$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa File: f95efeb0-478b-3005-ad06-ce323f2af52b.roa (raw, json) Hash identifier: lI9SytYTulMcz1TcDEL6YyC/jzjffZ5nr/WtIJSaU+Y= Subject key identifier: 67:0D:36:03:22:BB:4A:4B:21:B4:7A:4E:1C:66:83:57:E5:F2:43:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F4A67A6DEFD64E220AE1700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 32651 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:67:a6:de:fd:64:e2:20:ae:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=1b711f73-6704-44f2-8249-e6fd67b74c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:2c:b1:1d:01:18:65:6e:33:ae:ae:a9:91:00: ef:bd:80:02:0b:92:8b:20:d5:93:db:aa:d5:c2:6f: f3:95:db:ba:7f:96:76:43:8a:e1:e4:13:7a:b2:d8: 57:ea:62:56:f5:f2:53:b5:24:1d:88:02:fb:ef:55: a7:0e:7f:eb:83:5a:70:4f:b4:e0:5f:57:bd:46:50: 36:14:3a:4f:44:41:bb:6b:37:da:23:ef:da:1f:94: 9d:b2:47:cb:f5:a6:22:13:e1:32:2b:53:50:67:65: ae:36:9b:71:6d:54:d4:bf:2a:7f:9a:4b:70:0e:5d: f4:fe:5d:02:a7:be:78:87:37:c9:4e:84:ab:67:51: a8:2d:30:fe:1b:76:88:81:8b:55:1b:7a:47:a8:5b: 62:4c:1e:34:d2:f4:43:bf:88:75:24:0d:43:3f:cd: cb:e4:fb:97:d8:f4:c6:17:3b:1a:ce:28:89:f6:70: 37:bd:41:d4:df:74:dc:5a:29:23:d3:f8:66:2b:b8: ca:45:3e:a4:5f:e2:3a:d4:76:b7:c2:cb:61:5d:57: 15:73:2a:2c:a7:47:89:59:81:29:95:20:46:4e:eb: 81:64:06:6a:17:7f:7a:3f:f2:1e:e4:2d:51:87:30: 80:3d:d1:d0:17:43:81:e9:3f:ee:42:b2:6b:ba:aa: 91:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0D:36:03:22:BB:4A:4B:21:B4:7A:4E:1C:66:83:57:E5:F2:43:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f95efeb0-478b-3005-ad06-ce323f2af52b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:86:18:78:d0:70:7f:f9:f1:84:38:31:19:ab:d2:de:5f:42: d6:63:b6:8d:06:7e:19:c0:c6:e8:90:e0:59:65:5e:32:31:e4: 27:3f:7b:71:f5:89:92:8d:23:81:34:c1:64:09:4d:70:d6:1a: 4a:37:89:e0:c2:7d:51:38:7b:5f:c3:63:24:cd:b6:c3:69:1a: fb:aa:83:76:3a:df:a9:3b:3b:02:4f:6b:3e:fe:d3:5f:9d:5b: 53:53:a3:1d:fb:46:4d:54:6f:16:c7:fe:bf:ac:dd:9b:be:a1: 53:97:7f:e4:18:5b:13:4c:d8:29:74:a9:6f:5d:50:0d:96:b5: ed:bf:94:de:a0:84:10:43:c4:7d:67:a9:88:01:02:88:14:74: b7:50:37:0e:32:77:5a:c6:36:e1:72:bb:7b:54:e7:a3:e1:34: 81:6a:fe:f7:25:ec:af:1a:0a:42:b5:50:3c:a1:19:5a:de:41: 73:c2:5f:f8:28:0a:86:9d:eb:3a:c2:9a:03:21:24:36:69:1e: 52:67:08:1c:ae:b4:07:29:27:b3:c9:53:d3:c9:f5:63:7f:4f: 38:10:fc:c4:c3:77:e9:e4:28:9b:0c:df:cd:b5:2b:ff:7a:16: 73:8b:96:f7:62:50:b2:fb:ea:59:d9:0a:e6:84:9e:af:a7:15: c3:5b:d6:b1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmem3v1k4iCuFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MWI3MTFmNzMtNjcwNC00NGYyLTgyNDktZTZmZDY3Yjc0YzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCyxHQEYZW4zrq6pkQDvvYACC5KLINWT26rV wm/zldu6f5Z2Q4rh5BN6sthX6mJW9fJTtSQdiAL771WnDn/rg1pwT7TgX1e9RlA2 FDpPREG7azfaI+/aH5SdskfL9aYiE+EyK1NQZ2WuNptxbVTUvyp/mktwDl30/l0C p754hzfJToSrZ1GoLTD+G3aIgYtVG3pHqFtiTB400vRDv4h1JA1DP83L5PuX2PTG FzsaziiJ9nA3vUHU33TcWikj0/hmK7jKRT6kX+I61Ha3wsthXVcVcyosp0eJWYEp lSBGTuuBZAZqF396P/Ie5C1RhzCAPdHQF0OB6T/uQrJruqqRrwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGcNNgMiu0pLIbR6Thxmg1fl8kM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjk1ZWZlYjAtNDc4Yi0z MDA1LWFkMDYtY2UzMjNmMmFmNTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQClhhh40HB/+fGEODEZq9LeX0LWY7aNBn4ZwMbo kOBZZV4yMeQnP3tx9YmSjSOBNMFkCU1w1hpKN4ngwn1ROHtfw2MkzbbDaRr7qoN2 Ot+pOzsCT2s+/tNfnVtTU6Md+0ZNVG8Wx/6/rN2bvqFTl3/kGFsTTNgpdKlvXVAN lrXtv5TeoIQQQ8R9Z6mIAQKIFHS3UDcOMndaxjbhcrt7VOej4TSBav73JeyvGgpC tVA8oRla3kFzwl/4KAqGnes6wpoDISQ2aR5SZwgcrrQHKSezyVPTyfVjf084EPzE w3fp5CibDN/NtSv/ehZzi5b3YlCy++pZ2QrmhJ6vpxXDW9ax -----END CERTIFICATE-----Generated at Thu Mar 26 16:57:07 2026 by rpki-client