$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df6dd3bd-c7a3-336c-a4c3-e53bcec83f0e.roa File: df6dd3bd-c7a3-336c-a4c3-e53bcec83f0e.roa (raw, json) Hash identifier: rbVsbXKOF1MGqNiTQ88wbvmcO+AzF7RmdyG6wJvyLXg= Subject key identifier: 9A:88:3B:D8:72:7D:17:0D:AD:4A:1E:6D:CC:AA:EF:40:98:57:65:1E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C03638BB499D98F20D1DC80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df6dd3bd-c7a3-336c-a4c3-e53bcec83f0e.roa Signing time: Tue 03 Mar 2026 15:18:06 +0000 ROA not before: Tue 03 Mar 2026 15:18:06 +0000 ROA not after: Mon 01 Jun 2026 14:18:06 +0000 asID: 397210 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:63:8b:b4:99:d9:8f:20:d1:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:06 2026 GMT Not After : Jun 1 14:18:06 2026 GMT Subject: CN=dd7aa28c-13f3-4096-a0a9-40598bf71672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:99:9a:fc:36:2f:c1:6f:e3:de:1b:6a:0e:d8: be:c1:3f:5a:23:74:f6:1e:ce:48:61:49:0a:2a:39: 6c:c3:d1:da:f8:bc:2f:db:af:2f:05:b4:9c:e4:1b: 9e:da:14:77:f8:2f:4b:cd:ed:ca:12:32:b7:1e:bb: a2:79:9e:c6:d6:11:44:3f:13:ba:8f:46:3e:09:cb: 45:dc:c5:12:cf:c5:42:fa:13:74:66:0d:dd:d4:90: 6c:7a:6a:fd:da:b5:8a:2f:80:72:28:75:4c:f8:a3: 3c:e8:02:e4:71:99:92:23:a1:e8:0a:7b:72:f6:cf: 84:c0:74:e0:9b:e7:8c:84:da:75:b2:c2:95:8a:16: 21:67:34:8f:ea:3f:7c:e4:f9:29:af:76:a9:02:80: 9e:aa:6d:ab:30:6f:38:e3:02:81:7f:8a:02:b8:4d: b4:cb:71:6d:87:7a:b8:ef:99:4e:c0:6f:27:d9:e5: 32:c4:e4:05:8f:3a:ac:80:22:e2:0b:8b:1a:9b:07: 97:1f:7e:77:ce:4f:83:24:82:f3:5f:a9:6b:ee:3b: 89:9b:2e:46:a4:df:9a:26:73:b7:bb:05:9a:10:9a: 12:e0:b0:eb:64:ef:ee:64:30:75:23:88:a5:e4:72: 2c:57:99:a5:81:23:af:3c:8f:d2:40:0b:a8:10:ab: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:88:3B:D8:72:7D:17:0D:AD:4A:1E:6D:CC:AA:EF:40:98:57:65:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df6dd3bd-c7a3-336c-a4c3-e53bcec83f0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:91:5d:cd:0e:88:d5:d1:d3:e2:c2:5c:6b:cb:87:dd:54:63: d5:67:ca:38:ed:8f:51:77:b8:03:b9:92:b7:3b:40:56:82:70: 05:95:d0:fb:de:33:f5:81:13:cf:a9:d0:e9:58:4e:75:33:86: f1:ec:7f:40:e4:09:4c:82:de:f4:6a:d4:a4:7b:f2:9e:01:bd: 78:52:17:93:07:93:dc:7d:e8:81:e7:0b:a4:77:80:4b:13:86: e8:31:51:83:ef:41:9b:7a:5a:d7:fc:07:69:42:ba:65:49:13: 64:e5:bc:35:7b:1e:cf:bb:17:95:c7:73:4d:80:2f:a8:15:26: 03:22:51:1e:ff:26:63:21:23:b7:5f:7e:16:05:a6:40:1a:da: 36:90:07:f8:08:3e:4a:95:3d:0f:3b:54:ae:15:43:76:b9:59: 1f:e3:16:e9:28:a3:a2:45:1f:7d:eb:48:65:51:ba:34:28:01: ca:23:b3:33:0c:8d:76:31:fe:f7:c1:d7:af:5c:ea:f7:1b:d4: 19:8d:ea:a0:4c:67:c1:46:55:b4:ad:ad:85:3a:70:32:a4:c2: f5:f4:eb:85:fd:9f:5b:ac:b6:b1:dd:f4:e1:2d:a1:a3:ab:04: 31:d6:06:36:73:48:b2:15:05:ec:7a:44:70:d6:3a:5d:35:e5: c7:ec:d6:09 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2OLtJnZjyDR3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwNloXDTI2MDYwMTE0MTgwNlowLzEtMCsGA1UEAxMk ZGQ3YWEyOGMtMTNmMy00MDk2LWEwYTktNDA1OThiZjcxNjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5ma/DYvwW/j3htqDti+wT9aI3T2Hs5IYUkK Kjlsw9Ha+Lwv268vBbSc5Bue2hR3+C9Lze3KEjK3HruieZ7G1hFEPxO6j0Y+CctF 3MUSz8VC+hN0Zg3d1JBsemr92rWKL4ByKHVM+KM86ALkcZmSI6HoCnty9s+EwHTg m+eMhNp1ssKVihYhZzSP6j985Pkpr3apAoCeqm2rMG844wKBf4oCuE20y3Fth3q4 75lOwG8n2eUyxOQFjzqsgCLiC4samweXH353zk+DJILzX6lr7juJmy5GpN+aJnO3 uwWaEJoS4LDrZO/uZDB1I4il5HIsV5mlgSOvPI/SQAuoEKuCkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJqIO9hyfRcNrUoebcyq70CYV2UeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGY2ZGQzYmQtYzdhMy0z MzZjLWE0YzMtZTUzYmNlYzgzZjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJCRXc0OiNXR0+LCXGvLh91UY9Vnyjjtj1F3uAO5krc7QFaCcAWV 0PveM/WBE8+p0OlYTnUzhvHsf0DkCUyC3vRq1KR78p4BvXhSF5MHk9x96IHnC6R3 gEsThugxUYPvQZt6Wtf8B2lCumVJE2TlvDV7Hs+7F5XHc02AL6gVJgMiUR7/JmMh I7dffhYFpkAa2jaQB/gIPkqVPQ87VK4VQ3a5WR/jFukoo6JFH33rSGVRujQoAcoj szMMjXYx/vfB169c6vcb1BmN6qBMZ8FGVbStrYU6cDKkwvX064X9n1ustrHd9OEt oaOrBDHWBjZzSLIVBex6RHDWOl015cfs1gk= -----END CERTIFICATE-----Generated at Thu Mar 26 14:03:18 2026 by rpki-client