$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e21f9af6-7137-3b33-9fa2-8fc73ece97e5.roa File: e21f9af6-7137-3b33-9fa2-8fc73ece97e5.roa (raw, json) Hash identifier: H/hOj1BNXfeiYn8Vk07vHitU0sfTmwE4AqUKET6Pydw= Subject key identifier: E1:CB:A3:0C:BA:F9:88:87:6A:77:13:C3:AE:E2:C6:57:25:48:96:A1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C036C4388293C556208C0C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e21f9af6-7137-3b33-9fa2-8fc73ece97e5.roa Signing time: Tue 03 Mar 2026 15:18:10 +0000 ROA not before: Tue 03 Mar 2026 15:18:10 +0000 ROA not after: Mon 01 Jun 2026 14:18:10 +0000 asID: 396594 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:6c:43:88:29:3c:55:62:08:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:10 2026 GMT Not After : Jun 1 14:18:10 2026 GMT Subject: CN=d64713f8-a050-4c8b-891e-8b4a2171e80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:05:0a:34:0a:88:a9:18:f9:91:d9:9c:8a: e9:c5:02:58:54:f1:dd:d6:64:b1:3f:5f:0b:fe:e3: 22:f4:fa:41:3c:d8:1c:d7:24:e5:ea:6a:17:ba:c5: 76:cd:26:3b:31:4e:65:cf:c9:ae:2f:96:5f:7f:e1: ad:60:aa:11:af:05:25:e0:23:5e:a8:cc:30:53:d3: 0c:cd:23:e7:42:98:20:b8:af:a2:87:e3:d4:7c:10: 26:2f:92:06:f4:d9:eb:68:95:2a:c2:9e:6d:82:01: fd:b3:38:80:32:51:2d:cc:50:09:c9:c7:00:fb:b4: f8:95:3a:42:07:dd:58:df:c6:a1:69:9e:75:d3:c6: d2:ad:2f:c1:15:f3:ef:87:d5:d4:63:f3:51:42:af: 02:cc:54:99:51:7e:e1:e8:03:4a:58:4e:5a:83:08: e6:25:54:37:b7:89:81:af:df:3e:89:38:b5:52:1e: db:5f:72:a4:bf:59:7c:86:90:26:9f:63:b9:10:ac: c3:d8:d5:c6:7e:bd:a9:2a:12:3e:a5:92:66:3c:68: 22:42:ed:47:e5:4e:11:2e:14:a2:14:02:32:bf:68: ca:d9:6f:6d:b7:13:7c:47:76:e6:48:f1:06:18:41: 1c:be:04:b9:3d:79:f7:91:3a:e2:57:fe:b6:13:a8: 71:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CB:A3:0C:BA:F9:88:87:6A:77:13:C3:AE:E2:C6:57:25:48:96:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e21f9af6-7137-3b33-9fa2-8fc73ece97e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:1b:cb:69:57:04:7a:dc:b5:10:66:7d:e7:30:8b:90:c9:47: 71:f9:25:f1:b6:13:ea:93:89:96:12:5c:b9:5c:1d:ad:32:af: 45:31:26:1e:a9:57:9a:16:8a:75:f3:17:8c:e6:73:cd:73:d2: 34:f1:59:b2:02:d6:e9:d6:9a:42:4b:65:0f:a4:b7:f5:ff:27: cc:62:4e:d2:31:59:ef:83:79:63:49:82:f4:81:20:da:81:09: ab:f5:8d:55:5e:09:12:c9:04:b8:db:fa:a0:ea:f4:a5:b1:f6: 2a:8b:7b:18:ea:ea:44:2f:01:24:e8:00:70:69:91:f1:5d:33: c5:b0:28:0b:ff:5d:5c:c2:31:09:39:fc:9f:f0:6f:db:1a:92: 9f:e3:cc:ec:fa:cf:4f:e0:57:f5:6d:10:ac:f6:45:af:3a:e3: 21:c3:3b:75:6d:ee:86:5f:eb:e9:35:ba:dc:cb:ef:06:e4:02: ef:6c:88:c4:18:75:f2:ff:00:e6:b6:48:d4:48:dc:4f:75:06: 16:ae:de:93:f5:df:bf:21:da:5b:39:38:57:cd:3a:cb:e9:7a: 4d:13:7f:d7:a2:8f:83:16:13:89:51:49:90:31:da:fb:f0:41: e2:68:9b:41:5f:07:0b:8d:fc:2f:ef:f7:40:60:5e:a5:dc:2d: 20:26:40:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2xDiCk8VWIIwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgxMFoXDTI2MDYwMTE0MTgxMFowLzEtMCsGA1UEAxMk ZDY0NzEzZjgtYTA1MC00YzhiLTg5MWUtOGI0YTIxNzFlODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRoFCjQKiKkY+ZHZnIrpxQJYVPHd1mSxP18L /uMi9PpBPNgc1yTl6moXusV2zSY7MU5lz8muL5Zff+GtYKoRrwUl4CNeqMwwU9MM zSPnQpgguK+ih+PUfBAmL5IG9NnraJUqwp5tggH9sziAMlEtzFAJyccA+7T4lTpC B91Y38ahaZ5108bSrS/BFfPvh9XUY/NRQq8CzFSZUX7h6ANKWE5agwjmJVQ3t4mB r98+iTi1Uh7bX3Kkv1l8hpAmn2O5EKzD2NXGfr2pKhI+pZJmPGgiQu1H5U4RLhSi FAIyv2jK2W9ttxN8R3bmSPEGGEEcvgS5PXn3kTriV/62E6hx3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOHLowy6+YiHancTw67ixlclSJahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZTIxZjlhZjYtNzEzNy0z YjMzLTlmYTItOGZjNzNlY2U5N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQby2lXBHrctRBmfecwi5DJR3H5JfG2E+qTiZYSXLlcHa0yr0Ux Jh6pV5oWinXzF4zmc81z0jTxWbIC1unWmkJLZQ+kt/X/J8xiTtIxWe+DeWNJgvSB INqBCav1jVVeCRLJBLjb+qDq9KWx9iqLexjq6kQvASToAHBpkfFdM8WwKAv/XVzC MQk5/J/wb9sakp/jzOz6z0/gV/VtEKz2Ra864yHDO3Vt7oZf6+k1utzL7wbkAu9s iMQYdfL/AOa2SNRI3E91Bhau3pP1378h2ls5OFfNOsvpek0Tf9eij4MWE4lRSZAx 2vvwQeJom0FfBwuN/C/v90BgXqXcLSAmQFs= -----END CERTIFICATE-----Generated at Thu Mar 26 12:29:42 2026 by rpki-client