$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf061325-c558-3622-81f1-a9fd51fa757f.roa File: bf061325-c558-3622-81f1-a9fd51fa757f.roa (raw, json) Hash identifier: 1/W8X/1WBPWrmpRLz7Aj/dAM6uc4OJBp5wzMfj0kLu0= Subject key identifier: 5A:7E:83:0A:52:5D:ED:EC:5A:38:3F:B7:2B:A5:39:64:68:C9:7C:2D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759C4F471831855A0AC880 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf061325-c558-3622-81f1-a9fd51fa757f.roa Signing time: Tue 10 Mar 2026 14:28:36 +0000 ROA not before: Tue 10 Mar 2026 14:28:36 +0000 ROA not after: Mon 08 Jun 2026 14:28:36 +0000 asID: 36623 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9c:4f:47:18:31:85:5a:0a:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:36 2026 GMT Not After : Jun 8 14:28:36 2026 GMT Subject: CN=2f4c48a1-47f3-4a3b-9d35-2ed71cd23ba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fa:9b:ea:63:a9:8c:99:d0:5b:fd:49:b7:76: f1:3a:f8:fa:c6:ef:99:1f:6f:ea:f1:6b:c5:c1:bc: e9:68:bb:43:32:12:db:47:2e:f4:23:3c:12:a4:d2: 5b:63:e2:dc:50:e2:f8:30:3f:19:b5:46:21:ec:e1: 59:13:85:b4:c4:ad:a4:35:fe:b0:40:0c:d7:ea:fd: dd:2b:99:ec:23:69:42:58:91:96:52:98:dc:5c:4c: ae:aa:c9:a7:44:90:60:9a:96:d4:cd:ab:ae:e7:35: 3b:0d:78:c1:ac:b1:88:92:d7:49:46:db:8e:98:97: 79:26:72:79:5f:b0:6d:05:cc:1c:78:a8:d9:ec:7e: 8d:ba:b2:4e:fd:c7:f8:04:38:60:cc:6c:f2:b0:59: be:e4:9d:bc:cc:ee:14:55:10:dc:cf:98:29:a4:66: 81:50:02:65:ca:5f:a3:39:0f:51:5a:c6:23:30:f1: d8:de:e1:9d:58:1e:10:81:a0:af:03:21:77:2c:a0: 72:fa:3c:98:c3:54:d3:55:00:43:52:41:60:28:e9: 51:7b:a7:d0:5b:6c:a7:b3:20:ad:e1:c5:e8:f4:2d: b4:c5:a7:60:67:5f:22:08:f7:61:fe:ec:d5:da:33: 30:50:dc:64:45:70:2c:74:95:ee:7b:64:be:75:94: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7E:83:0A:52:5D:ED:EC:5A:38:3F:B7:2B:A5:39:64:68:C9:7C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf061325-c558-3622-81f1-a9fd51fa757f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:03:cc:68:08:7a:3e:be:d5:f7:91:3f:4b:32:8d:be:5f:5b: 13:0f:e9:8f:da:e7:8f:12:e0:8e:bc:f6:cc:ff:25:1b:4e:58: 0c:7e:fc:21:f8:fa:ca:d6:fe:d0:8b:bc:82:82:a2:1f:cb:26: e4:04:2a:12:f5:f7:29:ae:f9:84:41:2b:58:34:bb:e7:f4:f9: 18:84:ea:87:ee:27:89:cf:b9:0d:78:ee:35:d3:60:5f:3d:b6: 7b:ab:47:ca:a5:4e:af:5e:1d:28:6a:6b:19:94:58:0a:65:00: 52:dc:98:0b:46:ea:4b:6b:f7:5d:01:10:be:15:d9:ce:9c:07: aa:e0:7f:cf:3f:36:ab:42:34:81:5a:08:19:37:b6:e0:7d:6f: 0d:00:2e:6a:3a:40:b7:a8:aa:98:43:bd:4d:3f:cd:df:7a:44: 9f:84:da:72:d0:65:7a:fd:5b:06:0f:e6:4a:5c:c0:1c:c4:83: dd:c1:81:16:f1:bd:5d:ac:21:4d:73:d5:ef:9c:20:87:5d:ec: 2c:f6:41:e7:5f:96:35:cc:91:ee:20:0f:da:8a:69:52:4c:1b: b5:fd:66:67:ef:f9:9e:48:64:3d:91:79:1f:af:25:4d:ee:30: 23:0d:a7:8e:f0:3d:e9:b2:d9:b0:0d:22:87:a8:50:c0:34:d8: 09:a2:9c:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZxPRxgxhVoKyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzNloXDTI2MDYwODE0MjgzNlowLzEtMCsGA1UEAxMk MmY0YzQ4YTEtNDdmMy00YTNiLTlkMzUtMmVkNzFjZDIzYmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvqb6mOpjJnQW/1Jt3bxOvj6xu+ZH2/q8WvF wbzpaLtDMhLbRy70IzwSpNJbY+LcUOL4MD8ZtUYh7OFZE4W0xK2kNf6wQAzX6v3d K5nsI2lCWJGWUpjcXEyuqsmnRJBgmpbUzauu5zU7DXjBrLGIktdJRtuOmJd5JnJ5 X7BtBcwceKjZ7H6NurJO/cf4BDhgzGzysFm+5J28zO4UVRDcz5gppGaBUAJlyl+j OQ9RWsYjMPHY3uGdWB4QgaCvAyF3LKBy+jyYw1TTVQBDUkFgKOlRe6fQW2ynsyCt 4cXo9C20xadgZ18iCPdh/uzV2jMwUNxkRXAsdJXue2S+dZTSbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFp+gwpSXe3sWjg/tyulOWRoyXwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYwNjEzMjUtYzU1OC0z NjIyLTgxZjEtYTlmZDUxZmE3NTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKsDzGgIej6+1feRP0syjb5fWxMP6Y/a548S4I689sz/JRtOWAx+ /CH4+srW/tCLvIKCoh/LJuQEKhL19ymu+YRBK1g0u+f0+RiE6ofuJ4nPuQ147jXT YF89tnurR8qlTq9eHShqaxmUWAplAFLcmAtG6ktr910BEL4V2c6cB6rgf88/NqtC NIFaCBk3tuB9bw0ALmo6QLeoqphDvU0/zd96RJ+E2nLQZXr9WwYP5kpcwBzEg93B gRbxvV2sIU1z1e+cIIdd7Cz2QedfljXMke4gD9qKaVJMG7X9Zmfv+Z5IZD2ReR+v JU3uMCMNp47wPemy2bANIoeoUMA02AminFg= -----END CERTIFICATE-----Generated at Thu Mar 26 14:53:42 2026 by rpki-client