$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/faaa56f5-1820-36ec-b884-395416ab06a0.roa File: faaa56f5-1820-36ec-b884-395416ab06a0.roa (raw, json) Hash identifier: sKUj52zgt7oFNTYku7CN1rd+o5dVBWNEprIAGv8EIYA= Subject key identifier: 36:6A:1D:D4:74:86:FC:59:10:46:DD:DF:D5:B8:82:28:FA:EA:EA:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFFA53889F4DD96CFD96D40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/faaa56f5-1820-36ec-b884-395416ab06a0.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396582 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:a5:38:89:f4:dd:96:cf:d9:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=daf22c78-3aed-4408-9393-12f1f2f69e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:13:ba:1b:06:31:ff:c3:14:2f:fd:61:ab:2f: e3:8b:8d:ca:a7:97:a8:5c:cb:01:88:4b:e8:bc:70: 0a:15:7c:d5:3e:84:dd:4f:b4:b0:00:0a:28:05:13: b4:e2:69:e2:a6:01:28:39:31:6d:06:60:ac:8f:2b: f2:26:9e:13:3f:96:1b:04:22:c8:ec:f7:a5:51:e4: 11:32:f2:9e:3a:7f:74:59:f4:17:70:fa:87:f9:9b: 2a:b0:a1:55:f9:6a:dd:b5:0f:03:0b:3c:ca:8d:37: 5c:05:c5:bf:0c:7c:8b:6b:6e:4f:05:a9:fe:9d:e6: 5e:ac:5c:a5:fe:76:fa:0d:69:78:dd:40:70:67:52: 13:a1:56:12:e4:90:14:7e:95:b1:95:a6:ce:be:28: 39:44:0c:93:b7:a2:57:4d:cf:bc:7b:04:86:16:d9: e3:d6:f9:ad:83:71:8a:66:43:e4:37:d0:81:ca:b5: 72:b8:32:87:60:f7:5a:95:52:59:9b:f5:18:be:5a: 44:01:1f:c5:09:7a:71:b8:e2:0d:dd:4e:f3:d7:31: 30:2e:af:89:87:7f:13:a2:a7:64:c5:e8:a4:66:27: 60:13:dc:cd:f7:92:35:fd:f1:11:09:04:e2:2f:09: 22:e3:82:6c:84:b2:9f:a1:c6:9d:27:9f:38:db:77: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:6A:1D:D4:74:86:FC:59:10:46:DD:DF:D5:B8:82:28:FA:EA:EA:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/faaa56f5-1820-36ec-b884-395416ab06a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:90:ec:b3:77:f6:18:34:a9:3a:ef:97:3c:18:c9:de:9d:a6: 7f:27:ef:c9:0a:60:5a:b1:ce:af:4f:a1:3c:68:c9:f8:11:03: 8d:a3:22:e0:7f:5f:bb:d1:65:db:bf:b2:e0:23:cf:8f:66:5d: 2a:2a:9c:d5:74:e1:6e:d5:22:88:ab:b6:d0:c1:9c:6c:b3:55: 61:84:57:33:d3:53:fc:3c:47:87:7c:25:74:c4:9d:2e:50:a8: 67:45:92:82:9f:89:d5:4a:b4:55:c0:ff:97:01:6d:30:98:32: bb:bc:20:60:c0:a5:1c:d3:90:1a:43:ff:59:8b:9b:34:80:16: 37:63:95:6f:b3:bf:51:63:5a:b9:a1:28:cd:89:08:47:5b:f2: 6f:ec:00:23:1d:6d:57:68:a4:8f:c9:5c:c6:cc:8d:96:69:59: e5:d9:d3:8c:cd:ca:db:6f:91:78:5a:e4:1b:dc:88:55:fa:b9: 0e:fd:ff:4d:78:85:62:69:2c:9c:9d:b0:d6:7b:67:fd:c7:73: 39:f3:da:33:f1:18:53:40:23:18:c9:25:16:62:fe:1c:9a:0c: 7b:83:a7:5a:1b:b2:c5:ec:07:61:03:34:af:3f:55:33:3d:3b: 57:ff:c6:a3:2a:b3:a2:d7:dd:9e:2a:bf:ca:2c:38:8b:e8:34: bb:ca:d2:6f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/6U4ifTdls/ZbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGFmMjJjNzgtM2FlZC00NDA4LTkzOTMtMTJmMWYyZjY5ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RO6GwYx/8MUL/1hqy/ji43Kp5eoXMsBiEvo vHAKFXzVPoTdT7SwAAooBRO04mnipgEoOTFtBmCsjyvyJp4TP5YbBCLI7PelUeQR MvKeOn90WfQXcPqH+ZsqsKFV+WrdtQ8DCzzKjTdcBcW/DHyLa25PBan+neZerFyl /nb6DWl43UBwZ1IToVYS5JAUfpWxlabOvig5RAyTt6JXTc+8ewSGFtnj1vmtg3GK ZkPkN9CByrVyuDKHYPdalVJZm/UYvlpEAR/FCXpxuOIN3U7z1zEwLq+Jh38Toqdk xeikZidgE9zN95I1/fERCQTiLwki44JshLKfocadJ58423d/iQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDZqHdR0hvxZEEbd39W4gij66uqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZmFhYTU2ZjUtMTgyMC0z NmVjLWI4ODQtMzk1NDE2YWIwNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqQ7LN39hg0qTrvlzwYyd6dpn8n78kKYFqxzq9PoTxoyfgRA42j IuB/X7vRZdu/suAjz49mXSoqnNV04W7VIoirttDBnGyzVWGEVzPTU/w8R4d8JXTE nS5QqGdFkoKfidVKtFXA/5cBbTCYMru8IGDApRzTkBpD/1mLmzSAFjdjlW+zv1Fj WrmhKM2JCEdb8m/sACMdbVdopI/JXMbMjZZpWeXZ04zNyttvkXha5BvciFX6uQ79 /014hWJpLJydsNZ7Z/3Hcznz2jPxGFNAIxjJJRZi/hyaDHuDp1obssXsB2EDNK8/ VTM9O1f/xqMqs6LX3Z4qv8osOIvoNLvK0m8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:22 2026 by rpki-client