$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc32c69b-7c3e-35d7-b3ff-7be35bcba194.roa File: dc32c69b-7c3e-35d7-b3ff-7be35bcba194.roa (raw, json) Hash identifier: gY/rpM6O69tMZxtAjkwwy9E4numuo2B78pbROCo3xsw= Subject key identifier: AF:D2:A7:1F:CA:B4:E8:67:C4:68:39:3C:A2:00:51:39:1E:F5:C2:DD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759B8C221F443655B63700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc32c69b-7c3e-35d7-b3ff-7be35bcba194.roa Signing time: Tue 10 Mar 2026 14:28:36 +0000 ROA not before: Tue 10 Mar 2026 14:28:36 +0000 ROA not after: Mon 08 Jun 2026 14:28:36 +0000 asID: 397201 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9b:8c:22:1f:44:36:55:b6:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:36 2026 GMT Not After : Jun 8 14:28:36 2026 GMT Subject: CN=df68fb47-28b1-4ab1-bfaa-b063e27f6707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e5:f4:6c:d2:91:f6:13:e1:7c:12:bd:3b:03: a0:32:09:7f:a5:eb:dc:07:db:e0:ec:10:d8:4f:1b: 5b:6c:57:69:65:1e:e1:91:ca:27:48:77:dd:4d:a0: 74:3a:2b:59:7a:84:54:ab:1f:13:52:b2:7e:f0:50: 6d:94:37:ac:f9:b7:71:89:7d:2d:e2:35:10:33:ca: 58:52:bb:00:bc:83:98:50:31:0f:fe:b0:81:15:ad: 7b:18:31:7d:5e:4e:98:6f:8f:fb:14:77:ed:4e:f9: a9:d4:8f:eb:59:75:78:fd:f7:bb:8d:c6:fe:7d:2c: d9:14:ad:7c:28:2f:30:17:72:c4:24:16:1a:51:53: dd:3c:5e:49:c4:96:d2:5a:3f:9b:b9:8e:14:2d:f8: 75:ff:8e:7a:3e:28:cf:30:47:16:63:ae:42:de:6f: 9e:6d:ba:91:3c:7d:90:18:9f:93:90:1d:aa:8e:68: 27:5d:d3:39:65:3c:2f:0d:08:e3:92:67:48:17:69: 0b:71:c7:c4:cc:bb:37:3e:e9:2d:4b:ae:11:2b:2f: 55:25:a0:0f:a8:8f:e2:8a:f8:14:d5:30:17:ce:dc: 0c:d0:96:15:a2:7f:82:70:07:5c:bd:1d:8d:ee:f2: 7d:cc:49:09:68:9a:5c:c5:c3:b3:b5:e1:ed:d9:0d: d4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D2:A7:1F:CA:B4:E8:67:C4:68:39:3C:A2:00:51:39:1E:F5:C2:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc32c69b-7c3e-35d7-b3ff-7be35bcba194.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:35:71:9a:f8:42:30:7b:d7:cb:b8:ae:1a:0d:84:88:db:a4: a9:45:37:4d:c6:82:09:9d:14:c8:5a:2e:6e:83:09:4b:d9:95: b0:1a:db:ab:9b:a6:ce:cc:de:d5:ea:67:83:3c:42:f7:7a:54: 2b:64:b4:54:10:4f:6c:19:58:79:fc:f4:27:5a:23:83:37:6b: 02:02:a2:e9:58:7d:46:f4:e6:39:45:26:43:7e:02:b0:8f:74: c0:12:aa:5e:3b:d1:a3:91:29:1d:de:40:0f:14:43:b4:94:a2: e8:5e:e7:6e:8b:1a:65:5a:04:9d:f5:d3:c7:0a:2f:29:8d:9a: 95:6a:c5:b5:d6:aa:36:c9:ea:54:db:69:69:90:10:19:c7:40: 5e:1b:40:b2:25:fa:77:f2:9e:7b:fa:2b:86:f2:23:45:ab:1d: d4:84:5f:25:68:55:7b:a4:ea:48:61:0a:17:82:63:94:1a:e5: db:26:af:e6:58:64:dd:22:4b:eb:10:a8:e3:d6:24:b9:4c:c4: 12:66:b4:b5:e0:5d:55:74:c9:14:50:5b:b3:56:9e:07:24:38: 77:64:ac:85:25:45:0a:f8:f0:4f:23:35:cf:dd:6b:c3:7d:64: 4f:f9:33:24:03:2b:ce:40:41:fa:ec:67:76:69:18:91:f6:eb: 24:5b:5c:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdZuMIh9ENlW2NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzNloXDTI2MDYwODE0MjgzNlowLzEtMCsGA1UEAxMk ZGY2OGZiNDctMjhiMS00YWIxLWJmYWEtYjA2M2UyN2Y2NzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOX0bNKR9hPhfBK9OwOgMgl/pevcB9vg7BDY TxtbbFdpZR7hkconSHfdTaB0OitZeoRUqx8TUrJ+8FBtlDes+bdxiX0t4jUQM8pY UrsAvIOYUDEP/rCBFa17GDF9Xk6Yb4/7FHftTvmp1I/rWXV4/fe7jcb+fSzZFK18 KC8wF3LEJBYaUVPdPF5JxJbSWj+buY4ULfh1/456PijPMEcWY65C3m+ebbqRPH2Q GJ+TkB2qjmgnXdM5ZTwvDQjjkmdIF2kLccfEzLs3PuktS64RKy9VJaAPqI/iivgU 1TAXztwM0JYVon+CcAdcvR2N7vJ9zEkJaJpcxcOzteHt2Q3U+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK/Spx/KtOhnxGg5PKIAUTke9cLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGMzMmM2OWItN2MzZS0z NWQ3LWIzZmYtN2JlMzViY2JhMTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADM1cZr4QjB718u4rhoNhIjbpKlFN03GggmdFMhaLm6DCUvZlbAa 26ubps7M3tXqZ4M8Qvd6VCtktFQQT2wZWHn89CdaI4M3awICoulYfUb05jlFJkN+ ArCPdMASql470aORKR3eQA8UQ7SUouhe526LGmVaBJ3108cKLymNmpVqxbXWqjbJ 6lTbaWmQEBnHQF4bQLIl+nfynnv6K4byI0WrHdSEXyVoVXuk6khhCheCY5Qa5dsm r+ZYZN0iS+sQqOPWJLlMxBJmtLXgXVV0yRRQW7NWngckOHdkrIUlRQr48E8jNc/d a8N9ZE/5MyQDK85AQfrsZ3ZpGJH26yRbXMw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:41:31 2026 by rpki-client