3c:db:03: 0c:f3:06:a6:5a:02:cc:20:0d:d3:33:d5:74:a0:30:3c:cd:6c: 46:00:57:d6:15:8c:fa:3a:d9:37:fd:a5:08:31:9d:c0:62:07: 76:e6:bc:49:34:0a:4d:e7:87:1a:18:6f:1c:d8:f9:70:55:f7: 2e:bb:3f:6b:49:ea:8f:13:e0:74:bd:1a:97:d7:6b:ac:8c:f2: d7:cd:8a:42:64:8a:c9:34:3a:2a:2b:05:5a:e0:ff:a4:ef:56: 97:dd:27:d3:54:fe:83:15:7b:2f:d1:15:c1:be:6c:9f:f1:03: af:32:7b:d1:24:31:01:52:f7:7f:20:38:51:2b:61:ef:a9:24: d0:92:78:85:c9:f4:cf:c6:85:71:1a:6d:e9:5a:12:44:05:ee: 70:5f:39:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZ/u0dvClRBljgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzOFoXDTI2MDYwODE0MjgzOFowLzEtMCsGA1UEAxMk ODE4YjVhZGUtOGIwYS00MGVmLTlhOGItYWFkZDI0OGFhMjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LnS2SqCcEkccJScNzLqtine884lP3Q6wMw4 5clCid7TXD0x3yxtw412dpDaXZvt0qdXfZecxSt9pdWZR2Uh9qRE1mLTZPK708PJ ghTkSfitnU+Vyldumemfo/oti4zc7qYNqo4R8LN/fMmcn59ki4N84g+6x0dXa1fd XqOTrVhU6W57HYl84/qAKmrePxrhUmuZRz72K7H4EuePDOc41gBTwD0K7GWc6h3l LUOlnmYpxnF0PwTiYRSiydzecln/WB3RhRy9DNlZ5UlSElxvleRquyu+Rhbrp3gy MaPMwKqppW7YwVh9eRn3FTI9OObJrAOtIlP3dcu9erjCYJTKxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHORZk8M6BFHFZ55SpK7P2X4/nYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmExNmFhNmEtYTI2ZC0z ZmZjLWFjOGMtYjlmNjhhMzljNDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD6MYY3O20xqciy5/l0r2LL9/Kfav2kbEE+EgCX8U7HvCLWc+haP +WSJyyUwMaccUIT/pjZj1e5mOakCVSL8+EXqpmwEYzD0IS6BegG5reFAcsA7gzlP seb2aLr6aTEF41kfw86uJm7YvTzbAwzzBqZaAswgDdMz1XSgMDzNbEYAV9YVjPo6 2Tf9pQgxncBiB3bmvEk0Ck3nhxoYbxzY+XBV9y67P2tJ6o8T4HS9GpfXa6yM8tfN ikJkisk0OiorBVrg/6TvVpfdJ9NU/oMVey/RFcG+bJ/xA68ye9EkMQFS938gOFEr Ye+pJNCSeIXJ9M/GhXEabelaEkQF7nBfOeQ= -----END CERTIFICATE-----Generated at Thu Mar 26 11:07:20 2026 by rpki-client