$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9a59eb-53ec-39ea-aa83-9fae33b234ae.roa File: 1a9a59eb-53ec-39ea-aa83-9fae33b234ae.roa (raw, json) Hash identifier: Bv0tCbIhbxNsr4Ge0w7TgKRgYpW4vScfgpdBIKcwbKs= Subject key identifier: 59:38:11:0E:6C:47:92:E8:67:DB:26:BA:FA:27:F6:58:18:F7:7D:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C2F539EB8C304051D7E80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9a59eb-53ec-39ea-aa83-9fae33b234ae.roa Signing time: Thu 12 Mar 2026 14:31:02 +0000 ROA not before: Thu 12 Mar 2026 14:31:02 +0000 ROA not after: Wed 10 Jun 2026 14:31:02 +0000 asID: 396549 IP address blocks: 2001:500:d937::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:2f:53:9e:b8:c3:04:05:1d:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:02 2026 GMT Not After : Jun 10 14:31:02 2026 GMT Subject: CN=58a090ff-1e6e-48a7-bbb6-481f1a1bf043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:43:4f:9e:23:50:5e:7b:5f:5b:4e:09:16:b1: af:1b:0e:d7:6f:90:7e:87:41:52:1d:7c:ad:ee:0f: 71:47:75:b5:e4:a7:ba:9e:65:7c:ef:25:68:8a:35: e2:e4:3d:82:c4:53:61:a4:68:f2:f0:c9:fd:35:d4: d1:8e:05:99:96:18:ac:92:50:c3:e5:2e:0a:1a:c8: e3:7f:9d:bd:d5:26:4e:13:50:ba:90:d0:e0:1d:d0: 3e:76:90:2a:b8:ba:ea:f0:34:56:5a:11:ab:ff:fc: 82:ed:1c:18:20:92:f1:00:95:8f:74:eb:5e:74:bd: f8:f3:65:ce:61:50:ef:b5:a2:2a:28:a4:bb:a8:36: 5d:a2:f8:16:9c:71:90:a6:69:42:86:25:14:7a:fe: 6f:f5:a2:78:02:15:24:31:d9:ba:fb:ce:a3:e0:42: 01:42:52:63:26:2c:c9:6b:cb:b5:03:56:a8:1a:63: 1e:f8:d7:63:ee:4c:4f:36:cd:6e:87:1a:c9:ee:3c: 4f:7e:e2:ad:3f:1f:15:99:87:73:cf:95:26:ba:ce: 2a:9a:8b:05:57:61:70:86:5f:1a:9b:b8:0a:cb:d6: f9:76:d6:37:b5:fd:48:47:df:1f:3d:66:13:62:32: c6:91:c4:fa:85:5f:55:2d:7e:ff:3f:e4:f3:f2:72: 56:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:38:11:0E:6C:47:92:E8:67:DB:26:BA:FA:27:F6:58:18:F7:7D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1a9a59eb-53ec-39ea-aa83-9fae33b234ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:76:83:8d:87:90:9f:cf:fb:e2:c4:c6:44:48:05:3d:d1:7c: 89:87:a5:fc:48:ff:d5:bf:a6:aa:fa:99:c8:20:e7:17:43:32: 48:bd:b0:00:03:14:28:39:ad:b1:67:69:15:79:d0:99:42:86: fc:ae:e3:93:43:62:3a:53:58:c7:7c:af:d9:6a:cb:27:5b:c0: f0:fe:5d:ca:3d:dc:f3:16:87:f3:a5:6f:6c:73:21:b9:65:01: 75:b1:a0:2e:75:d7:a3:79:e5:4a:3e:bb:ca:13:fe:be:de:c6: 3a:c3:d9:80:49:3b:6a:8f:6b:82:87:75:a6:b2:3d:5f:36:5d: 81:58:6f:23:57:f5:ca:46:73:b2:11:10:9a:4e:f0:a5:71:eb: 5f:2d:bf:4b:99:c6:27:82:f1:7a:07:72:31:08:3c:64:30:42: 74:6e:01:0b:1a:ca:77:19:d4:2f:15:51:8f:43:29:92:66:a9: 91:31:dd:a8:31:1c:fd:9e:de:59:10:f0:c8:b1:2b:2c:95:74: 04:b5:0d:db:90:a2:e9:ae:1e:a7:fe:fc:82:e8:80:7c:97:97: 81:68:fc:88:4e:4d:bf:38:c8:ff:de:8b:4b:48:94:57:2a:eb: d6:bb:49:6d:8c:08:b5:76:9f:50:f7:15:57:ce:29:d0:76:bb: 4d:6d:b2:82 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0lDC9TnrjDBAUdfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwMloXDTI2MDYxMDE0MzEwMlowLzEtMCsGA1UEAxMk NThhMDkwZmYtMWU2ZS00OGE3LWJiYjYtNDgxZjFhMWJmMDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUNPniNQXntfW04JFrGvGw7Xb5B+h0FSHXyt 7g9xR3W15Ke6nmV87yVoijXi5D2CxFNhpGjy8Mn9NdTRjgWZlhisklDD5S4KGsjj f5291SZOE1C6kNDgHdA+dpAquLrq8DRWWhGr//yC7RwYIJLxAJWPdOtedL3482XO YVDvtaIqKKS7qDZdovgWnHGQpmlChiUUev5v9aJ4AhUkMdm6+86j4EIBQlJjJizJ a8u1A1aoGmMe+Ndj7kxPNs1uhxrJ7jxPfuKtPx8VmYdzz5Umus4qmosFV2Fwhl8a m7gKy9b5dtY3tf1IR98fPWYTYjLGkcT6hV9VLX7/P+Tz8nJWUwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFFk4EQ5sR5LoZ9smuvon9lgY931pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWE5YTU5ZWItNTNlYy0z OWVhLWFhODMtOWZhZTMzYjIzNGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA0doONh5Cfz/vixMZESAU90XyJh6X8SP/Vv6aq +pnIIOcXQzJIvbAAAxQoOa2xZ2kVedCZQob8ruOTQ2I6U1jHfK/ZassnW8Dw/l3K PdzzFofzpW9scyG5ZQF1saAuddejeeVKPrvKE/6+3sY6w9mASTtqj2uCh3Wmsj1f Nl2BWG8jV/XKRnOyERCaTvClcetfLb9LmcYngvF6B3IxCDxkMEJ0bgELGsp3GdQv FVGPQymSZqmRMd2oMRz9nt5ZEPDIsSsslXQEtQ3bkKLprh6n/vyC6IB8l5eBaPyI Tk2/OMj/3otLSJRXKuvWu0ltjAi1dp9Q9xVXzinQdrtNbbKC -----END CERTIFICATE-----Generated at Thu Mar 26 11:06:58 2026 by rpki-client