$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12c11831-fe60-3e45-99d2-16a30e8adf5b.roa File: 12c11831-fe60-3e45-99d2-16a30e8adf5b.roa (raw, json) Hash identifier: po1AvvCrizB1sQoMr++AaeQW/8QyG/qMR+5jgYwH+EA= Subject key identifier: D8:D8:02:67:EE:24:55:DE:56:13:26:F8:53:BD:6C:68:29:B2:18:A8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F759D6E0344DCAC9EDB73BC Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12c11831-fe60-3e45-99d2-16a30e8adf5b.roa Signing time: Tue 10 Mar 2026 14:28:37 +0000 ROA not before: Tue 10 Mar 2026 14:28:37 +0000 ROA not after: Mon 08 Jun 2026 14:28:37 +0000 asID: 211369 IP address blocks: 2001:503:d414::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:9d:6e:03:44:dc:ac:9e:db:73:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:37 2026 GMT Not After : Jun 8 14:28:37 2026 GMT Subject: CN=59a2c418-9b7e-4189-ba62-a4c864696898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:35:b8:ea:bb:b9:d1:74:f4:dc:e0:ef:ac: b4:c0:da:ab:33:b0:1c:09:c8:92:62:8c:b4:f0:84: fb:5d:f3:34:e2:2a:8f:46:95:79:bd:18:10:83:8c: 84:f8:48:2c:c3:94:67:0f:42:d6:5e:20:cb:15:e0: 43:23:2b:99:ce:9e:f5:ec:a0:9a:b0:52:f2:8d:5d: 81:cf:4b:44:2b:b0:75:03:7c:2b:49:65:2e:f7:f3: b6:1e:f0:61:68:9b:f9:e9:9b:59:60:5d:43:4c:1f: 81:6f:05:d5:e4:fe:c4:3c:26:18:c2:dd:94:95:6d: b3:42:53:f3:e2:09:69:a8:ad:3a:c2:72:1d:51:82: 98:d0:14:85:bd:ca:18:f9:ed:67:a6:0e:04:ee:b7: 29:cb:2d:1f:fc:4d:c0:aa:73:d5:49:48:81:05:1b: 5e:07:e9:18:aa:77:30:39:dc:3e:43:d6:ab:99:4d: 07:7b:9e:73:44:e3:b9:e8:60:79:a3:04:78:60:b0: 40:83:1c:17:e2:10:51:5b:76:f2:94:41:4e:be:9d: 54:67:14:90:37:ef:ac:3d:a1:46:65:30:4b:c6:d5: cb:a3:0b:14:2d:1c:87:80:63:9a:a4:05:12:27:96: 40:9c:f8:da:ca:19:aa:79:22:c9:64:bc:6f:e1:57: 21:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D8:02:67:EE:24:55:DE:56:13:26:F8:53:BD:6C:68:29:B2:18:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/12c11831-fe60-3e45-99d2-16a30e8adf5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:8d:b5:fc:74:86:35:37:9d:61:68:11:18:4b:6f:d8:7b:2f: 05:e8:b8:1f:43:20:33:8e:76:07:71:9c:8c:18:93:1e:50:88: ec:62:98:4a:d9:42:04:6d:f7:20:c3:25:51:8e:c2:21:a2:b3: 66:82:d1:75:57:40:a7:3b:74:00:90:05:8b:1b:39:d1:b4:d2: 13:1e:89:f7:f8:09:f5:8d:70:57:2e:ec:5e:43:37:6a:f7:60: b9:41:d2:d2:77:3e:6c:9a:ee:6a:f8:e8:f5:fa:62:ef:4f:cf: 3a:5f:45:11:17:1d:77:6b:6a:cd:fb:97:a7:b6:4d:ac:05:c9: be:d0:c0:c4:1e:46:e7:7c:f4:0d:5f:cf:01:10:ad:b4:72:72: 67:05:d3:18:fc:b4:c1:c9:73:6e:01:d7:10:89:cd:e9:44:44: 6a:56:27:2c:99:dd:e3:59:a0:45:ea:6f:61:0c:ff:b0:eb:a5: 57:19:57:a9:3f:91:29:66:7e:81:64:40:fe:d1:ca:89:6c:b9: db:3a:97:64:a2:e4:9a:65:be:17:95:1d:93:94:da:c3:dc:22: f9:ac:4b:08:a0:08:20:a3:db:2f:56:b7:62:11:70:e5:55:90: 68:9e:dc:13:7e:e5:e3:e7:89:04:f8:a3:dc:ce:b8:8b:63:63: 30:f0:23:33 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fdZ1uA0TcrJ7bc7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0MjgzN1oXDTI2MDYwODE0MjgzN1owLzEtMCsGA1UEAxMk NTlhMmM0MTgtOWI3ZS00MTg5LWJhNjItYTRjODY0Njk2ODk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL81uOq7udF09Nzg76y0wNqrM7AcCciSYoy0 8IT7XfM04iqPRpV5vRgQg4yE+Egsw5RnD0LWXiDLFeBDIyuZzp717KCasFLyjV2B z0tEK7B1A3wrSWUu9/O2HvBhaJv56ZtZYF1DTB+BbwXV5P7EPCYYwt2UlW2zQlPz 4glpqK06wnIdUYKY0BSFvcoY+e1npg4E7rcpyy0f/E3AqnPVSUiBBRteB+kYqncw Odw+Q9armU0He55zROO56GB5owR4YLBAgxwX4hBRW3bylEFOvp1UZxSQN++sPaFG ZTBLxtXLowsULRyHgGOapAUSJ5ZAnPjayhmqeSLJZLxv4VchoQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNjYAmfuJFXeVhMm+FO9bGgpshioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTJjMTE4MzEtZmU2MC0z ZTQ1LTk5ZDItMTZhMzBlOGFkZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA9QU AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAhjbX8dIY1N51haBEYS2/Yey8F6LgfQyAzjnYH cZyMGJMeUIjsYphK2UIEbfcgwyVRjsIhorNmgtF1V0CnO3QAkAWLGznRtNITHon3 +An1jXBXLuxeQzdq92C5QdLSdz5smu5q+Oj1+mLvT886X0URFx13a2rN+5entk2s Bcm+0MDEHkbnfPQNX88BEK20cnJnBdMY/LTByXNuAdcQic3pRERqVicsmd3jWaBF 6m9hDP+w66VXGVepP5EpZn6BZED+0cqJbLnbOpdkouSaZb4XlR2TlNrD3CL5rEsI oAggo9svVrdiEXDlVZBontwTfuXj54kE+KPczriLY2Mw8CMz -----END CERTIFICATE-----Generated at Thu Mar 26 10:59:37 2026 by rpki-client