$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c71a22ff-9a03-3bd7-888d-4be6812e6d4f.roa File: c71a22ff-9a03-3bd7-888d-4be6812e6d4f.roa (raw, json) Hash identifier: gZuzsBkiPqust1bETz7U3of2c/0960bNXmlI7W8+OOg= Subject key identifier: 20:4C:A4:00:DB:7C:23:69:A4:BA:C3:25:C6:93:E8:BC:27:3C:B6:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C0361D1E9EC42818E796080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c71a22ff-9a03-3bd7-888d-4be6812e6d4f.roa Signing time: Tue 03 Mar 2026 15:18:05 +0000 ROA not before: Tue 03 Mar 2026 15:18:05 +0000 ROA not after: Mon 01 Jun 2026 14:18:05 +0000 asID: 36630 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:61:d1:e9:ec:42:81:8e:79:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:05 2026 GMT Not After : Jun 1 14:18:05 2026 GMT Subject: CN=ba567990-f1cb-4c99-97c0-5fe31f606d03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:01:c2:93:4d:bd:ac:13:f0:fc:23:9d:a0:91: 81:e7:83:0d:e0:19:52:fd:03:2f:8b:2e:a0:d7:e1: e4:85:d0:f0:a2:e5:72:a1:fc:29:1d:88:d4:78:52: 03:af:f7:7e:36:89:c4:4f:a5:c7:07:7f:cf:a2:c2: af:e1:8c:b8:4b:79:26:d7:18:af:99:90:6f:25:0d: 10:ae:c3:5f:d5:11:4b:6c:ff:0b:18:c7:1b:9d:de: ca:23:23:58:3b:b7:27:50:ee:f5:9e:02:f3:60:94: 66:65:f0:a3:45:95:96:ec:37:10:1b:36:2d:24:51: 74:30:a9:7c:d9:e9:0a:bc:77:59:65:52:5c:45:17: ab:ec:53:4c:c0:be:35:ae:29:a9:6a:50:20:0e:4a: 19:a9:68:fc:bf:64:5d:89:84:58:0f:4a:a1:0c:90: e1:d4:9d:71:c8:f7:a9:5d:3e:c3:1e:f8:49:a7:9e: dd:35:9b:40:7b:f8:84:2e:53:82:42:e8:d0:55:1c: 96:38:2a:2d:4c:20:c3:dd:98:23:2b:7c:f8:77:c2: f7:6c:98:dd:6f:5c:d7:2c:fd:f7:bb:dc:b4:70:58: f4:b1:b1:7c:61:ad:66:ec:eb:52:43:2a:0b:16:b0: 2a:d3:d3:cb:09:c9:25:c1:c0:2b:5e:18:2b:ad:f6: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4C:A4:00:DB:7C:23:69:A4:BA:C3:25:C6:93:E8:BC:27:3C:B6:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c71a22ff-9a03-3bd7-888d-4be6812e6d4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:32:c7:0a:60:df:a0:d1:3e:fb:a1:4f:5e:32:ab:34:51:21: 5e:a6:2f:9c:1c:43:75:24:54:80:6a:0a:45:38:94:01:fd:41: 95:3f:eb:1d:80:b5:d9:bc:43:7c:5e:ee:a0:62:fb:bb:28:d4: 08:b7:3f:d8:cd:52:b2:14:9a:99:5e:2d:eb:6d:6d:47:2e:9d: 6e:61:b6:93:b4:18:0c:3d:86:ad:29:0c:94:a9:41:f9:67:10: 18:71:16:78:e3:ec:f5:2a:fa:eb:ef:3b:7e:4c:7f:85:a7:e1: e4:de:55:ef:b9:8b:0d:6b:fc:cb:ec:6b:93:88:49:7a:aa:e2: 7d:1c:37:cf:1a:ed:64:63:56:3b:a2:28:4f:02:5b:6c:e6:50: 10:18:ca:18:85:a1:76:4c:36:6a:45:85:53:d7:53:11:9e:66: 91:55:08:ad:cc:b3:f9:00:e4:5a:b3:65:15:54:04:49:3b:11: 73:e5:fc:be:84:92:5a:92:33:4a:fa:54:8d:bb:5f:c5:cf:63: ab:db:e9:e6:8e:71:91:ea:ad:7a:6f:d6:65:f3:76:8d:27:34: ec:0a:1f:40:69:fd:e0:56:c8:c3:e9:11:f8:aa:97:2f:14:20: 15:02:d7:1e:24:2e:da:68:02:aa:cd:38:c0:42:d5:a0:21:9d: e8:bd:cc:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2HR6exCgY55YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwNVoXDTI2MDYwMTE0MTgwNVowLzEtMCsGA1UEAxMk YmE1Njc5OTAtZjFjYi00Yzk5LTk3YzAtNWZlMzFmNjA2ZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gHCk029rBPw/COdoJGB54MN4BlS/QMviy6g 1+HkhdDwouVyofwpHYjUeFIDr/d+NonET6XHB3/PosKv4Yy4S3km1xivmZBvJQ0Q rsNf1RFLbP8LGMcbnd7KIyNYO7cnUO71ngLzYJRmZfCjRZWW7DcQGzYtJFF0MKl8 2ekKvHdZZVJcRRer7FNMwL41rimpalAgDkoZqWj8v2RdiYRYD0qhDJDh1J1xyPep XT7DHvhJp57dNZtAe/iELlOCQujQVRyWOCotTCDD3ZgjK3z4d8L3bJjdb1zXLP33 u9y0cFj0sbF8Ya1m7OtSQyoLFrAq09PLCcklwcArXhgrrfY13wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCBMpADbfCNppLrDJcaT6LwnPLbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzcxYTIyZmYtOWEwMy0z YmQ3LTg4OGQtNGJlNjgxMmU2ZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHwyxwpg36DRPvuhT14yqzRRIV6mL5wcQ3UkVIBqCkU4lAH9QZU/ 6x2Atdm8Q3xe7qBi+7so1Ai3P9jNUrIUmpleLettbUcunW5htpO0GAw9hq0pDJSp QflnEBhxFnjj7PUq+uvvO35Mf4Wn4eTeVe+5iw1r/Mvsa5OISXqq4n0cN88a7WRj VjuiKE8CW2zmUBAYyhiFoXZMNmpFhVPXUxGeZpFVCK3Ms/kA5FqzZRVUBEk7EXPl /L6EklqSM0r6VI27X8XPY6vb6eaOcZHqrXpv1mXzdo0nNOwKH0Bp/eBWyMPpEfiq ly8UIBUC1x4kLtpoAqrNOMBC1aAhnei9zPc= -----END CERTIFICATE-----Generated at Thu Mar 26 14:00:58 2026 by rpki-client