$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09beb81-743d-3daa-a7b1-89df81d23bd7.roa File: f09beb81-743d-3daa-a7b1-89df81d23bd7.roa (raw, json) Hash identifier: IJoJ3MdS1LHjcKEqU+JnDKhCqEMC65I8+zBYSK1kmT4= Subject key identifier: 67:23:B9:65:13:63:EC:21:FA:9B:41:64:0F:84:45:03:CF:47:35:D4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A4A3592A4A9C46002340 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09beb81-743d-3daa-a7b1-89df81d23bd7.roa Signing time: Tue 10 Mar 2026 14:28:40 +0000 ROA not before: Tue 10 Mar 2026 14:28:40 +0000 ROA not after: Mon 08 Jun 2026 14:28:40 +0000 asID: 396586 IP address blocks: 2001:500:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a4:a3:59:2a:4a:9c:46:00:23:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:40 2026 GMT Not After : Jun 8 14:28:40 2026 GMT Subject: CN=81bd7cef-856e-49fd-929b-c565042e8448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:81:10:ed:0e:f9:db:80:a8:84:b2:91:c0:d3: 9a:3f:6a:03:bf:93:c8:7c:e7:af:eb:9f:59:8d:2b: d9:a4:f8:4f:db:95:d7:8d:ea:f1:c2:8b:c8:13:7a: 15:49:fa:df:ee:72:da:db:3e:81:a9:5f:c3:8f:a0: 7f:09:d7:67:fc:36:83:6c:d4:ab:b0:d3:94:5f:46: 69:c2:d3:1d:98:b1:89:25:86:6a:52:d9:fa:16:ff: 78:68:f2:17:2c:1b:a6:50:89:b6:ba:c1:5f:f4:c1: 19:39:03:07:b4:2b:61:65:46:bd:4b:73:fe:29:76: 88:c4:71:73:ce:d1:01:9d:4b:be:0e:84:72:ce:d8: 9a:61:4e:30:c1:53:34:f0:3a:b8:47:e8:4f:d6:9d: bf:9f:05:47:93:e1:f0:0e:5e:c2:00:e8:1e:d5:7c: 17:77:a6:80:2a:69:08:43:5c:76:b0:2c:f4:08:a9: 8d:9a:f3:40:6f:00:16:56:5d:3d:5d:77:77:9e:e5: 5e:12:ef:c3:cc:6d:0b:1d:b4:af:02:b3:e9:47:f0: f3:72:3f:81:10:ae:da:fa:d9:20:4e:7a:03:83:b8: e8:81:a5:dd:55:b5:e7:9f:fb:b3:6d:f0:2a:89:7d: 79:86:23:35:c6:b8:94:e2:1b:3b:fa:ad:d4:a2:d7: 37:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:23:B9:65:13:63:EC:21:FA:9B:41:64:0F:84:45:03:CF:47:35:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f09beb81-743d-3daa-a7b1-89df81d23bd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:3b:30:6a:91:0c:4a:93:8d:29:af:3f:45:21:e0:3c:72:a0: d6:f7:78:b4:1b:f8:40:8a:1e:e0:29:1b:8b:17:28:0f:07:3d: fe:4d:36:f9:eb:75:94:b3:7c:f3:7f:52:3b:fe:e5:1e:bd:47: 4c:1d:85:5d:6a:b6:12:e7:f3:66:91:f5:f3:05:69:f5:e2:d4: f6:0c:2c:91:7d:14:81:e7:b9:35:ad:91:10:be:8a:86:f5:89: c9:67:08:ef:ab:1d:13:54:5c:1c:68:ba:a6:2b:30:a0:57:4f: 48:d6:24:61:6c:b8:91:9e:83:9d:74:15:1e:35:9a:fe:d5:f2: ec:25:aa:8c:75:fb:04:0c:e3:a8:dc:55:33:fc:d7:fa:61:85: 02:5c:4b:b6:e8:17:b9:da:c2:79:56:2d:9c:e2:2f:26:90:4d: 82:a0:7d:9d:e1:35:29:be:c9:7e:f2:01:65:12:01:c1:44:7e: 8c:83:b8:ab:a1:d8:67:90:36:32:26:f6:de:87:ef:ae:c4:97: d2:39:5a:eb:f3:6c:33:3a:90:71:d8:19:d7:35:d2:b2:e0:4d: 23:23:b4:aa:e8:c4:bd:27:4d:3d:6f:ab:f2:da:c7:0b:35:26: d1:30:e9:fc:a1:95:11:98:3f:3a:6c:7b:16:9b:f0:98:e1:4a: 79:ae:20:69 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0fdaSjWSpKnEYAI0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0Mjg0MFoXDTI2MDYwODE0Mjg0MFowLzEtMCsGA1UEAxMk ODFiZDdjZWYtODU2ZS00OWZkLTkyOWItYzU2NTA0MmU4NDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoEQ7Q7524CohLKRwNOaP2oDv5PIfOev659Z jSvZpPhP25XXjerxwovIE3oVSfrf7nLa2z6BqV/Dj6B/Cddn/DaDbNSrsNOUX0Zp wtMdmLGJJYZqUtn6Fv94aPIXLBumUIm2usFf9MEZOQMHtCthZUa9S3P+KXaIxHFz ztEBnUu+DoRyztiaYU4wwVM08Dq4R+hP1p2/nwVHk+HwDl7CAOge1XwXd6aAKmkI Q1x2sCz0CKmNmvNAbwAWVl09XXd3nuVeEu/DzG0LHbSvArPpR/Dzcj+BEK7a+tkg TnoDg7jogaXdVbXnn/uzbfAqiX15hiM1xriU4hs7+q3Uotc3SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGcjuWUTY+wh+ptBZA+ERQPPRzXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjA5YmViODEtNzQzZC0z ZGFhLWE3YjEtODlkZjgxZDIzYmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFI7MGqRDEqTjSmvP0Uh4DxyoNb3eLQb+ECKHuApG4sXKA8HPf5N NvnrdZSzfPN/Ujv+5R69R0wdhV1qthLn82aR9fMFafXi1PYMLJF9FIHnuTWtkRC+ iob1iclnCO+rHRNUXBxouqYrMKBXT0jWJGFsuJGeg510FR41mv7V8uwlqox1+wQM 46jcVTP81/phhQJcS7boF7nawnlWLZziLyaQTYKgfZ3hNSm+yX7yAWUSAcFEfoyD uKuh2GeQNjIm9t6H767El9I5WuvzbDM6kHHYGdc10rLgTSMjtKroxL0nTT1vq/La xws1JtEw6fyhlRGYPzpsexab8JjhSnmuIGk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:34:01 2026 by rpki-client