$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1f638a4-fd3a-3861-9a34-82aaf123f14f.roa File: f1f638a4-fd3a-3861-9a34-82aaf123f14f.roa (raw, json) Hash identifier: I4MX56VAXJA71cA50Gylx0WSz4QJ83YBYHBdUSsEoi0= Subject key identifier: C6:10:68:DD:59:A2:46:60:29:D2:6D:B3:E5:8D:7F:3C:1A:5E:B9:A5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0C0364EF53B4940B58658A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1f638a4-fd3a-3861-9a34-82aaf123f14f.roa Signing time: Tue 03 Mar 2026 15:18:07 +0000 ROA not before: Tue 03 Mar 2026 15:18:07 +0000 ROA not after: Mon 01 Jun 2026 14:18:07 +0000 asID: 396562 IP address blocks: 2001:500:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:03:64:ef:53:b4:94:0b:58:65:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 15:18:07 2026 GMT Not After : Jun 1 14:18:07 2026 GMT Subject: CN=34995e55-6ab0-4da3-b978-7e6853b4b164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d3:99:a6:ac:67:9f:14:c5:6e:00:05:a2:df: af:ac:dc:ec:4f:b2:3b:94:a0:49:b0:17:52:ee:25: 8e:83:7e:91:85:3e:1b:9b:ef:aa:2c:2c:e9:20:87: ce:e0:28:d2:d4:c4:e4:2e:b6:49:ba:50:81:a1:9a: ff:38:40:d2:b4:7b:8a:e2:17:7c:b1:68:25:0e:47: 7a:47:c3:02:d2:0b:51:87:60:6f:ce:d7:55:9d:c7: bf:a7:26:19:72:a7:f8:d0:42:0f:22:7b:a5:9f:fb: 66:c1:e1:f4:53:86:fd:4a:3a:cb:9a:32:ba:4c:00: a6:e4:f5:a5:a6:90:c3:4a:e9:4a:dd:9f:b8:a1:7e: 34:8c:3d:3a:5a:a0:1d:55:db:e3:00:46:71:0b:4f: 21:58:50:53:89:63:b3:ed:ba:11:9f:84:d9:8f:c3: 6a:38:fd:3b:0c:e8:46:09:9e:70:e9:4a:4a:f9:f9: 72:9a:c1:f1:46:00:60:5f:dc:59:d7:92:25:4c:3f: 80:ca:cd:76:56:36:50:a5:06:41:63:fa:a6:13:12: b0:33:38:74:0b:ca:5c:dd:48:5e:5c:74:b5:bb:fd: 78:3a:b3:5b:7f:fa:87:af:62:03:f1:53:d4:11:f8: 7d:25:a7:ab:14:35:e3:36:c9:28:3b:64:e4:c7:d6: 03:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:10:68:DD:59:A2:46:60:29:D2:6D:B3:E5:8D:7F:3C:1A:5E:B9:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f1f638a4-fd3a-3861-9a34-82aaf123f14f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:125::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:03:3d:da:16:2b:9f:32:e3:7b:ab:11:2d:05:3f:99:91:c1: 20:dd:d9:f5:7f:76:2b:ef:6b:72:ea:69:cc:0f:7b:b5:98:b7: 01:55:70:11:9a:39:0a:01:6f:87:b0:e9:99:9e:cf:28:2b:d9: 81:58:6f:ad:98:7b:d8:10:fa:c0:f8:90:44:61:bc:9c:32:aa: 0a:64:76:a2:f6:a9:99:29:30:fd:a3:9f:31:c6:79:fa:b0:0b: dc:80:22:13:94:bf:98:15:8e:9b:0d:ab:20:2e:f3:a4:0c:bf: 61:92:e2:88:78:4d:06:4e:bc:28:85:b6:a9:79:14:80:8b:7e: 9b:3e:99:2d:bd:7f:03:13:6e:b1:66:de:82:67:77:5d:6f:37: 98:14:dd:54:7a:e0:ac:f6:fd:f4:6b:01:76:57:3e:16:11:37: 67:cc:3f:3b:eb:5b:9e:03:c3:11:81:ce:ad:82:39:a3:cf:44: ad:fd:ee:de:a3:23:80:df:fa:91:78:3a:d6:8f:7d:fe:8d:7a: c5:ce:60:14:90:14:bd:d0:bb:e4:96:4e:fd:db:39:87:09:28: b1:aa:d6:3f:8b:9c:52:7c:88:69:93:5e:6c:b1:af:fd:85:51: 82:67:0c:24:d9:db:12:96:62:95:34:78:ed:30:57:6f:6e:ba: 04:d3:67:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0MA2TvU7SUC1hlioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE1MTgwN1oXDTI2MDYwMTE0MTgwN1owLzEtMCsGA1UEAxMk MzQ5OTVlNTUtNmFiMC00ZGEzLWI5NzgtN2U2ODUzYjRiMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtOZpqxnnxTFbgAFot+vrNzsT7I7lKBJsBdS 7iWOg36RhT4bm++qLCzpIIfO4CjS1MTkLrZJulCBoZr/OEDStHuK4hd8sWglDkd6 R8MC0gtRh2BvztdVnce/pyYZcqf40EIPInuln/tmweH0U4b9SjrLmjK6TACm5PWl ppDDSulK3Z+4oX40jD06WqAdVdvjAEZxC08hWFBTiWOz7boRn4TZj8NqOP07DOhG CZ5w6UpK+flymsHxRgBgX9xZ15IlTD+Ays12VjZQpQZBY/qmExKwMzh0C8pc3Uhe XHS1u/14OrNbf/qHr2ID8VPUEfh9JaerFDXjNskoO2Tkx9YDbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMYQaN1ZokZgKdJts+WNfzwaXrmlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjFmNjM4YTQtZmQzYS0z ODYxLTlhMzQtODJhYWYxMjNmMTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKYDPdoWK58y43urES0FP5mRwSDd2fV/divva3LqacwPe7WYtwFV cBGaOQoBb4ew6Zmezygr2YFYb62Ye9gQ+sD4kERhvJwyqgpkdqL2qZkpMP2jnzHG efqwC9yAIhOUv5gVjpsNqyAu86QMv2GS4oh4TQZOvCiFtql5FICLfps+mS29fwMT brFm3oJnd11vN5gU3VR64Kz2/fRrAXZXPhYRN2fMPzvrW54DwxGBzq2COaPPRK39 7t6jI4Df+pF4OtaPff6NesXOYBSQFL3Qu+SWTv3bOYcJKLGq1j+LnFJ8iGmTXmyx r/2FUYJnDCTZ2xKWYpU0eO0wV29uugTTZ6Q= -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:15 2026 by rpki-client