$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c957a86b-8dfb-3cab-8b39-32446e7be4e3.roa File: c957a86b-8dfb-3cab-8b39-32446e7be4e3.roa (raw, json) Hash identifier: CueIxcObSnS8YWtxt+NOaXBbLPmKT+hFKXEnP0hPx1o= Subject key identifier: BA:82:35:61:BD:06:39:03:2B:CF:4E:E1:83:D2:33:5A:30:71:86:A6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C036A2E180F4DF61CCBEC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c957a86b-8dfb-3cab-8b39-32446e7be4e3.roa Signing time: Tue 03 Mar 2026 15:18:09 +0000 ROA not before: Tue 03 Mar 2026 15:18:09 +0000 ROA not after: Mon 01 Jun 2026 14:18:09 +0000 asID: 10515 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:6a:2e:18:0f:4d:f6:1c:cb:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:09 2026 GMT Not After : Jun 1 14:18:09 2026 GMT Subject: CN=051ec1a2-8c35-44cd-be2d-885b9e0eb050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0f:87:2b:e6:88:0f:bb:e7:61:89:c0:c0:cf: 12:27:64:ef:15:3b:2f:ba:19:9a:aa:ae:58:9c:6f: e7:96:0a:89:57:10:f5:e2:31:ba:4d:bb:c4:67:27: f0:b7:aa:41:93:36:1d:8f:d3:4d:c5:25:ef:53:73: aa:ad:8d:8a:ba:c3:45:74:67:bb:3f:3f:ad:35:53: ab:9d:c2:b4:f1:88:d2:57:5e:d7:77:41:cd:e7:51: 16:2b:e0:61:39:bc:6c:07:d8:5b:29:c9:99:d2:5e: 42:8e:b9:16:ee:73:ea:de:89:8e:31:49:5a:2d:e6: 8b:05:44:c0:f4:9b:ef:ae:84:6b:18:16:11:26:c7: ea:4a:4c:7b:83:41:44:ac:f4:a2:38:96:0a:0c:bf: 6f:45:1a:11:2a:83:be:84:20:0a:83:d3:22:c7:0d: eb:ae:f7:99:16:af:41:53:ce:c8:c6:eb:34:db:04: a9:07:44:df:4c:36:27:b0:3e:ef:8c:ad:01:2d:dc: cd:66:8a:de:64:1c:ed:ee:6f:43:ad:98:6a:c5:49: c4:4c:07:cc:a7:2b:c8:ad:7b:83:95:a2:0b:d0:3c: dd:ea:36:39:90:27:9a:b5:45:12:54:e3:d7:35:c3: 81:e2:b8:da:27:d7:9e:e4:74:c9:1a:6a:f9:e5:8e: 41:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:82:35:61:BD:06:39:03:2B:CF:4E:E1:83:D2:33:5A:30:71:86:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c957a86b-8dfb-3cab-8b39-32446e7be4e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:0a:cf:25:4c:d2:19:52:69:b3:61:8f:65:22:52:75:fb:71: 42:76:04:90:6f:ca:38:4a:37:86:0c:42:29:c3:76:71:0f:4b: 39:a0:5f:80:bc:23:bf:b8:58:45:59:a8:78:19:62:0f:dd:c6: 20:db:5f:03:a5:64:37:64:eb:19:06:95:8e:5c:88:14:1e:de: 0f:7b:99:c4:e0:a9:3c:d3:56:27:e2:e7:2e:a3:c0:df:a0:d3: 64:96:6a:f0:45:36:e2:27:02:cb:90:d2:60:7c:d6:5e:c0:2e: 99:15:6d:7a:ab:d6:c1:c5:60:07:fd:f8:e6:e5:e9:64:e6:54: 9e:b4:c2:ff:e0:2d:db:c2:e3:58:f4:41:fb:c5:77:6d:30:7e: 3e:0f:b6:ec:55:ab:7b:1d:d4:89:52:9e:85:e7:71:da:8d:86: 59:c4:f2:a5:f7:03:4a:fb:f2:e2:ab:6f:b0:63:fd:76:7e:74: 68:4c:33:bb:0b:04:c2:d2:fc:b2:af:46:3e:46:e4:38:1f:9a: 5b:f3:3b:a1:b6:42:d4:d4:a5:ae:a3:eb:93:3d:b1:ce:ea:6d: 34:4f:1f:6f:ed:ee:a9:d9:ce:6a:d1:1a:ff:bc:1c:a3:8a:76: 8c:93:e8:3b:58:34:2f:a4:c0:6a:4f:39:2a:b0:41:76:8b:e3: b6:54:3c:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2ouGA9N9hzL7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwOVoXDTI2MDYwMTE0MTgwOVowLzEtMCsGA1UEAxMk MDUxZWMxYTItOGMzNS00NGNkLWJlMmQtODg1YjllMGViMDUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA+HK+aID7vnYYnAwM8SJ2TvFTsvuhmaqq5Y nG/nlgqJVxD14jG6TbvEZyfwt6pBkzYdj9NNxSXvU3OqrY2KusNFdGe7Pz+tNVOr ncK08YjSV17Xd0HN51EWK+BhObxsB9hbKcmZ0l5CjrkW7nPq3omOMUlaLeaLBUTA 9JvvroRrGBYRJsfqSkx7g0FErPSiOJYKDL9vRRoRKoO+hCAKg9Mixw3rrveZFq9B U87Ixus02wSpB0TfTDYnsD7vjK0BLdzNZoreZBzt7m9DrZhqxUnETAfMpyvIrXuD laIL0Dzd6jY5kCeatUUSVOPXNcOB4rjaJ9ee5HTJGmr55Y5BwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLqCNWG9BjkDK89O4YPSM1owcYamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzk1N2E4NmItOGRmYi0z Y2FiLThiMzktMzI0NDZlN2JlNGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA8KzyVM0hlSabNhj2UiUnX7cUJ2BJBvyjhKN4YMQinDdnEPSzmg X4C8I7+4WEVZqHgZYg/dxiDbXwOlZDdk6xkGlY5ciBQe3g97mcTgqTzTVifi5y6j wN+g02SWavBFNuInAsuQ0mB81l7ALpkVbXqr1sHFYAf9+Obl6WTmVJ60wv/gLdvC 41j0QfvFd20wfj4PtuxVq3sd1IlSnoXncdqNhlnE8qX3A0r78uKrb7Bj/XZ+dGhM M7sLBMLS/LKvRj5G5DgfmlvzO6G2QtTUpa6j65M9sc7qbTRPH2/t7qnZzmrRGv+8 HKOKdoyT6DtYNC+kwGpPOSqwQXaL47ZUPA0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:12:34 2026 by rpki-client