$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c656b291-184a-36e5-a6a0-d6468df294bd.roa File: c656b291-184a-36e5-a6a0-d6468df294bd.roa (raw, json) Hash identifier: H9awUboawQnRxlhFZlegvUItrCrruOgUnRpHVU4o3Jg= Subject key identifier: 6B:B8:66:E5:FB:7F:BD:0D:D7:8B:5F:B6:62:BA:A2:65:FD:77:E9:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A7DCFA561F552461AF00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c656b291-184a-36e5-a6a0-d6468df294bd.roa Signing time: Tue 10 Mar 2026 14:28:42 +0000 ROA not before: Tue 10 Mar 2026 14:28:42 +0000 ROA not after: Mon 08 Jun 2026 14:28:42 +0000 asID: 396560 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a7:dc:fa:56:1f:55:24:61:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:42 2026 GMT Not After : Jun 8 14:28:42 2026 GMT Subject: CN=99afcd59-853e-4d1b-8ac6-45008fdc8791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d0:9d:06:30:cf:c7:7e:2d:f2:27:19:5a:e9: 20:b1:d2:8c:25:39:eb:a7:62:fb:28:71:56:be:fe: c9:67:a8:e5:74:45:34:63:22:cd:ea:cc:72:4a:23: b8:e5:5c:eb:3c:c5:6f:27:68:ec:be:46:13:9c:e0: ad:ab:06:6a:62:82:3e:be:e1:e4:1a:ae:61:d5:13: 78:32:6a:19:5d:d9:3a:0b:70:cf:ab:43:7e:77:e3: 31:6a:08:31:ca:a4:99:be:06:0c:aa:b5:27:31:af: c6:b9:80:61:47:c0:9f:50:5f:79:66:9c:8e:06:47: d1:df:58:f8:f2:ad:1b:2e:d9:f4:ac:f3:de:6b:5e: c1:8a:37:6b:89:27:ed:eb:a2:df:b5:22:5a:23:37: d5:e2:d4:db:a1:cb:fe:96:8d:ce:4b:79:e2:21:27: 88:85:8f:3a:cd:b8:81:ce:7d:80:39:15:50:bc:5b: 77:e4:bc:dc:72:62:e2:cb:50:59:7d:a9:e7:f1:33: 25:52:94:f9:90:1d:41:c7:06:ff:fe:f5:90:17:f1: 36:4e:c5:cb:1b:6e:e0:a1:37:35:5a:57:98:75:bd: a9:8f:46:7e:21:20:5d:2c:75:20:a4:4d:18:23:a1: 54:15:d1:01:dd:76:0b:cd:f4:a7:b5:7c:c5:f1:62: bf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B8:66:E5:FB:7F:BD:0D:D7:8B:5F:B6:62:BA:A2:65:FD:77:E9:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c656b291-184a-36e5-a6a0-d6468df294bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:63:eb:1a:36:c6:f8:7d:b8:09:47:df:5f:2c:84:e2:58:42: 6a:3d:b1:aa:26:14:11:c2:bb:32:dd:09:0f:60:9f:a1:7f:7c: 97:11:bc:92:56:b9:d3:ca:97:46:00:d4:a7:48:9f:42:ae:60: 5b:b0:87:15:34:eb:9c:b1:b1:b0:0b:1e:88:1a:38:1a:60:a2: bd:69:17:a6:58:9b:73:e2:c9:c8:1c:ca:1b:d4:d6:16:ec:f4: e3:6e:15:9b:54:3c:47:ab:5e:b5:53:5d:87:79:db:d2:94:41: 23:bc:d7:57:db:a4:c7:74:67:04:ce:3f:1a:87:87:47:cc:df: 34:9c:c1:3f:f3:1c:70:d7:af:fe:c6:2f:31:81:98:2c:f1:67: fd:ed:26:d4:cc:50:a7:99:7e:81:10:ce:af:7a:0f:ae:0b:2a: 98:90:43:a8:d2:60:0a:50:29:3c:d7:67:8d:e4:7d:de:ed:8e: 81:58:c1:40:6e:2d:ad:db:a0:d2:52:6b:8a:dd:d3:b9:66:04: 0d:e2:9c:39:5d:39:d4:e1:a5:2a:43:35:86:87:e1:62:c0:d2: 5c:b1:27:b0:10:84:a4:2c:6e:0a:e6:fe:d4:49:66:98:38:80: 52:3a:6d:27:0b:4c:96:7a:fa:9e:e6:de:cd:5f:98:02:74:17: b6:a8:6b:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdafc+lYfVSRhrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0Mjg0MloXDTI2MDYwODE0Mjg0MlowLzEtMCsGA1UEAxMk OTlhZmNkNTktODUzZS00ZDFiLThhYzYtNDUwMDhmZGM4NzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tCdBjDPx34t8icZWukgsdKMJTnrp2L7KHFW vv7JZ6jldEU0YyLN6sxySiO45VzrPMVvJ2jsvkYTnOCtqwZqYoI+vuHkGq5h1RN4 MmoZXdk6C3DPq0N+d+MxaggxyqSZvgYMqrUnMa/GuYBhR8CfUF95ZpyOBkfR31j4 8q0bLtn0rPPea17BijdriSft66LftSJaIzfV4tTbocv+lo3OS3niISeIhY86zbiB zn2AORVQvFt35LzccmLiy1BZfann8TMlUpT5kB1Bxwb//vWQF/E2TsXLG27goTc1 WleYdb2pj0Z+ISBdLHUgpE0YI6FUFdEB3XYLzfSntXzF8WK/CQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGu4ZuX7f70N14tftmK6omX9d+mRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzY1NmIyOTEtMTg0YS0z NmU1LWE2YTAtZDY0NjhkZjI5NGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACRj6xo2xvh9uAlH318shOJYQmo9saomFBHCuzLdCQ9gn6F/fJcR vJJWudPKl0YA1KdIn0KuYFuwhxU065yxsbALHogaOBpgor1pF6ZYm3PiycgcyhvU 1hbs9ONuFZtUPEerXrVTXYd529KUQSO811fbpMd0ZwTOPxqHh0fM3zScwT/zHHDX r/7GLzGBmCzxZ/3tJtTMUKeZfoEQzq96D64LKpiQQ6jSYApQKTzXZ43kfd7tjoFY wUBuLa3boNJSa4rd07lmBA3inDldOdThpSpDNYaH4WLA0lyxJ7AQhKQsbgrm/tRJ Zpg4gFI6bScLTJZ6+p7m3s1fmAJ0F7aoazk= -----END CERTIFICATE-----Generated at Thu Mar 26 08:38:28 2026 by rpki-client