$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa File: f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa (raw, json) Hash identifier: JxLHlAqjWzEkCHjhyalu9lVsLgbkHUqTc73EXEA5Bok= Subject key identifier: 22:6B:5E:FD:60:87:30:FA:47:CE:A9:03:C9:99:14:E5:57:11:84:6D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F4A69CAE75EC2B178C84C60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396594 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:69:ca:e7:5e:c2:b1:78:c8:4c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=9cc0c7aa-0336-4beb-afee-0ac062055313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:94:7a:53:78:e2:84:e7:9c:fa:eb:4b:3c: 08:bd:16:3b:a9:1d:f9:44:3b:b4:39:72:f1:f8:ab: ff:ba:3d:e8:7b:b2:a8:55:19:83:cd:6d:42:fa:85: b1:aa:04:46:9b:43:4f:99:6d:d7:fc:9d:a9:d6:5b: da:20:26:08:33:03:a8:a4:8e:60:d7:f4:1f:21:cd: 9a:e8:59:52:05:8f:6d:6b:eb:8f:d9:58:16:22:8b: 03:70:d7:9f:e9:6a:f4:76:c9:25:ef:2f:fb:40:6e: ef:37:6a:84:78:ef:81:1a:55:9c:71:1b:4e:1c:df: c4:b3:85:63:97:72:11:02:df:6f:03:b8:5e:6c:46: 41:2c:b5:70:2d:9e:d9:ec:33:76:8e:a8:c9:71:8b: 34:ed:a7:ba:ff:07:f5:74:b8:b5:c2:5d:fc:64:97: 55:af:45:e6:d8:28:fd:93:67:5f:2e:5e:b6:2d:b9: 27:ce:52:57:6d:d9:3e:79:77:8b:9a:d8:f6:51:8d: 21:8e:ce:ad:f0:d6:ab:e9:1a:ac:3b:2a:96:de:f5: 97:f3:ff:31:49:44:45:05:3f:32:ea:20:c9:17:b4: d2:cc:fb:bd:23:76:cf:54:4d:ea:d7:65:89:3b:fb: 81:e2:6e:99:08:de:f8:e7:e0:7a:89:72:f0:6c:04: d3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6B:5E:FD:60:87:30:FA:47:CE:A9:03:C9:99:14:E5:57:11:84:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f2ac9d71-2f2d-373b-86a3-fd82fb46cc06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:41:6a:0b:94:fa:b0:15:41:65:d4:20:b4:f0:2b:0e:1e:68: 6e:26:84:29:db:e5:36:e1:3d:df:74:2c:76:8c:f2:66:57:a0: de:d5:7d:71:59:7e:f9:2b:d8:93:cd:e5:02:00:b6:4b:a8:25: a0:5c:d7:d5:bb:8f:dc:1f:10:e9:20:b6:cd:cc:38:fc:9d:76: 9d:77:0d:4d:63:b8:4b:b7:71:fd:78:c1:22:97:fb:7e:25:67: cc:f1:33:11:c0:10:3e:a5:1c:a8:70:63:c1:db:24:03:c4:71: d9:28:ec:9f:c2:07:ad:2e:eb:94:54:44:0c:fa:53:45:d3:ba: db:16:ca:51:d6:30:bc:1b:cc:30:d6:38:73:15:27:fe:68:b2: 55:d6:6a:77:ca:e8:36:41:bb:bb:67:f3:23:de:ea:46:e7:d4: 37:22:0d:bc:02:24:40:0c:ba:f5:d4:e6:75:98:e0:31:a1:ce: f9:6b:4a:70:3e:2f:12:2a:2d:02:f7:9d:d1:60:52:1a:85:6d: d0:cb:07:9b:16:09:20:5b:b9:fd:f2:61:87:bc:0a:e4:fd:1a: f1:ed:a4:5b:58:22:05:32:87:8e:3d:31:a2:d7:41:26:e8:0e: 41:90:09:0a:b5:ba:b9:43:9a:81:ff:51:16:ae:89:24:c6:d0: 5d:45:0d:1f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmnK517CsXjITGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk OWNjMGM3YWEtMDMzNi00YmViLWFmZWUtMGFjMDYyMDU1MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0SUelN44oTnnPrrSzwIvRY7qR35RDu0OXLx +Kv/uj3oe7KoVRmDzW1C+oWxqgRGm0NPmW3X/J2p1lvaICYIMwOopI5g1/QfIc2a 6FlSBY9ta+uP2VgWIosDcNef6Wr0dskl7y/7QG7vN2qEeO+BGlWccRtOHN/Es4Vj l3IRAt9vA7hebEZBLLVwLZ7Z7DN2jqjJcYs07ae6/wf1dLi1wl38ZJdVr0Xm2Cj9 k2dfLl62LbknzlJXbdk+eXeLmtj2UY0hjs6t8Nar6RqsOyqW3vWX8/8xSURFBT8y 6iDJF7TSzPu9I3bPVE3q12WJO/uB4m6ZCN745+B6iXLwbATTrQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCJrXv1ghzD6R86pA8mZFOVXEYRtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjJhYzlkNzEtMmYyZC0z NzNiLTg2YTMtZmQ4MmZiNDZjYzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCKQWoLlPqwFUFl1CC08CsOHmhuJoQp2+U24T3f dCx2jPJmV6De1X1xWX75K9iTzeUCALZLqCWgXNfVu4/cHxDpILbNzDj8nXaddw1N Y7hLt3H9eMEil/t+JWfM8TMRwBA+pRyocGPB2yQDxHHZKOyfwgetLuuUVEQM+lNF 07rbFspR1jC8G8ww1jhzFSf+aLJV1mp3yug2Qbu7Z/Mj3upG59Q3Ig28AiRADLr1 1OZ1mOAxoc75a0pwPi8SKi0C953RYFIahW3QywebFgkgW7n98mGHvArk/Rrx7aRb WCIFMoeOPTGi10Em6A5BkAkKtbq5Q5qB/1EWrokkxtBdRQ0f -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:50 2026 by rpki-client