$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28014b90-2c15-3d8b-89a7-d69be7a4e7c6.roa File: 28014b90-2c15-3d8b-89a7-d69be7a4e7c6.roa (raw, json) Hash identifier: dnIXzHBP5w8YVKClkc5w/8epM9cyzqCJ/TZV6pYl3s8= Subject key identifier: 27:6E:88:FD:B4:CA:4F:A9:0B:46:A3:15:CB:F0:EE:DD:C0:A1:38:E4 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C354E821B90410F371080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28014b90-2c15-3d8b-89a7-d69be7a4e7c6.roa Signing time: Thu 12 Mar 2026 14:31:05 +0000 ROA not before: Thu 12 Mar 2026 14:31:05 +0000 ROA not after: Wed 10 Jun 2026 14:31:05 +0000 asID: 36632 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:35:4e:82:1b:90:41:0f:37:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:05 2026 GMT Not After : Jun 10 14:31:05 2026 GMT Subject: CN=62bf0647-07d9-4452-b661-0b506c08ef73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e4:73:c8:fb:20:e1:f3:bc:42:83:b4:b0:4c: 95:87:d4:de:09:f7:09:0a:a2:14:b1:16:b7:f8:82: d3:2f:06:aa:ae:69:c7:d8:4b:b1:57:fe:fa:88:d6: e7:ea:66:f5:b8:8d:13:f1:99:8c:e9:d1:32:c2:4c: 72:d3:ca:41:10:3a:f3:1c:a5:ff:53:9d:ac:b9:6f: e6:c2:2e:89:e4:fc:3a:c9:ad:97:9b:6c:dd:66:8e: fb:c3:08:47:fb:ab:26:22:b9:55:8b:db:3a:a0:23: 34:6c:80:c0:1e:e9:f7:40:b9:1b:2a:33:dd:df:3f: 75:d4:1f:9f:39:00:1d:a3:68:3e:42:a0:de:9e:ae: 82:41:7e:ad:b5:69:be:a1:d2:c4:0b:89:e4:12:6c: 96:a3:5a:38:24:5d:ec:20:f7:57:07:7a:a1:2e:c1: 77:74:c5:63:ad:c7:61:52:f5:d3:8b:df:10:ee:8d: 4e:7b:06:bf:1f:bb:42:e7:4f:5e:a1:90:6c:5d:7d: 8d:d6:55:79:b9:ac:ec:63:42:1b:b3:ff:c4:e7:8b: b2:70:11:8f:0c:7d:6f:d8:c7:7d:37:ac:52:91:3c: 98:96:a9:ba:eb:cc:b3:69:53:d6:40:fc:35:52:63: eb:1a:58:dd:b0:52:4c:e7:18:4b:95:fa:34:47:c1: 32:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:6E:88:FD:B4:CA:4F:A9:0B:46:A3:15:CB:F0:EE:DD:C0:A1:38:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/28014b90-2c15-3d8b-89a7-d69be7a4e7c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:ce:7b:37:01:60:c8:16:a2:49:c0:94:fe:ca:2b:c1:9a:41: 96:9f:e5:e8:b1:1f:51:2c:b0:4e:ae:4f:83:94:13:ca:14:b5: d2:1f:1d:1b:c3:28:85:ce:e8:fc:33:5b:09:21:1c:90:58:0d: 9b:02:3a:b5:5f:8f:23:0f:08:ae:59:d1:92:5f:94:14:fa:5f: 5b:fa:62:37:a1:61:b4:30:35:69:78:9f:d0:2e:fe:42:2c:b1: d6:04:61:c5:d4:b8:00:0c:3f:59:1e:44:13:ef:c0:e1:7b:5a: b2:77:b5:3f:5e:26:e4:32:37:32:8f:d8:b8:84:ff:9a:3e:4b: 80:a5:55:e2:01:fd:1a:38:24:e9:18:15:f8:14:c7:22:57:e7: 07:b2:7f:59:08:5f:25:e9:62:26:f5:08:1c:b2:6c:85:87:7e: 42:dc:77:79:6c:82:16:b0:99:71:b6:e7:04:33:1d:ff:cc:c7: 8f:a0:90:38:3a:6e:a7:83:64:b9:06:4e:72:92:fa:d7:73:59: ba:ed:88:08:67:14:de:81:cd:a7:45:ab:66:16:a5:a6:75:b4: be:4b:4d:99:90:d2:22:14:d4:6f:1f:04:ea:5b:6c:a7:3a:0a: 3e:67:d9:8b:bf:8a:d2:03:64:a1:5c:15:01:6b:b7:59:e8:d5: cc:b0:dd:3e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDDVOghuQQQ83EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwNVoXDTI2MDYxMDE0MzEwNVowLzEtMCsGA1UEAxMk NjJiZjA2NDctMDdkOS00NDUyLWI2NjEtMGI1MDZjMDhlZjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeRzyPsg4fO8QoO0sEyVh9TeCfcJCqIUsRa3 +ILTLwaqrmnH2EuxV/76iNbn6mb1uI0T8ZmM6dEywkxy08pBEDrzHKX/U52suW/m wi6J5Pw6ya2Xm2zdZo77wwhH+6smIrlVi9s6oCM0bIDAHun3QLkbKjPd3z911B+f OQAdo2g+QqDenq6CQX6ttWm+odLEC4nkEmyWo1o4JF3sIPdXB3qhLsF3dMVjrcdh UvXTi98Q7o1Oewa/H7tC509eoZBsXX2N1lV5uazsY0Ibs//E54uycBGPDH1v2Md9 N6xSkTyYlqm668yzaVPWQPw1UmPrGljdsFJM5xhLlfo0R8EyKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCduiP20yk+pC0ajFcvw7t3AoTjkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjgwMTRiOTAtMmMxNS0z ZDhiLTg5YTctZDY5YmU3YTRlN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI3OezcBYMgWoknAlP7KK8GaQZaf5eixH1EssE6uT4OUE8oUtdIf HRvDKIXO6PwzWwkhHJBYDZsCOrVfjyMPCK5Z0ZJflBT6X1v6YjehYbQwNWl4n9Au /kIssdYEYcXUuAAMP1keRBPvwOF7WrJ3tT9eJuQyNzKP2LiE/5o+S4ClVeIB/Ro4 JOkYFfgUxyJX5weyf1kIXyXpYib1CByybIWHfkLcd3lsghawmXG25wQzHf/Mx4+g kDg6bqeDZLkGTnKS+tdzWbrtiAhnFN6BzadFq2YWpaZ1tL5LTZmQ0iIU1G8fBOpb bKc6Cj5n2Yu/itIDZKFcFQFrt1no1cyw3T4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:36:39 2026 by rpki-client