$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e87af-a17d-3214-bdb3-057bf966975a.roa File: c07e87af-a17d-3214-bdb3-057bf966975a.roa (raw, json) Hash identifier: 3+xAOPKxzRrWHsrV1nGI4+31ZNi0aXIema0h+HI+JHU= Subject key identifier: D0:8B:BA:7B:17:3A:A6:F1:71:92:F1:4A:B1:C0:07:F3:7F:68:A0:14 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C0361B38BC3E05DB1229A00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e87af-a17d-3214-bdb3-057bf966975a.roa Signing time: Tue 03 Mar 2026 15:18:05 +0000 ROA not before: Tue 03 Mar 2026 15:18:05 +0000 ROA not after: Mon 01 Jun 2026 14:18:05 +0000 asID: 397194 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:61:b3:8b:c3:e0:5d:b1:22:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:05 2026 GMT Not After : Jun 1 14:18:05 2026 GMT Subject: CN=f5803565-f304-489f-8497-3dbf3ce3b8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a1:2e:7c:5e:1a:af:80:06:46:be:bc:b0:d3: 39:bd:95:7a:b0:64:ed:ce:fc:28:bd:8c:72:92:46: 39:49:b4:24:cf:87:77:29:74:64:48:42:f4:b9:af: 8a:1c:fd:43:1f:96:27:49:1a:43:f4:68:9d:6a:e5: 48:da:b0:a7:81:15:f9:a1:a4:b5:45:30:89:d0:08: ed:05:71:b2:7e:55:09:67:c9:3f:e7:71:3c:7a:8a: 0c:3f:38:29:eb:78:00:a5:ab:06:7a:b4:d5:46:34: 64:4f:fb:2a:4d:c9:79:68:5f:a4:a6:0c:21:b9:61: 29:f2:cd:b1:67:04:4e:54:ae:a5:bb:06:14:c5:3d: 1c:78:a8:e4:f5:0c:3a:06:fc:b4:d0:66:bc:6b:7c: a0:7c:5c:12:66:e0:a7:83:3b:1a:19:2a:ed:80:fa: 8b:2b:76:b7:28:cc:8d:f2:33:aa:58:0a:42:74:70: cd:41:24:54:0a:06:b0:09:50:81:00:1a:0b:69:29: 1f:4d:83:4b:c3:f1:19:60:db:e0:6a:63:26:97:1d: 5c:7e:a9:63:59:f2:6e:3f:78:81:07:f8:a3:ce:5b: ab:f7:db:33:ca:9c:a1:0d:13:b5:eb:cb:b3:74:85: df:91:66:82:05:d0:5a:d3:4d:22:8a:ad:96:a8:3e: 24:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8B:BA:7B:17:3A:A6:F1:71:92:F1:4A:B1:C0:07:F3:7F:68:A0:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c07e87af-a17d-3214-bdb3-057bf966975a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6f:47:9f:02:a5:98:f3:1e:ad:cc:48:07:a8:7f:36:0c:5d: 8e:88:f4:60:cf:d0:8b:7a:df:ef:59:0d:8e:31:23:67:fb:5b: 70:1b:c2:3c:1b:64:bc:02:b2:37:69:ee:99:bb:5b:f3:b0:45: 4c:44:ca:a1:d5:9f:02:88:70:c5:e1:61:25:fd:03:1d:17:70: c5:2c:36:fa:15:f4:91:70:7a:3c:e0:b1:1c:da:eb:12:c5:50: 1e:54:35:34:7b:36:6c:fe:5d:26:2f:7d:8d:6b:22:eb:45:af: 7a:2e:84:9c:70:a7:1a:f0:97:6e:e3:dd:74:a7:91:61:3a:18: 76:f5:5c:f6:99:96:28:78:62:4d:b0:e8:8d:d0:28:e0:53:17: ed:2a:ed:3b:d1:76:2e:99:02:1e:83:c5:2d:b3:4f:8e:e2:9e: 55:9a:9e:b7:13:8d:e8:8b:a8:cd:a2:01:cd:0a:fa:eb:7e:48: 64:d8:68:33:b9:47:1f:6a:08:a6:01:7c:c6:c9:4f:a6:57:be: 71:28:e2:fe:00:dc:7c:13:1d:d7:48:ec:e4:16:e0:d3:de:48: 8c:6f:bb:d8:4a:d5:58:51:ca:23:b7:81:46:53:bd:69:0c:0c: 83:57:8e:43:05:46:f1:a5:e3:78:71:6b:59:e7:93:a5:7e:9c: 9b:57:bd:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2Gzi8PgXbEimgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwNVoXDTI2MDYwMTE0MTgwNVowLzEtMCsGA1UEAxMk ZjU4MDM1NjUtZjMwNC00ODlmLTg0OTctM2RiZjNjZTNiOGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6EufF4ar4AGRr68sNM5vZV6sGTtzvwovYxy kkY5SbQkz4d3KXRkSEL0ua+KHP1DH5YnSRpD9GidauVI2rCngRX5oaS1RTCJ0Ajt BXGyflUJZ8k/53E8eooMPzgp63gApasGerTVRjRkT/sqTcl5aF+kpgwhuWEp8s2x ZwROVK6luwYUxT0ceKjk9Qw6Bvy00Ga8a3ygfFwSZuCngzsaGSrtgPqLK3a3KMyN 8jOqWApCdHDNQSRUCgawCVCBABoLaSkfTYNLw/EZYNvgamMmlx1cfqljWfJuP3iB B/ijzlur99szypyhDRO168uzdIXfkWaCBdBa000iiq2WqD4kdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNCLunsXOqbxcZLxSrHAB/N/aKAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzA3ZTg3YWYtYTE3ZC0z MjE0LWJkYjMtMDU3YmY5NjY5NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGdvR58CpZjzHq3MSAeofzYMXY6I9GDP0It63+9ZDY4xI2f7W3Ab wjwbZLwCsjdp7pm7W/OwRUxEyqHVnwKIcMXhYSX9Ax0XcMUsNvoV9JFwejzgsRza 6xLFUB5UNTR7Nmz+XSYvfY1rIutFr3ouhJxwpxrwl27j3XSnkWE6GHb1XPaZlih4 Yk2w6I3QKOBTF+0q7TvRdi6ZAh6DxS2zT47inlWanrcTjeiLqM2iAc0K+ut+SGTY aDO5Rx9qCKYBfMbJT6ZXvnEo4v4A3HwTHddI7OQW4NPeSIxvu9hK1VhRyiO3gUZT vWkMDINXjkMFRvGl43hxa1nnk6V+nJtXvbM= -----END CERTIFICATE-----Generated at Thu Mar 26 08:38:34 2026 by rpki-client