$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c36a5699-94a7-34ab-a7ee-423f56176074.roa File: c36a5699-94a7-34ab-a7ee-423f56176074.roa (raw, json) Hash identifier: YtFKIxHO4Crga0khYVFnx4i6j4d+TYSv6jX8UlDGvFo= Subject key identifier: 84:A2:4D:0F:2B:DC:C9:9E:22:86:DF:37:77:A1:A1:B4:28:FA:B6:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A85BD82A816F45A91900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c36a5699-94a7-34ab-a7ee-423f56176074.roa Signing time: Tue 10 Mar 2026 14:28:42 +0000 ROA not before: Tue 10 Mar 2026 14:28:42 +0000 ROA not after: Mon 08 Jun 2026 14:28:42 +0000 asID: 396588 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a8:5b:d8:2a:81:6f:45:a9:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:42 2026 GMT Not After : Jun 8 14:28:42 2026 GMT Subject: CN=17ff7d39-c486-4657-a699-525453d5ec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:8c:78:0b:0f:09:88:78:44:11:18:b6:e0: a3:c6:c4:ad:c5:1c:92:57:82:24:43:a7:0b:ae:9e: 75:40:de:96:bf:b5:7f:8f:d8:f2:c0:62:f1:5d:56: 5f:f8:40:76:15:42:d1:b6:cc:a9:ed:f9:aa:ec:d4: 72:04:b8:a5:59:e2:8c:d7:fb:b1:db:20:04:52:c7: 2f:6d:20:9f:9d:03:36:1e:f0:09:80:19:1d:89:e1: 56:22:1e:ee:ff:8b:b4:d0:19:da:bf:22:7c:a6:e8: 19:da:32:53:f0:e0:b5:76:1e:43:02:83:99:22:db: 60:aa:cf:37:79:eb:0e:79:d0:ba:72:f4:2a:80:97: f8:9e:9e:e3:0a:37:c0:16:75:55:5a:9b:38:8f:68: 56:3a:fa:36:cd:0a:98:a7:4c:44:6b:4b:5b:b1:e9: 2a:1d:13:50:89:25:df:47:67:3b:a4:f3:1a:0f:be: 4b:b5:b4:6e:88:c6:b4:83:40:10:d4:84:44:fb:d8: ae:57:ae:63:1f:9f:a4:9f:15:59:5f:9a:f9:ac:2f: 2e:cd:99:92:12:95:33:9a:ae:b5:6d:70:52:9e:d8: 41:5c:2e:ea:08:af:a3:4f:a9:3d:13:d4:fc:c9:5c: 55:8b:66:fd:fc:a0:56:88:7b:b1:b6:1d:25:dd:cf: 5a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A2:4D:0F:2B:DC:C9:9E:22:86:DF:37:77:A1:A1:B4:28:FA:B6:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c36a5699-94a7-34ab-a7ee-423f56176074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:18:4b:59:b9:c8:7e:40:5a:83:cf:2a:d0:f1:c8:5c:0a:0c: 5e:6f:50:e0:39:31:29:42:6a:19:a2:7a:8b:fc:c6:89:03:64: 90:01:6d:fe:4f:cb:f5:19:d9:e9:72:46:cf:36:da:27:5e:e4: ab:6d:fc:65:ca:6b:89:28:55:ed:c4:f3:1e:2e:d2:1a:95:c4: 57:92:c3:1b:06:f0:0f:e4:7d:34:4f:cb:d5:fa:06:e0:72:26: 6a:4e:ff:fd:b3:23:5b:81:2e:76:85:2d:9a:ed:39:49:d6:6b: b8:24:65:5a:1b:e2:d0:a8:3e:74:61:ee:97:67:8e:68:96:a6: 61:5e:8e:c2:c8:f5:68:f5:ae:ed:d8:41:c9:d8:53:b7:e4:80: 2f:38:e1:c6:49:82:91:96:41:c0:78:4e:bc:07:2e:25:b1:06: 75:98:60:08:78:ca:69:87:16:d1:4d:3d:75:b7:45:98:77:57: d2:84:44:b7:32:2d:6c:76:ec:f0:c5:bb:76:4e:2e:f0:41:ae: 53:a3:99:bb:7f:50:72:cb:90:f2:85:14:db:61:8a:67:b7:03: 9b:44:97:d0:46:a4:b1:bd:bf:67:c4:27:48:cf:3c:51:2d:fb: 9b:3d:46:df:58:b8:03:25:d8:80:4f:94:49:a3:5c:6e:40:c4: 06:b6:0c:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdahb2CqBb0WpGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0Mjg0MloXDTI2MDYwODE0Mjg0MlowLzEtMCsGA1UEAxMk MTdmZjdkMzktYzQ4Ni00NjU3LWE2OTktNTI1NDUzZDVlYzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTuMeAsPCYh4RBEYtuCjxsStxRySV4IkQ6cL rp51QN6Wv7V/j9jywGLxXVZf+EB2FULRtsyp7fmq7NRyBLilWeKM1/ux2yAEUscv bSCfnQM2HvAJgBkdieFWIh7u/4u00BnavyJ8pugZ2jJT8OC1dh5DAoOZIttgqs83 eesOedC6cvQqgJf4np7jCjfAFnVVWps4j2hWOvo2zQqYp0xEa0tbsekqHRNQiSXf R2c7pPMaD75LtbRuiMa0g0AQ1IRE+9iuV65jH5+knxVZX5r5rC8uzZmSEpUzmq61 bXBSnthBXC7qCK+jT6k9E9T8yVxVi2b9/KBWiHuxth0l3c9aDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFISiTQ8r3MmeIobfN3ehobQo+rYrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzM2YTU2OTktOTRhNy0z NGFiLWE3ZWUtNDIzZjU2MTc2MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKAYS1m5yH5AWoPPKtDxyFwKDF5vUOA5MSlCahmieov8xokDZJAB bf5Py/UZ2elyRs822ide5Ktt/GXKa4koVe3E8x4u0hqVxFeSwxsG8A/kfTRPy9X6 BuByJmpO//2zI1uBLnaFLZrtOUnWa7gkZVob4tCoPnRh7pdnjmiWpmFejsLI9Wj1 ru3YQcnYU7fkgC844cZJgpGWQcB4TrwHLiWxBnWYYAh4ymmHFtFNPXW3RZh3V9KE RLcyLWx27PDFu3ZOLvBBrlOjmbt/UHLLkPKFFNthime3A5tEl9BGpLG9v2fEJ0jP PFEt+5s9Rt9YuAMl2IBPlEmjXG5AxAa2DGk= -----END CERTIFICATE-----Generated at Thu Mar 26 19:35:05 2026 by rpki-client