$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25be11df-4827-32db-a6f3-0711042d32ca.roa File: 25be11df-4827-32db-a6f3-0711042d32ca.roa (raw, json) Hash identifier: iM9WQDBUKIWHM9aqKaoDluS5cdUPXKZcRWOFJ3GZ06w= Subject key identifier: D7:9F:34:DA:00:CC:3D:35:9F:9D:7C:73:DE:D2:38:3E:57:E1:09:AD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C36756E32335A95BF6080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25be11df-4827-32db-a6f3-0711042d32ca.roa Signing time: Thu 12 Mar 2026 14:31:05 +0000 ROA not before: Thu 12 Mar 2026 14:31:05 +0000 ROA not after: Wed 10 Jun 2026 14:31:05 +0000 asID: 397193 IP address blocks: 2001:500:d937::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:36:75:6e:32:33:5a:95:bf:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:05 2026 GMT Not After : Jun 10 14:31:05 2026 GMT Subject: CN=0171edf9-4855-4fbd-9e4f-435add82950f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cb:85:f0:cf:d6:bb:3e:a1:98:14:ce:5c:cf: 2b:3f:68:a1:0b:91:c8:6c:f7:57:2f:19:60:76:3f: c0:1b:e4:8c:a9:2a:43:d4:43:d4:ef:49:c2:a6:b5: 2b:52:4e:36:3b:fc:fc:1e:51:7f:23:a7:e9:fc:7d: f7:cc:a6:66:42:eb:e8:85:f0:de:5b:d4:1f:81:7c: f0:28:1e:c8:3e:22:27:19:73:6b:69:af:c0:fb:61: 03:6b:10:5f:ff:99:f5:4a:da:33:18:02:06:71:8c: 60:a2:0d:96:af:10:74:61:1a:92:bd:fc:e3:36:b6: 39:34:88:f3:79:7c:57:37:02:9a:f3:f3:90:5b:fc: 8b:2f:b8:8e:e2:45:0f:3f:e8:a2:43:63:06:d9:33: 2f:88:00:3b:a6:ba:06:6d:a0:a1:f5:9f:20:c2:d1: bc:d3:5b:f0:96:c6:37:3f:53:36:53:0a:df:18:20: ce:49:24:8d:8c:7f:eb:89:7a:eb:c0:f4:c0:a2:80: b1:24:59:95:f2:96:c8:7c:96:1b:70:b2:c6:dc:cb: 86:4e:95:d2:49:1d:37:d4:1e:ca:23:f1:90:86:7a: 8f:c4:84:94:9c:fe:bb:0d:0b:79:7c:a1:f6:42:d9: 5f:4d:55:07:69:ea:e8:c2:27:44:ab:79:ef:82:a9: 27:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9F:34:DA:00:CC:3D:35:9F:9D:7C:73:DE:D2:38:3E:57:E1:09:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/25be11df-4827-32db-a6f3-0711042d32ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b5:74:bb:d2:da:38:a5:b5:57:7c:40:35:f5:7f:90:f8:7a: ed:aa:bb:1d:b1:99:c9:85:c4:6b:90:f4:7b:ea:3c:72:5b:aa: c5:6e:99:6a:8d:cd:02:51:56:bd:35:1a:28:d4:54:10:d1:cf: 73:e9:42:49:c2:08:20:dd:49:18:8c:eb:26:01:73:cf:4a:5e: b7:26:67:2f:4b:f9:17:d2:bc:93:24:f4:32:62:d7:94:f7:0e: 33:e7:68:1a:cc:8c:2c:2e:e3:4b:b6:12:4c:76:82:96:38:a8: 55:4c:42:25:c7:58:ae:d8:52:d7:95:be:75:1a:3d:d7:5d:e6: d0:77:5f:31:e5:d3:d9:72:30:8a:9b:ba:ba:d6:a4:80:77:17: 33:f3:dc:67:03:0c:2e:de:2d:c1:3f:da:85:76:a4:5c:40:2e: 30:f2:f1:14:6a:fb:dd:e6:5c:3a:6e:7b:fd:1e:ee:1d:f4:24: 69:22:16:03:b0:44:60:77:a8:ec:d0:aa:59:30:8b:27:d1:dd: 3c:1a:2c:c5:99:f0:ec:96:0b:b7:e5:6d:c6:b7:48:44:75:90: 91:cb:cf:4f:ac:9e:89:cc:4d:b8:43:99:83:45:db:a8:01:9d: f1:91:10:c7:bf:01:d4:39:d7:0e:07:f3:7f:5b:80:65:a9:5b: c6:d8:2c:7f -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0lDDZ1bjIzWpW/YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwNVoXDTI2MDYxMDE0MzEwNVowLzEtMCsGA1UEAxMk MDE3MWVkZjktNDg1NS00ZmJkLTllNGYtNDM1YWRkODI5NTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsuF8M/Wuz6hmBTOXM8rP2ihC5HIbPdXLxlg dj/AG+SMqSpD1EPU70nCprUrUk42O/z8HlF/I6fp/H33zKZmQuvohfDeW9QfgXzw KB7IPiInGXNraa/A+2EDaxBf/5n1StozGAIGcYxgog2WrxB0YRqSvfzjNrY5NIjz eXxXNwKa8/OQW/yLL7iO4kUPP+iiQ2MG2TMviAA7proGbaCh9Z8gwtG801vwlsY3 P1M2UwrfGCDOSSSNjH/riXrrwPTAooCxJFmV8pbIfJYbcLLG3MuGTpXSSR031B7K I/GQhnqPxISUnP67DQt5fKH2QtlfTVUHaerowidEq3nvgqknKQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNefNNoAzD01n518c97SOD5X4QmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjViZTExZGYtNDgyNy0z MmRiLWE2ZjMtMDcxMTA0MmQzMmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBMtXS70to4pbVXfEA19X+Q+HrtqrsdsZnJhcRr kPR76jxyW6rFbplqjc0CUVa9NRoo1FQQ0c9z6UJJwggg3UkYjOsmAXPPSl63Jmcv S/kX0ryTJPQyYteU9w4z52gazIwsLuNLthJMdoKWOKhVTEIlx1iu2FLXlb51Gj3X XebQd18x5dPZcjCKm7q61qSAdxcz89xnAwwu3i3BP9qFdqRcQC4w8vEUavvd5lw6 bnv9Hu4d9CRpIhYDsERgd6js0KpZMIsn0d08GizFmfDslgu35W3Gt0hEdZCRy89P rJ6JzE24Q5mDRduoAZ3xkRDHvwHUOdcOB/N/W4BlqVvG2Cx/ -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:14 2026 by rpki-client