$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd513b2a-8798-31b1-a27e-3446bed80310.roa File: cd513b2a-8798-31b1-a27e-3446bed80310.roa (raw, json) Hash identifier: zZ/csfkXdLZEpkswNH3Ua3MQKM8b8JvdRHWsFNuJL0w= Subject key identifier: C5:75:34:15:C1:39:58:73:FA:E4:55:D7:01:19:6D:8A:E1:4F:54:C9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C03657767E4C52228726B00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd513b2a-8798-31b1-a27e-3446bed80310.roa Signing time: Tue 03 Mar 2026 15:18:07 +0000 ROA not before: Tue 03 Mar 2026 15:18:07 +0000 ROA not after: Mon 01 Jun 2026 14:18:07 +0000 asID: 21313 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:65:77:67:e4:c5:22:28:72:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:07 2026 GMT Not After : Jun 1 14:18:07 2026 GMT Subject: CN=bdbcbfd5-f57d-4050-8cd0-9e810bb3c443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:bd:5f:b7:ff:81:bc:36:0e:56:d0:10:47:cf: 49:e0:c6:d3:0f:37:a9:46:87:7d:79:e8:0c:7d:ff: 5f:36:4e:85:58:64:35:5c:26:af:62:e4:33:15:92: 41:73:f9:6c:58:f2:83:b0:ac:60:e8:d4:32:d3:3e: 21:8e:39:61:55:cb:93:45:dd:c7:61:60:2d:1f:80: 0a:c5:0a:d4:a5:cc:8c:e7:5e:8d:6b:9e:9c:ff:02: 92:f3:6a:3a:1e:fc:0c:1f:98:51:65:75:e0:b2:eb: e4:de:9f:1a:8d:f5:84:4b:e7:4e:79:7f:d0:bc:95: 46:25:52:7c:3e:17:cc:37:ce:67:c5:6e:60:af:6b: bd:5f:08:26:a2:3e:8d:ee:b4:05:c3:91:fc:3e:8f: ea:e4:3f:8f:87:6c:c4:ac:0b:3a:29:cc:b4:17:95: 3c:63:c4:11:a7:f5:74:af:19:25:c0:75:a1:e3:f8: 76:cc:07:3e:04:02:cb:13:42:12:51:64:a4:b5:76: 99:06:76:ee:75:12:1b:2e:c8:00:bb:d2:b8:d7:79: 5e:5a:be:73:c0:b2:b8:b7:cc:6a:52:68:d2:2b:23: 5b:48:7c:e2:0f:76:0e:ab:e8:53:3d:09:4d:21:cc: 81:36:32:59:56:8b:92:7a:bf:13:b7:99:a4:87:6a: 14:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:75:34:15:C1:39:58:73:FA:E4:55:D7:01:19:6D:8A:E1:4F:54:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd513b2a-8798-31b1-a27e-3446bed80310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:80:94:ee:f8:74:d3:7c:7b:83:d3:71:ab:e3:9b:6c:f1:7b: 82:23:de:90:51:27:22:6a:e6:3e:50:a1:99:4a:84:26:64:b9: 49:f9:0c:f5:b8:9e:03:19:2e:73:ee:af:48:e7:b6:ec:11:f1: 7c:5d:ba:57:6a:2e:db:f6:4e:06:d8:80:26:f0:5d:93:5f:7b: 07:32:9d:65:d5:d6:a4:12:70:e2:d1:48:7b:1e:41:ab:98:81: 9d:76:59:30:74:59:9d:15:b1:77:f1:6e:e8:ba:66:e3:35:60: e3:b5:b3:cd:5c:64:92:10:5b:9f:11:7c:b8:84:78:7f:3c:06: 3c:b1:60:ed:6a:28:52:bd:fd:67:69:f9:28:9d:d4:85:6e:12: ea:20:c4:ff:68:f3:51:b8:68:4a:02:53:2b:55:6c:fb:02:e1: d7:aa:06:8c:8c:28:3a:56:c1:84:d4:f5:67:28:3b:1c:a9:1c: 10:a2:50:f3:58:9d:23:00:cd:b8:d3:a7:18:20:50:d1:5c:ff: bc:2a:fc:fc:d3:55:25:2b:73:56:24:21:24:f0:2f:db:ed:32: 0f:63:e6:a4:30:b0:96:56:4b:9d:df:1d:46:c5:6f:bf:db:7f: 5f:0a:9f:6c:82:ae:64:16:b8:d8:30:95:c8:a4:4c:66:2f:6e: 7d:ca:ac:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2V3Z+TFIihyawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwN1oXDTI2MDYwMTE0MTgwN1owLzEtMCsGA1UEAxMk YmRiY2JmZDUtZjU3ZC00MDUwLThjZDAtOWU4MTBiYjNjNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr1ft/+BvDYOVtAQR89J4MbTDzepRod9eegM ff9fNk6FWGQ1XCavYuQzFZJBc/lsWPKDsKxg6NQy0z4hjjlhVcuTRd3HYWAtH4AK xQrUpcyM516Na56c/wKS82o6HvwMH5hRZXXgsuvk3p8ajfWES+dOeX/QvJVGJVJ8 PhfMN85nxW5gr2u9Xwgmoj6N7rQFw5H8Po/q5D+Ph2zErAs6Kcy0F5U8Y8QRp/V0 rxklwHWh4/h2zAc+BALLE0ISUWSktXaZBnbudRIbLsgAu9K413leWr5zwLK4t8xq UmjSKyNbSHziD3YOq+hTPQlNIcyBNjJZVouSer8Tt5mkh2oUjQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMV1NBXBOVhz+uRV1wEZbYrhT1TJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Q1MTNiMmEtODc5OC0z MWIxLWEyN2UtMzQ0NmJlZDgwMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF2AlO74dNN8e4PTcavjm2zxe4Ij3pBRJyJq5j5QoZlKhCZkuUn5 DPW4ngMZLnPur0jntuwR8XxduldqLtv2TgbYgCbwXZNfewcynWXV1qQScOLRSHse QauYgZ12WTB0WZ0VsXfxbui6ZuM1YOO1s81cZJIQW58RfLiEeH88BjyxYO1qKFK9 /Wdp+Sid1IVuEuogxP9o81G4aEoCUytVbPsC4deqBoyMKDpWwYTU9WcoOxypHBCi UPNYnSMAzbjTpxggUNFc/7wq/PzTVSUrc1YkISTwL9vtMg9j5qQwsJZWS53fHUbF b7/bf18Kn2yCrmQWuNgwlcikTGYvbn3KrJU= -----END CERTIFICATE-----Generated at Thu Mar 26 14:41:00 2026 by rpki-client