$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bef35eb9-48d4-3f58-a208-95f8dff8b9cc.roa File: bef35eb9-48d4-3f58-a208-95f8dff8b9cc.roa (raw, json) Hash identifier: geiSbngmdvXB5nyLDJPZgJAUTD87b0eNsgVuHqcfUl0= Subject key identifier: 72:AB:67:40:EC:6F:DE:1A:9B:DF:D7:33:8C:5F:B0:B8:04:01:A3:3E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C036D9F051B0507BB29AEC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bef35eb9-48d4-3f58-a208-95f8dff8b9cc.roa Signing time: Tue 03 Mar 2026 15:18:11 +0000 ROA not before: Tue 03 Mar 2026 15:18:11 +0000 ROA not after: Mon 01 Jun 2026 14:18:11 +0000 asID: 396827 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:6d:9f:05:1b:05:07:bb:29:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:11 2026 GMT Not After : Jun 1 14:18:11 2026 GMT Subject: CN=c9b62a7a-fd89-45c2-a763-c963053aa1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:e0:27:91:c8:f6:7c:a6:b6:63:cb:85:c9:71: 45:b9:5e:df:bd:0f:15:ef:4c:79:73:6b:7f:5d:8f: 72:3c:d1:dc:a1:cc:fd:ff:a7:1c:95:e1:a2:f7:3b: 7c:84:a6:f7:b0:07:cb:00:29:9e:49:6a:87:58:04: 06:ab:c5:fe:09:ff:d8:e8:1c:e6:68:71:75:c3:76: 0b:b3:0c:ff:ee:01:da:aa:3f:c0:cf:90:65:4b:44: af:78:86:2c:93:35:75:a7:b6:51:00:bc:b8:92:b4: 16:a8:43:c6:25:81:09:31:eb:fb:96:42:1c:40:41: 69:99:ee:dc:fe:94:13:35:c8:ef:da:28:15:82:3e: a7:a4:c8:ec:35:b7:c6:02:6d:1d:02:7a:86:a5:eb: 4a:b5:5b:87:ec:1e:ba:98:85:9f:ce:63:6a:b0:d4: d5:b7:94:56:a8:f3:41:f4:03:2c:2c:81:bc:00:7c: a0:1f:30:43:cf:e5:d6:a8:62:23:ec:9d:50:72:14: f9:4d:49:b1:0f:85:61:bd:de:87:b1:fd:8c:44:0f: fa:2c:2e:06:ce:89:8d:8c:e3:d5:c8:77:7f:09:2c: ba:57:c9:33:cd:87:2d:b2:e2:b1:d5:08:ef:4a:ab: 19:7d:4d:71:b5:d4:ec:35:2b:8f:6f:53:28:54:2b: 92:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AB:67:40:EC:6F:DE:1A:9B:DF:D7:33:8C:5F:B0:B8:04:01:A3:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bef35eb9-48d4-3f58-a208-95f8dff8b9cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:a2:67:01:05:fe:cd:79:c1:16:80:5a:32:02:eb:22:bc:b8: d1:a1:f6:3c:21:49:f1:d0:70:fc:c9:11:b0:53:52:b3:5c:ac: 2f:4e:f0:c4:c2:e3:bd:ae:0e:17:52:44:75:18:12:b0:c2:27: 7a:28:fd:b6:8c:a2:b2:a9:75:97:a5:84:06:ba:a1:f6:08:18: 63:c7:08:d7:bb:ac:e8:ac:1b:c4:4d:42:f6:f7:1d:e6:e7:81: 18:45:3c:b4:56:07:bb:f0:a2:28:7b:68:66:44:7f:9a:63:41: f6:1b:f0:52:c0:dd:83:fb:b0:4b:d5:92:91:9a:9a:8b:60:a3: 66:b8:99:61:2b:4f:3d:0f:f7:17:af:d0:ea:da:3c:c5:45:fc: f2:e4:41:c6:1e:32:74:b5:dd:ab:ab:b6:ec:23:10:12:82:6a: cf:71:54:c0:ed:33:aa:ef:71:ec:39:21:6c:d4:6b:a8:cb:e3: 77:9d:dc:dc:f8:71:82:de:0f:fe:fb:7e:b8:7e:ef:ca:af:50: 10:2d:2a:b9:3c:14:7e:e9:34:aa:a0:65:97:3c:5e:99:7d:be: 5a:57:48:59:d0:45:26:94:47:49:02:5d:64:64:6a:66:f9:79: 3b:68:85:84:93:38:7d:67:ee:3e:75:94:6f:d2:29:6e:5a:8e: c6:da:df:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA22fBRsFB7sprsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgxMVoXDTI2MDYwMTE0MTgxMVowLzEtMCsGA1UEAxMk YzliNjJhN2EtZmQ4OS00NWMyLWE3NjMtYzk2MzA1M2FhMWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5uAnkcj2fKa2Y8uFyXFFuV7fvQ8V70x5c2t/ XY9yPNHcocz9/6ccleGi9zt8hKb3sAfLACmeSWqHWAQGq8X+Cf/Y6BzmaHF1w3YL swz/7gHaqj/Az5BlS0SveIYskzV1p7ZRALy4krQWqEPGJYEJMev7lkIcQEFpme7c /pQTNcjv2igVgj6npMjsNbfGAm0dAnqGpetKtVuH7B66mIWfzmNqsNTVt5RWqPNB 9AMsLIG8AHygHzBDz+XWqGIj7J1QchT5TUmxD4Vhvd6Hsf2MRA/6LC4GzomNjOPV yHd/CSy6V8kzzYctsuKx1QjvSqsZfU1xtdTsNSuPb1MoVCuSQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHKrZ0Dsb94am9/XM4xfsLgEAaM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmVmMzVlYjktNDhkNC0z ZjU4LWEyMDgtOTVmOGRmZjhiOWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALKiZwEF/s15wRaAWjIC6yK8uNGh9jwhSfHQcPzJEbBTUrNcrC9O 8MTC472uDhdSRHUYErDCJ3oo/baMorKpdZelhAa6ofYIGGPHCNe7rOisG8RNQvb3 HebngRhFPLRWB7vwoih7aGZEf5pjQfYb8FLA3YP7sEvVkpGamotgo2a4mWErTz0P 9xev0OraPMVF/PLkQcYeMnS13aurtuwjEBKCas9xVMDtM6rvcew5IWzUa6jL43ed 3Nz4cYLeD/77frh+78qvUBAtKrk8FH7pNKqgZZc8Xpl9vlpXSFnQRSaUR0kCXWRk amb5eTtohYSTOH1n7j51lG/SKW5ajsba31Q= -----END CERTIFICATE-----Generated at Thu Mar 26 14:00:17 2026 by rpki-client