$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb2c20d8-f6e4-30ee-8472-b680d20c9936.roa File: eb2c20d8-f6e4-30ee-8472-b680d20c9936.roa (raw, json) Hash identifier: xt+jTW3sTmKj8DUahIgmZELjYS/kRWm1LjUjPj5ySbc= Subject key identifier: D4:B0:89:DA:3B:3F:41:F6:2B:19:C2:D5:B3:95:97:16:94:B4:B0:A7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2644D05A4543C6AF182D0070 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb2c20d8-f6e4-30ee-8472-b680d20c9936.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 40647 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:d0:5a:45:43:c6:af:18:2d:00:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=3deddfaa-3582-4155-9739-04c3d67e1a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:9a:46:e9:78:a9:8d:90:2c:75:b9:f9:19:7e: ad:33:74:e8:75:f4:62:4e:72:06:ec:08:af:ec:2e: 0a:b4:cf:24:1c:4e:82:25:86:00:7c:83:ae:7e:97: 25:0c:1e:14:c2:31:da:33:a0:25:b0:5a:2d:1f:f1: 82:78:94:fb:20:13:41:a7:0b:5b:8b:0d:f2:a7:39: b3:30:7d:4b:e9:99:60:89:2e:78:c9:76:6c:8a:4e: a8:41:d7:6c:e8:90:be:36:24:7c:1e:f2:45:2b:3d: 6c:ea:cb:32:01:74:29:a6:ca:b6:8a:d7:db:21:51: dc:79:c3:b9:39:ca:01:48:53:00:49:c4:27:09:e1: 39:97:d3:3c:d1:b6:0b:cc:12:bf:19:af:28:67:b6: 86:d3:16:a4:22:c1:13:80:eb:8f:bb:c0:d6:c7:d2: 89:92:de:9b:7a:53:ae:e6:bf:e8:fe:cb:12:80:95: c3:08:40:72:7a:ac:5f:bc:0a:52:31:85:db:aa:59: fd:7b:83:5d:8e:d9:1b:16:95:56:4f:cc:b4:97:83: 35:20:a4:4e:ad:18:42:92:b8:db:74:15:65:2a:c4: 05:85:fa:c3:ce:3d:3f:b7:58:5a:59:df:05:12:ca: 7f:d3:22:c1:e9:6e:6d:91:1a:e8:77:75:d2:1d:d2: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B0:89:DA:3B:3F:41:F6:2B:19:C2:D5:B3:95:97:16:94:B4:B0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/eb2c20d8-f6e4-30ee-8472-b680d20c9936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:84:d1:83:f7:71:ba:a3:9a:8c:4c:18:1a:61:20:05:1f:ec: 92:0e:f2:d4:a1:bc:4c:97:de:15:74:9c:94:1f:cb:4b:41:15: 84:a0:7b:7e:46:09:3b:d9:55:6f:28:a6:25:ee:d7:48:dd:71: d7:5e:50:0b:bc:46:f8:a6:d2:23:a6:ac:85:39:78:54:8d:82: 7f:7b:f5:21:90:da:23:d0:08:8f:7b:f2:a4:be:85:01:50:a4: 84:9c:37:fa:c2:a8:39:cb:7d:ef:9c:78:92:d8:d7:1f:9e:78: ee:25:5c:77:3d:72:5d:e7:1d:50:9e:02:45:a0:5b:6e:66:cd: 58:90:a8:24:29:c5:bd:a6:0b:40:46:8e:ff:3b:44:ff:f2:83: 7a:a4:d3:2f:ac:c3:51:5d:2c:73:b1:ee:b8:ee:72:94:cf:c5: 8a:78:77:dd:b8:ae:b8:55:69:8b:40:1a:bb:0e:f2:59:d9:a1: 22:bf:17:d2:62:6d:dc:b6:9a:8a:7e:5d:62:ed:ac:1a:b7:c3: 80:f3:5a:d9:7c:29:e6:8b:c4:2b:d4:0e:4b:97:39:5a:75:3d: 9b:60:b9:2c:a8:31:f2:f9:ed:17:9d:b9:8c:d1:91:92:65:82: 90:75:c9:5c:90:50:1e:a5:10:d0:78:20:4d:03:db:12:40:33: bd:42:b6:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRNBaRUPGrxgtAHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk M2RlZGRmYWEtMzU4Mi00MTU1LTk3MzktMDRjM2Q2N2UxYTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZpG6XipjZAsdbn5GX6tM3TodfRiTnIG7Aiv 7C4KtM8kHE6CJYYAfIOufpclDB4UwjHaM6AlsFotH/GCeJT7IBNBpwtbiw3ypzmz MH1L6ZlgiS54yXZsik6oQdds6JC+NiR8HvJFKz1s6ssyAXQppsq2itfbIVHcecO5 OcoBSFMAScQnCeE5l9M80bYLzBK/Ga8oZ7aG0xakIsETgOuPu8DWx9KJkt6belOu 5r/o/ssSgJXDCEByeqxfvApSMYXbqln9e4NdjtkbFpVWT8y0l4M1IKROrRhCkrjb dBVlKsQFhfrDzj0/t1haWd8FEsp/0yLB6W5tkRrod3XSHdLKHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNSwido7P0H2KxnC1bOVlxaUtLCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWIyYzIwZDgtZjZlNC0z MGVlLTg0NzItYjY4MGQyMGM5OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFiE0YP3cbqjmoxMGBphIAUf7JIO8tShvEyX3hV0nJQfy0tBFYSg e35GCTvZVW8opiXu10jdcddeUAu8Rvim0iOmrIU5eFSNgn979SGQ2iPQCI978qS+ hQFQpIScN/rCqDnLfe+ceJLY1x+eeO4lXHc9cl3nHVCeAkWgW25mzViQqCQpxb2m C0BGjv87RP/yg3qk0y+sw1FdLHOx7rjucpTPxYp4d924rrhVaYtAGrsO8lnZoSK/ F9Jibdy2mop+XWLtrBq3w4DzWtl8KeaLxCvUDkuXOVp1PZtguSyoMfL57ReduYzR kZJlgpB1yVyQUB6lENB4IE0D2xJAM71Ctnc= -----END CERTIFICATE-----Generated at Thu Mar 26 23:43:55 2026 by rpki-client