$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa File: defae45a-66a3-332f-95cd-9ffa0e1ab851.roa (raw, json) Hash identifier: cweitRmvBJYlDi1jkDCK8vwxLMpW9FKnuZbeq0Z7oZA= Subject key identifier: 63:B1:D3:A1:7D:29:29:92:35:86:AF:38:73:0A:26:92:21:3F:8D:50 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2644CD646DAB67D123CA8A40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 396595 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:cd:64:6d:ab:67:d1:23:ca:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=3fd0a8c3-1180-4e76-8d5d-200eac5592c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d4:f2:ea:58:64:90:ac:32:d5:95:c9:77:26: f6:f1:5f:d0:cd:f3:bf:13:d4:5c:26:f6:e4:cf:5c: cf:91:73:59:5c:f3:ea:24:03:d2:dd:40:52:da:d7: d7:d0:2d:47:9f:62:eb:8c:4d:ef:39:cf:d1:5a:f8: 0d:2e:e4:59:a7:6d:37:ee:35:33:a6:2b:a3:7f:25: 74:1d:56:1f:21:12:a3:ae:5d:3e:66:e4:90:49:04: da:aa:8c:9a:40:67:11:da:44:1c:61:77:29:f4:6c: 03:a4:ae:bf:f3:d2:43:20:c7:a2:39:c2:19:2a:40: 5b:e2:28:ab:20:82:b7:f8:43:cd:11:b6:ea:d0:b1: 6f:35:36:e5:cf:c4:7c:c8:a6:f6:a5:f2:6e:ff:d4: a0:b3:b7:9b:43:7d:4b:6b:ed:73:dc:1d:65:7e:d2: 36:ba:93:2e:b2:7d:cb:f2:df:40:8a:f7:5f:03:f8: 1c:83:ec:0c:2b:96:bf:b7:09:56:67:7e:6e:5a:66: f5:06:87:24:de:d4:3f:7b:18:22:f2:41:0b:f0:57: b7:17:52:ec:c7:90:2e:f6:1c:49:70:a6:49:4d:a2: d0:2e:41:f1:e2:4d:56:e0:90:6e:9a:cb:aa:21:f4: f4:28:6c:d2:e1:a3:4a:0d:58:3c:05:d7:22:b1:83: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B1:D3:A1:7D:29:29:92:35:86:AF:38:73:0A:26:92:21:3F:8D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/defae45a-66a3-332f-95cd-9ffa0e1ab851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:c7:b4:3b:b3:84:46:98:b9:ef:54:4b:b0:bc:f9:af:96:52: 11:25:42:90:fd:f9:09:bd:2d:70:ed:74:40:a3:9c:c5:b6:32: a3:f5:92:86:7a:2e:1e:b7:58:f0:04:58:f6:e6:72:cc:bc:3f: 24:47:e0:77:fe:c9:9a:8c:0f:ad:77:09:d4:32:6b:61:12:3e: 0b:78:7e:4f:4e:54:07:06:05:cd:6e:37:77:0c:8e:0c:9c:ef: e4:ba:ca:f3:89:3b:11:51:02:57:77:df:a9:52:b0:ef:f0:75: 49:dd:51:d2:89:20:50:7a:ef:00:31:d8:6a:ff:0c:de:a5:4e: 0d:7c:69:33:16:7a:1a:52:da:61:84:47:12:6e:25:0d:1a:a4: 79:ac:86:c0:91:0f:ef:bc:a6:87:63:0f:7e:88:6a:52:b8:dd: 90:be:70:e2:a6:6c:10:4f:f3:5e:d1:5a:14:05:90:93:85:bf: 50:5b:9f:27:38:1f:f1:84:2a:a7:b4:fc:36:e8:38:c9:5f:a4: eb:10:ed:bc:23:f8:46:f6:13:0d:75:d9:a5:64:32:0c:ee:dd: ee:3d:c6:af:90:2a:cf:b2:26:49:27:96:9a:eb:b8:0f:8d:ed: c9:33:03:b8:7f:20:fa:99:34:34:28:a1:b4:52:72:e2:3a:70: 8a:2f:9a:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRM1kbatn0SPKikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk M2ZkMGE4YzMtMTE4MC00ZTc2LThkNWQtMjAwZWFjNTU5MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutTy6lhkkKwy1ZXJdyb28V/QzfO/E9RcJvbk z1zPkXNZXPPqJAPS3UBS2tfX0C1Hn2LrjE3vOc/RWvgNLuRZp2037jUzpiujfyV0 HVYfIRKjrl0+ZuSQSQTaqoyaQGcR2kQcYXcp9GwDpK6/89JDIMeiOcIZKkBb4iir IIK3+EPNEbbq0LFvNTblz8R8yKb2pfJu/9Sgs7ebQ31La+1z3B1lftI2upMusn3L 8t9AivdfA/gcg+wMK5a/twlWZ35uWmb1Bock3tQ/exgi8kEL8Fe3F1Lsx5Au9hxJ cKZJTaLQLkHx4k1W4JBumsuqIfT0KGzS4aNKDVg8BdcisYMT2QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGOx06F9KSmSNYavOHMKJpIhP41QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGVmYWU0NWEtNjZhMy0z MzJmLTk1Y2QtOWZmYTBlMWFiODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAzHtDuzhEaYue9US7C8+a+WUhElQpD9+Qm9LXDtdECjnMW2MqP1 koZ6Lh63WPAEWPbmcsy8PyRH4Hf+yZqMD613CdQya2ESPgt4fk9OVAcGBc1uN3cM jgyc7+S6yvOJOxFRAld336lSsO/wdUndUdKJIFB67wAx2Gr/DN6lTg18aTMWehpS 2mGERxJuJQ0apHmshsCRD++8podjD36IalK43ZC+cOKmbBBP817RWhQFkJOFv1Bb nyc4H/GEKqe0/DboOMlfpOsQ7bwj+Eb2Ew112aVkMgzu3e49xq+QKs+yJkknlprr uA+N7ckzA7h/IPqZNDQoobRScuI6cIovmoQ= -----END CERTIFICATE-----Generated at Thu Mar 26 12:25:47 2026 by rpki-client