$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de13ecd0-a38e-3368-8dde-cd51c69b174e.roa File: de13ecd0-a38e-3368-8dde-cd51c69b174e.roa (raw, json) Hash identifier: HYhARRnHRJL7IiTxwSAOxEOZbLJAs+Xo5Ohy+nNpXS4= Subject key identifier: FB:83:82:37:74:66:09:B6:89:83:58:5E:75:3E:10:A3:01:8C:F0:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C03634D614262F9EF6E3E00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de13ecd0-a38e-3368-8dde-cd51c69b174e.roa Signing time: Tue 03 Mar 2026 15:18:06 +0000 ROA not before: Tue 03 Mar 2026 15:18:06 +0000 ROA not after: Mon 01 Jun 2026 14:18:06 +0000 asID: 397196 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:63:4d:61:42:62:f9:ef:6e:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:06 2026 GMT Not After : Jun 1 14:18:06 2026 GMT Subject: CN=6026c69b-6e0e-465d-bd31-cade0fe643e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:f3:83:e3:03:46:df:d3:bc:c4:25:26:a4: 47:47:32:7f:9a:be:31:38:e4:09:b7:2e:1b:fb:13: f8:aa:2d:e2:28:59:0b:66:9a:9f:1c:e6:3b:b6:1a: 4e:33:ec:ab:d7:eb:47:a2:59:31:bd:da:6e:c7:b1: 13:fe:f1:73:3b:60:e0:60:e2:ae:74:4a:e0:c1:ee: 2e:4e:54:3b:34:96:b9:98:78:9c:c6:e6:58:0a:f0: d0:b4:12:29:2d:dd:8d:88:df:84:35:7f:1a:bd:ef: 03:8d:38:2c:14:04:45:be:bb:84:8c:13:10:ab:a7: 04:37:69:04:04:84:94:db:1d:6e:f0:58:23:b6:3c: 81:fc:9b:0b:31:e8:0e:64:c7:a3:ad:b9:5b:95:33: df:fe:e5:9a:2f:7a:9f:56:bb:c5:f7:43:5f:54:9a: 6c:12:65:fe:16:9a:82:d5:18:ef:70:13:2a:d1:9b: bb:c5:1b:dd:15:10:a8:8a:cf:f8:75:ee:4a:9f:2b: 94:86:2a:d1:82:ae:e6:99:4b:78:1e:fc:44:2d:89: 0c:46:e0:6b:1b:11:19:94:fa:fd:28:80:45:69:53: 66:d6:66:8f:9c:46:2a:07:09:1b:59:21:ac:c0:15: f4:7c:df:a6:8e:4a:1b:58:4b:9f:98:5b:4e:e4:a7: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:83:82:37:74:66:09:B6:89:83:58:5E:75:3E:10:A3:01:8C:F0:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de13ecd0-a38e-3368-8dde-cd51c69b174e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f6:1b:da:c6:a6:93:17:79:af:fc:16:5a:67:df:17:54:09: 1b:7c:36:2e:0e:f0:5d:8e:41:1c:33:58:06:92:15:64:7e:22: 04:d4:7e:45:bf:88:1e:e5:09:7b:c1:0b:a2:33:03:ba:99:3c: 19:6f:70:a9:17:1d:3e:bb:8d:cb:f7:dc:49:b1:fd:19:a3:34: 77:4f:5f:cd:9d:84:be:fb:88:66:11:fc:62:09:49:e6:d6:d3: 5b:1d:48:95:16:39:cb:c9:2b:81:58:60:7c:0c:85:99:11:22: 33:a9:3c:8e:cc:98:42:8b:83:10:a8:e6:ac:ae:e8:ef:b9:45: 7c:78:3c:ba:f8:d3:d0:40:9e:a9:d6:73:69:d7:28:6e:cc:a4: c7:a7:96:32:23:7a:98:32:70:da:a7:31:cb:bc:60:ea:91:86: 2e:a0:25:a0:16:f4:26:fd:38:5d:a2:0e:62:5b:6f:03:42:98: a9:f3:fe:cd:32:3c:c0:3b:9c:8e:7d:d1:94:1a:25:88:ac:22: 8e:f6:35:f3:35:ce:6c:27:4e:28:90:d3:89:ff:72:9e:11:6b: d3:1c:22:18:74:cf:8f:e0:e3:e8:9e:41:4e:da:3a:e7:75:d0: f9:27:e5:e7:91:60:22:2a:ac:b2:17:90:f6:18:32:d6:d8:15: 0d:f0:53:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2NNYUJi+e9uPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwNloXDTI2MDYwMTE0MTgwNlowLzEtMCsGA1UEAxMk NjAyNmM2OWItNmUwZS00NjVkLWJkMzEtY2FkZTBmZTY0M2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO7zg+MDRt/TvMQlJqRHRzJ/mr4xOOQJty4b +xP4qi3iKFkLZpqfHOY7thpOM+yr1+tHolkxvdpux7ET/vFzO2DgYOKudErgwe4u TlQ7NJa5mHicxuZYCvDQtBIpLd2NiN+ENX8ave8DjTgsFARFvruEjBMQq6cEN2kE BISU2x1u8FgjtjyB/JsLMegOZMejrblblTPf/uWaL3qfVrvF90NfVJpsEmX+FpqC 1RjvcBMq0Zu7xRvdFRCois/4de5KnyuUhirRgq7mmUt4HvxELYkMRuBrGxEZlPr9 KIBFaVNm1maPnEYqBwkbWSGswBX0fN+mjkobWEufmFtO5KcqsQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPuDgjd0Zgm2iYNYXnU+EKMBjPAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGUxM2VjZDAtYTM4ZS0z MzY4LThkZGUtY2Q1MWM2OWIxNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJj2G9rGppMXea/8Flpn3xdUCRt8Ni4O8F2OQRwzWAaSFWR+IgTU fkW/iB7lCXvBC6IzA7qZPBlvcKkXHT67jcv33Emx/RmjNHdPX82dhL77iGYR/GIJ SebW01sdSJUWOcvJK4FYYHwMhZkRIjOpPI7MmEKLgxCo5qyu6O+5RXx4PLr409BA nqnWc2nXKG7MpMenljIjepgycNqnMcu8YOqRhi6gJaAW9Cb9OF2iDmJbbwNCmKnz /s0yPMA7nI590ZQaJYisIo72NfM1zmwnTiiQ04n/cp4Ra9McIhh0z4/g4+ieQU7a Oud10Pkn5eeRYCIqrLIXkPYYMtbYFQ3wU7w= -----END CERTIFICATE-----Generated at Thu Mar 26 11:06:41 2026 by rpki-client