$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7edf51-994b-3739-bf8a-595cd16f5333.roa File: cb7edf51-994b-3739-bf8a-595cd16f5333.roa (raw, json) Hash identifier: YI2n50I5vkMiZ484wNErG7FYZu49ONC8U7XPbjuielU= Subject key identifier: F4:BC:51:35:94:3E:41:29:B2:4E:32:DC:BE:84:65:9A:F8:7A:F3:51 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2644D0F06F12528007E68E20 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7edf51-994b-3739-bf8a-595cd16f5333.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 397207 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:d0:f0:6f:12:52:80:07:e6:8e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=02c386d1-3caf-4b67-9066-23823656c547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cb:1b:fb:15:2d:f4:a8:0f:9c:80:e6:17:d5: 13:5e:f3:83:c3:96:f1:b4:95:d8:4f:e8:47:c6:fb: 77:8f:51:fc:c9:a4:24:4a:8d:4d:0c:d9:44:23:18: 77:7a:8d:d8:c4:3d:12:c6:71:6f:dd:cc:4b:de:39: 2d:59:3d:26:c0:6a:26:72:5e:97:70:ad:72:e9:9e: 2c:f4:fe:e3:71:e1:c5:5f:5d:7f:58:0e:80:8e:36: 37:97:82:0f:01:29:95:34:b3:3b:3c:d2:2b:39:ed: e4:db:31:0f:1f:74:1f:63:d0:25:a1:ef:93:09:ff: bc:61:73:55:dc:2f:37:3a:ba:83:b9:95:e3:67:56: 73:b3:8d:40:a4:eb:f6:43:6a:22:28:f7:6b:cf:f0: bf:bb:87:ef:6f:ca:81:88:9c:c1:09:2c:26:4e:e6: 12:17:a1:ae:54:cb:1b:2f:a2:b5:61:36:b4:53:87: a4:18:49:0c:18:13:0c:71:72:91:4d:61:ef:01:ef: 7e:33:71:b2:76:b3:ae:69:53:8e:22:1f:ae:69:16: 47:70:80:19:e2:f4:ac:50:62:58:37:2b:ea:b6:2f: e1:4e:8c:99:eb:ce:aa:4d:4b:f0:72:56:04:c8:9f: 90:52:49:13:d6:4e:b0:d3:72:8d:f6:9b:f3:21:57: e2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BC:51:35:94:3E:41:29:B2:4E:32:DC:BE:84:65:9A:F8:7A:F3:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb7edf51-994b-3739-bf8a-595cd16f5333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:14:35:f9:e7:89:2a:03:21:89:75:8f:e1:b5:e6:0e:04:6f: 2b:a2:89:cf:84:e6:2b:b8:2f:ce:6b:82:59:db:88:f1:e4:68: 15:20:e3:6f:04:5d:07:e7:a2:42:9b:b1:5e:42:74:55:07:67: 54:f8:8a:3c:77:cc:e3:6a:c7:f4:62:cf:36:07:26:12:5d:8e: e7:7a:a6:6f:3b:03:ff:f2:37:ca:8e:08:1e:84:5d:34:5f:d0: 4a:0c:be:33:bd:7a:15:58:24:a8:13:94:43:48:47:e8:cc:38: af:00:d7:27:f4:83:51:6d:09:5c:0a:5e:51:c8:b6:45:0c:cd: 0c:20:72:63:e2:58:47:40:d0:96:54:c1:4a:83:57:9a:75:1a: 7f:c5:82:43:8c:c3:df:3e:da:7b:c5:03:73:d5:3d:b7:c2:02: e7:ab:1b:ba:f6:45:a6:9d:73:a4:b5:c1:b2:26:cd:7d:0e:65: c3:83:25:64:aa:ad:cf:6a:79:ed:0f:f9:63:3e:11:ff:20:4b: 05:4f:b1:3c:1f:e9:71:40:4f:32:37:70:69:48:83:8c:cc:a5: 09:ec:a3:54:31:15:22:a7:02:b7:8f:b8:79:71:60:f5:59:e3: af:fb:d2:36:c8:3c:43:a7:b7:f8:15:05:dd:18:16:64:b9:bb: ba:ea:1c:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRNDwbxJSgAfmjiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk MDJjMzg2ZDEtM2NhZi00YjY3LTkwNjYtMjM4MjM2NTZjNTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Msb+xUt9KgPnIDmF9UTXvODw5bxtJXYT+hH xvt3j1H8yaQkSo1NDNlEIxh3eo3YxD0SxnFv3cxL3jktWT0mwGomcl6XcK1y6Z4s 9P7jceHFX11/WA6AjjY3l4IPASmVNLM7PNIrOe3k2zEPH3QfY9Aloe+TCf+8YXNV 3C83OrqDuZXjZ1Zzs41ApOv2Q2oiKPdrz/C/u4fvb8qBiJzBCSwmTuYSF6GuVMsb L6K1YTa0U4ekGEkMGBMMcXKRTWHvAe9+M3GydrOuaVOOIh+uaRZHcIAZ4vSsUGJY Nyvqti/hToyZ686qTUvwclYEyJ+QUkkT1k6w03KN9pvzIVfilQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPS8UTWUPkEpsk4y3L6EZZr4evNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2I3ZWRmNTEtOTk0Yi0z NzM5LWJmOGEtNTk1Y2QxNmY1MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABQUNfnniSoDIYl1j+G15g4Ebyuiic+E5iu4L85rglnbiPHkaBUg 428EXQfnokKbsV5CdFUHZ1T4ijx3zONqx/RizzYHJhJdjud6pm87A//yN8qOCB6E XTRf0EoMvjO9ehVYJKgTlENIR+jMOK8A1yf0g1FtCVwKXlHItkUMzQwgcmPiWEdA 0JZUwUqDV5p1Gn/FgkOMw98+2nvFA3PVPbfCAuerG7r2Raadc6S1wbImzX0OZcOD JWSqrc9qee0P+WM+Ef8gSwVPsTwf6XFATzI3cGlIg4zMpQnso1QxFSKnArePuHlx YPVZ46/70jbIPEOnt/gVBd0YFmS5u7rqHDk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:43:27 2026 by rpki-client