$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d21bd2f9-6863-30cc-a362-c3b2a0221200.roa File: d21bd2f9-6863-30cc-a362-c3b2a0221200.roa (raw, json) Hash identifier: zJvj97CXQ/BWVmH2LsrYPo1rgJzi8ezivmV9sZ23r7M= Subject key identifier: D5:90:4B:B4:9E:5B:D5:F5:F2:52:5C:29:97:45:E7:55:93:F8:4E:EE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759B9B47EE5C876EB73F40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d21bd2f9-6863-30cc-a362-c3b2a0221200.roa Signing time: Tue 10 Mar 2026 14:28:36 +0000 ROA not before: Tue 10 Mar 2026 14:28:36 +0000 ROA not after: Mon 08 Jun 2026 14:28:36 +0000 asID: 397208 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9b:9b:47:ee:5c:87:6e:b7:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:36 2026 GMT Not After : Jun 8 14:28:36 2026 GMT Subject: CN=0e33050a-8663-4c54-8804-db70446b3d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a8:4f:fe:58:75:e5:c5:b2:fc:f9:51:e7:b1: 94:dc:8d:48:f3:3f:5b:62:4e:1c:7b:ac:79:ad:22: 0f:de:1f:c6:14:d9:9b:d7:1b:7d:da:ef:72:8a:08: c0:94:74:31:c2:c4:8c:63:90:f6:14:17:45:93:57: 58:35:49:9b:46:e7:90:39:5b:c0:28:bf:13:b9:0e: 67:ec:ed:11:22:5c:c3:b5:ab:9a:10:38:87:27:b0: 19:50:40:6d:62:73:2c:c7:dd:6d:3b:1d:43:f3:5f: ad:0b:46:49:1e:9c:1d:74:e0:fd:ad:cd:f3:3f:f9: da:52:fc:6f:cb:64:d5:75:cd:09:67:69:0e:7c:74: 74:a9:5c:58:2a:28:5b:21:77:97:b6:1a:03:91:f3: e9:b1:cb:fb:6c:b6:9a:f6:a9:23:30:a9:d7:f3:77: b8:f7:2b:f6:03:7b:dd:2b:e1:44:ce:7c:7e:63:59: 4a:e5:bb:da:d7:e0:a6:11:4b:2f:7b:0b:b6:4a:09: 6b:ac:e7:31:b8:6f:59:be:a5:16:3c:a1:71:9b:9e: 04:22:b4:cb:5e:13:05:ac:81:c0:50:8b:ff:d0:25: 60:5e:4f:1d:4b:7f:2c:55:c0:76:3d:72:5b:f1:1a: 94:c5:25:74:ff:d6:a1:02:a8:4b:08:5b:53:d3:62: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:90:4B:B4:9E:5B:D5:F5:F2:52:5C:29:97:45:E7:55:93:F8:4E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d21bd2f9-6863-30cc-a362-c3b2a0221200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:5f:6c:e6:ef:7a:9c:2c:05:67:91:58:01:a5:4d:19:0f:e1: 50:f1:0f:e4:3d:89:ad:58:d5:47:07:71:39:a2:b6:61:cd:5b: a9:42:61:bd:67:40:c3:33:7a:b8:3e:85:90:73:5d:a6:dc:f7: 02:3a:d0:fc:c0:fc:8d:29:49:e4:ae:e4:c8:0a:6e:8d:4e:d0: 3f:09:b4:4f:9b:5b:42:0a:57:32:f9:e6:34:6e:87:fb:d2:50: 96:97:b8:92:52:4f:cd:25:85:9e:10:7c:28:67:06:01:e4:70: b6:5b:85:40:a2:ea:c4:d7:66:cb:51:2c:87:d1:10:10:ff:e5: c0:b4:84:3f:95:b8:c4:d3:a7:c6:a7:53:cc:5d:52:61:41:8b: 65:4f:ab:2a:97:c4:fb:23:f1:b9:bd:03:3a:40:41:08:4b:80: c7:f1:48:2b:f8:28:02:33:3a:3d:0a:76:f6:b5:d0:c1:d5:a6: 13:17:0b:06:35:2a:d0:35:a8:de:32:81:6f:38:d1:27:31:ee: fc:85:59:da:95:f9:e1:6a:c0:7d:4d:44:23:f4:34:7e:4a:1c: 62:f1:6a:2c:64:98:0d:e6:ec:b5:d0:35:60:c3:f0:61:9b:1a: e3:91:b9:2d:34:db:fd:46:9d:27:36:39:16:d4:3f:84:5b:86: 92:2f:47:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZubR+5ch263P0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzNloXDTI2MDYwODE0MjgzNlowLzEtMCsGA1UEAxMk MGUzMzA1MGEtODY2My00YzU0LTg4MDQtZGI3MDQ0NmIzZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16hP/lh15cWy/PlR57GU3I1I8z9bYk4ce6x5 rSIP3h/GFNmb1xt92u9yigjAlHQxwsSMY5D2FBdFk1dYNUmbRueQOVvAKL8TuQ5n 7O0RIlzDtauaEDiHJ7AZUEBtYnMsx91tOx1D81+tC0ZJHpwddOD9rc3zP/naUvxv y2TVdc0JZ2kOfHR0qVxYKihbIXeXthoDkfPpscv7bLaa9qkjMKnX83e49yv2A3vd K+FEznx+Y1lK5bva1+CmEUsvewu2SglrrOcxuG9ZvqUWPKFxm54EIrTLXhMFrIHA UIv/0CVgXk8dS38sVcB2PXJb8RqUxSV0/9ahAqhLCFtT02I+4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNWQS7SeW9X18lJcKZdF51WT+E7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDIxYmQyZjktNjg2My0z MGNjLWEzNjItYzNiMmEwMjIxMjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAExfbObvepwsBWeRWAGlTRkP4VDxD+Q9ia1Y1UcHcTmitmHNW6lC Yb1nQMMzerg+hZBzXabc9wI60PzA/I0pSeSu5MgKbo1O0D8JtE+bW0IKVzL55jRu h/vSUJaXuJJST80lhZ4QfChnBgHkcLZbhUCi6sTXZstRLIfREBD/5cC0hD+VuMTT p8anU8xdUmFBi2VPqyqXxPsj8bm9AzpAQQhLgMfxSCv4KAIzOj0Kdva10MHVphMX CwY1KtA1qN4ygW840Scx7vyFWdqV+eFqwH1NRCP0NH5KHGLxaixkmA3m7LXQNWDD 8GGbGuORuS002/1GnSc2ORbUP4RbhpIvR3k= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:18 2026 by rpki-client