$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd658df1-dd22-3866-adeb-406f9d24fe7c.roa File: cd658df1-dd22-3866-adeb-406f9d24fe7c.roa (raw, json) Hash identifier: ijB+D7f6hFuQJ6hGwIR1IPq1St/oEYJa3XHlht0Z2XQ= Subject key identifier: 34:05:9E:01:6C:CD:E7:D5:2F:51:E1:1B:AB:BA:DD:EE:5D:A8:22:3A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D386A64354938B89DB371D5A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd658df1-dd22-3866-adeb-406f9d24fe7c.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 396571 IP address blocks: 2001:500:127::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:64:35:49:38:b8:9d:b3:71:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=b7d712ac-df88-4083-9847-be22a731d04d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8c:17:7e:b3:76:2c:e5:00:ae:27:51:f5:80: 66:f3:e4:61:f1:05:17:a9:4c:a3:7b:2d:0e:5b:ab: 2e:e8:12:38:aa:9d:a9:1a:37:35:3e:3e:41:88:12: af:87:f8:75:be:27:5c:2c:53:46:b3:80:03:be:e8: d2:fa:ff:38:78:9c:c7:a3:68:33:27:7f:82:8b:b0: 1b:98:9d:a7:c4:b0:a3:60:aa:4d:3e:f4:8b:12:ce: 01:0c:7e:f7:31:f2:a4:eb:a9:3f:dc:e3:af:21:c4: c1:75:48:c8:88:05:63:08:4d:f1:0f:da:7e:47:b6: a6:36:cc:60:43:e2:a7:5c:83:4f:41:3f:17:11:86: ae:9c:a6:bc:83:2e:75:f2:00:cc:ae:c7:4b:4e:97: 54:3b:ae:6a:f9:96:92:98:69:2e:41:d1:a2:68:87: e2:f6:df:ee:4f:e0:68:f1:6f:a3:08:bd:da:ca:54: db:5a:fe:4c:ad:23:f2:d0:b6:e5:a8:05:01:75:cb: 68:e8:25:8c:f9:a3:c0:e6:45:df:dc:6d:ff:50:63: 2f:69:92:33:6e:a9:8e:57:49:63:03:74:5c:ee:67: d6:26:f8:c0:b5:57:8b:8f:c4:66:14:63:9c:d5:8d: ab:42:49:0f:cb:00:5c:0c:f5:8d:a9:3e:56:25:64: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:05:9E:01:6C:CD:E7:D5:2F:51:E1:1B:AB:BA:DD:EE:5D:A8:22:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cd658df1-dd22-3866-adeb-406f9d24fe7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:127::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:39:20:f0:fb:98:c9:fc:64:ed:33:db:02:6e:37:6a:d1:4f: 5f:16:2b:3c:ba:54:60:d1:ce:b6:65:19:e6:f3:75:21:d3:3c: c2:72:52:46:1d:87:61:d6:91:24:2b:50:cf:9f:ab:ab:e6:43: 3c:c2:4c:e9:be:02:b4:ce:2a:2d:f2:5b:8f:e6:27:b3:07:1d: 31:07:38:a1:b9:c5:3b:6b:cd:21:37:b4:23:29:28:79:62:59: a5:a8:36:61:ae:1f:d9:2c:4f:49:9d:47:05:2c:1c:95:be:3b: 01:42:4a:52:7b:f2:a6:f1:e6:47:22:73:37:50:91:54:cd:07: 94:cb:d7:d7:c8:4f:6c:34:9f:62:da:fe:c1:6c:be:82:ed:38: 51:e2:00:cb:74:22:cf:6d:dd:d7:c4:f9:e5:15:85:64:b1:52: ac:08:18:2e:3f:66:63:09:49:65:2b:98:e1:8a:13:f2:09:98: 51:01:db:54:86:13:bb:c9:c3:02:57:65:2d:ff:5d:f4:50:ed: cf:b5:50:13:aa:1f:9e:b6:47:16:7e:ca:f0:4b:a5:03:dd:82: a7:77:59:31:4f:f0:b3:22:90:eb:be:27:cc:58:90:65:eb:47: f4:9a:70:95:3c:86:68:f3:84:93:53:35:48:64:e8:84:35:bd: 99:40:13:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04amQ1STi4nbNx1aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YjdkNzEyYWMtZGY4OC00MDgzLTk4NDctYmUyMmE3MzFkMDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYwXfrN2LOUAridR9YBm8+Rh8QUXqUyjey0O W6su6BI4qp2pGjc1Pj5BiBKvh/h1vidcLFNGs4ADvujS+v84eJzHo2gzJ3+Ci7Ab mJ2nxLCjYKpNPvSLEs4BDH73MfKk66k/3OOvIcTBdUjIiAVjCE3xD9p+R7amNsxg Q+KnXINPQT8XEYaunKa8gy518gDMrsdLTpdUO65q+ZaSmGkuQdGiaIfi9t/uT+Bo 8W+jCL3aylTbWv5MrSPy0LblqAUBdcto6CWM+aPA5kXf3G3/UGMvaZIzbqmOV0lj A3Rc7mfWJvjAtVeLj8RmFGOc1Y2rQkkPywBcDPWNqT5WJWSj4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDQFngFszefVL1HhG6u63e5dqCI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Q2NThkZjEtZGQyMi0z ODY2LWFkZWItNDA2ZjlkMjRmZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGo5IPD7mMn8ZO0z2wJuN2rRT18WKzy6VGDRzrZlGebzdSHTPMJy UkYdh2HWkSQrUM+fq6vmQzzCTOm+ArTOKi3yW4/mJ7MHHTEHOKG5xTtrzSE3tCMp KHliWaWoNmGuH9ksT0mdRwUsHJW+OwFCSlJ78qbx5kciczdQkVTNB5TL19fIT2w0 n2La/sFsvoLtOFHiAMt0Is9t3dfE+eUVhWSxUqwIGC4/ZmMJSWUrmOGKE/IJmFEB 21SGE7vJwwJXZS3/XfRQ7c+1UBOqH562RxZ+yvBLpQPdgqd3WTFP8LMikOu+J8xY kGXrR/SacJU8hmjzhJNTNUhk6IQ1vZlAE7o= -----END CERTIFICATE-----Generated at Thu Mar 26 13:37:17 2026 by rpki-client