$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5462a9-42d9-33d3-b0b4-d5ebea5bb2bd.roa File: db5462a9-42d9-33d3-b0b4-d5ebea5bb2bd.roa (raw, json) Hash identifier: xCSOT5CAFli1YvY7uLRCwFITLWl3RqLfbHbRLfN33Xc= Subject key identifier: 77:49:82:93:0E:1F:A6:1B:4D:D7:FF:BD:98:7B:34:4C:68:2F:75:3C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C036B17BED8C2588D0A8700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5462a9-42d9-33d3-b0b4-d5ebea5bb2bd.roa Signing time: Tue 03 Mar 2026 15:18:10 +0000 ROA not before: Tue 03 Mar 2026 15:18:10 +0000 ROA not after: Mon 01 Jun 2026 14:18:10 +0000 asID: 397198 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:6b:17:be:d8:c2:58:8d:0a:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:10 2026 GMT Not After : Jun 1 14:18:10 2026 GMT Subject: CN=a8c834da-df8e-452e-8588-5eeea6d6ca4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:19:d3:34:be:61:d2:72:e8:5e:5d:22:00:fb: 40:02:c0:c2:77:37:ee:0f:17:58:65:14:37:f9:88: 85:9d:8c:93:56:49:c7:7a:eb:7d:84:fa:46:b5:f2: 95:5e:fd:46:99:88:79:97:e2:39:e8:76:5e:b6:8d: 2d:b0:60:00:22:1d:d6:37:c1:d2:22:25:2c:1f:bd: 1c:47:ea:c3:4d:8a:12:17:a0:01:8c:96:ea:d2:73: 40:8a:3a:5d:f6:f6:6e:bf:a4:f5:d3:ab:b7:f4:8c: 00:91:e7:00:c3:a9:bd:2c:dc:fb:8d:b4:ae:9f:1e: 3f:9c:8d:dd:ef:e6:72:00:7b:67:aa:74:1c:46:6d: 6d:34:a5:58:56:72:ca:5d:e2:d7:ff:1e:2a:d2:ff: 46:de:6e:57:84:dd:17:48:80:34:93:dd:5d:3d:c7: cc:b8:4b:4f:3a:39:bd:a8:6d:59:30:fc:07:31:47: 87:a8:d3:9c:55:20:3b:fe:b9:bb:2f:28:3a:bb:7a: 5f:84:52:ad:33:04:7f:30:5f:72:19:26:cd:86:88: 72:73:95:6c:88:ef:4c:e2:01:c2:da:07:ae:4e:88: 07:b5:77:56:95:8c:d1:a7:d6:13:c9:cc:81:50:f0: 9a:80:c3:57:57:52:a8:a3:d9:f8:12:b6:fc:2f:fd: 0f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:49:82:93:0E:1F:A6:1B:4D:D7:FF:BD:98:7B:34:4C:68:2F:75:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/db5462a9-42d9-33d3-b0b4-d5ebea5bb2bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ad:f7:90:3a:22:27:1f:84:91:6a:da:6e:55:f9:66:85:c6: f1:53:b1:0b:bb:bb:9e:fb:b8:8a:27:ba:38:f9:af:83:6a:f3: 59:10:a1:55:4a:bd:46:11:80:35:91:f3:9e:ab:46:e1:f6:d9: fa:70:c9:62:dc:04:2c:37:2c:d1:cc:b1:b6:e4:87:5d:7c:86: 95:59:52:73:cb:56:09:74:27:0f:ef:f5:08:e0:73:4c:50:14: 40:a0:a4:93:51:fb:88:aa:34:00:e8:27:68:28:52:49:ea:e3: b4:84:60:2b:c5:17:e8:9d:59:da:75:aa:4d:a6:d5:e4:9c:f7: 5c:04:6f:d5:88:34:68:67:50:6d:29:fd:ed:08:1c:37:36:00: 33:84:ce:fc:9f:b8:e1:c7:cf:99:47:74:c7:21:46:4a:59:10: 05:c9:7c:00:d1:fb:f9:b7:20:65:8d:6b:0a:eb:08:88:d0:b2: 16:05:84:c7:f6:5e:c0:ea:9c:49:84:5f:e0:23:30:ba:13:4e: cd:ae:b4:c4:23:38:b8:39:af:97:d7:75:bc:60:5a:a7:3b:58: b6:b0:08:b2:ca:89:4e:0c:ae:46:b7:59:a9:32:42:d4:8c:6d: b4:1b:90:5e:dc:7f:1c:92:f6:83:04:6b:d3:eb:01:c0:73:00: aa:5a:7a:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2sXvtjCWI0KhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgxMFoXDTI2MDYwMTE0MTgxMFowLzEtMCsGA1UEAxMk YThjODM0ZGEtZGY4ZS00NTJlLTg1ODgtNWVlZWE2ZDZjYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBnTNL5h0nLoXl0iAPtAAsDCdzfuDxdYZRQ3 +YiFnYyTVknHeut9hPpGtfKVXv1GmYh5l+I56HZeto0tsGAAIh3WN8HSIiUsH70c R+rDTYoSF6ABjJbq0nNAijpd9vZuv6T106u39IwAkecAw6m9LNz7jbSunx4/nI3d 7+ZyAHtnqnQcRm1tNKVYVnLKXeLX/x4q0v9G3m5XhN0XSIA0k91dPcfMuEtPOjm9 qG1ZMPwHMUeHqNOcVSA7/rm7Lyg6u3pfhFKtMwR/MF9yGSbNhohyc5VsiO9M4gHC 2geuTogHtXdWlYzRp9YTycyBUPCagMNXV1Koo9n4Erb8L/0P+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHdJgpMOH6YbTdf/vZh7NExoL3U8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGI1NDYyYTktNDJkOS0z M2QzLWIwYjQtZDVlYmVhNWJiMmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECt95A6IicfhJFq2m5V+WaFxvFTsQu7u577uIonujj5r4Nq81kQ oVVKvUYRgDWR856rRuH22fpwyWLcBCw3LNHMsbbkh118hpVZUnPLVgl0Jw/v9Qjg c0xQFECgpJNR+4iqNADoJ2goUknq47SEYCvFF+idWdp1qk2m1eSc91wEb9WINGhn UG0p/e0IHDc2ADOEzvyfuOHHz5lHdMchRkpZEAXJfADR+/m3IGWNawrrCIjQshYF hMf2XsDqnEmEX+AjMLoTTs2utMQjOLg5r5fXdbxgWqc7WLawCLLKiU4Mrka3Waky QtSMbbQbkF7cfxyS9oMEa9PrAcBzAKpaeoA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:36:39 2026 by rpki-client