$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2af81f1b-ad51-3c30-a817-c58126e844d7.roa File: 2af81f1b-ad51-3c30-a817-c58126e844d7.roa (raw, json) Hash identifier: pZ1uwLDtoidZhdFaKIcW1rQa//h3Ax5cO+GvZf+tUT4= Subject key identifier: 7C:E8:1C:0F:99:5E:5B:B3:5D:21:9C:B4:49:83:EC:98:33:B9:FD:DC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D32F5A89AA20D05B2D93DF400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2af81f1b-ad51-3c30-a817-c58126e844d7.roa Signing time: Tue 17 Mar 2026 14:06:58 +0000 ROA not before: Tue 17 Mar 2026 14:06:58 +0000 ROA not after: Mon 15 Jun 2026 14:06:58 +0000 asID: 396595 IP address blocks: 2001:500:856e::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:a8:9a:a2:0d:05:b2:d9:3d:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 17 14:06:58 2026 GMT Not After : Jun 15 14:06:58 2026 GMT Subject: CN=59620ea3-baa3-412b-8159-5d2e2f33d762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1c:38:9d:f8:78:a3:7c:53:94:77:45:c0:e1: 8c:06:8e:12:05:29:74:f9:43:80:f9:36:1e:8e:29: 31:81:d1:41:f8:5b:bc:fb:b6:28:d8:51:e9:b5:74: d9:e4:54:f1:02:e6:c9:f7:64:90:dc:9f:ff:46:1c: ed:f8:5c:7d:48:1f:d1:9e:39:27:58:25:68:11:b4: a5:3f:5f:23:d5:a5:d8:69:97:cd:7f:52:2e:2a:a1: e1:dd:e7:7d:eb:db:e5:90:fa:98:ab:4a:c5:f8:ef: f1:4c:7c:09:4e:f4:eb:9c:52:dc:f6:ba:ac:ae:82: 46:bc:56:63:b6:6f:73:46:8a:8c:90:36:d8:76:fb: 8b:77:c3:cb:28:00:9c:6c:97:33:2f:c5:ca:0b:1d: f9:13:30:11:48:9c:d5:98:1f:3a:04:23:9f:9e:8c: a2:da:cc:05:d7:1a:b3:48:07:12:ac:32:f1:ed:8b: 08:2d:2c:70:81:b3:92:f3:dd:98:0c:ec:c0:7d:dc: fa:59:a5:ac:9f:3f:91:4d:84:6a:a0:21:c5:00:66: 9a:cc:27:8f:44:cb:78:de:3e:c6:f9:9e:1a:5b:d2: d6:8d:d1:c6:60:2c:29:0c:a1:7c:c3:28:10:1d:6f: 5b:7f:c1:b4:7e:6e:b7:f1:5b:b1:ef:9b:66:07:50: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E8:1C:0F:99:5E:5B:B3:5D:21:9C:B4:49:83:EC:98:33:B9:FD:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2af81f1b-ad51-3c30-a817-c58126e844d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:60:71:cd:9b:8a:b2:ab:26:25:96:1f:0e:e3:04:5b:cc:55: 2f:fc:19:2b:c7:e1:2c:aa:e6:3e:1e:16:f7:76:17:6f:7a:ce: e5:98:01:6b:6f:95:58:d7:a0:91:89:7a:cd:a1:58:96:1c:02: b5:0e:30:e8:82:b5:f6:61:14:8b:06:46:07:a0:12:00:ca:ac: 35:8b:43:49:10:fe:be:2a:21:18:77:50:4a:d2:20:04:60:9b: 3e:82:9d:82:9d:c3:45:28:25:e5:45:ec:7e:82:71:5e:bd:c6: f0:4b:07:1d:70:06:5c:49:94:dd:66:f4:55:87:e7:ac:66:ae: f0:c5:63:c8:b9:fb:41:94:91:d0:93:43:45:a9:3f:dc:01:fc: ee:b4:ce:58:8c:a0:a0:cc:a2:b7:e0:60:6a:c4:df:ac:97:e4: 42:ef:94:7a:19:11:39:5d:f8:51:69:0c:b7:b1:a0:95:19:53: c0:ce:a5:ac:9f:b3:43:94:85:91:3f:cd:2b:e2:e5:1c:6b:c6: 8b:99:8d:c7:b7:13:fb:0d:a3:54:46:8e:28:50:76:3d:17:ba: c3:48:f6:75:ac:9e:ea:b0:ab:00:ca:8f:37:16:5c:2e:ba:53: f4:70:3f:61:27:36:54:0f:b5:96:99:45:25:9a:1a:5a:94:e0: ed:bc:47:ae -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0y9aiaog0Fstk99AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNzE0MDY1OFoXDTI2MDYxNTE0MDY1OFowLzEtMCsGA1UEAxMk NTk2MjBlYTMtYmFhMy00MTJiLTgxNTktNWQyZTJmMzNkNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxw4nfh4o3xTlHdFwOGMBo4SBSl0+UOA+TYe jikxgdFB+Fu8+7Yo2FHptXTZ5FTxAubJ92SQ3J//Rhzt+Fx9SB/RnjknWCVoEbSl P18j1aXYaZfNf1IuKqHh3ed969vlkPqYq0rF+O/xTHwJTvTrnFLc9rqsroJGvFZj tm9zRoqMkDbYdvuLd8PLKACcbJczL8XKCx35EzARSJzVmB86BCOfnoyi2swF1xqz SAcSrDLx7YsILSxwgbOS892YDOzAfdz6WaWsnz+RTYRqoCHFAGaazCePRMt43j7G +Z4aW9LWjdHGYCwpDKF8wygQHW9bf8G0fm638Vux75tmB1CrbwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHzoHA+ZXluzXSGctEmD7Jgzuf3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmFmODFmMWItYWQ1MS0z YzMwLWE4MTctYzU4MTI2ZTg0NGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAeYHHNm4qyqyYllh8O4wRbzFUv/Bkrx+EsquY+ Hhb3dhdves7lmAFrb5VY16CRiXrNoViWHAK1DjDogrX2YRSLBkYHoBIAyqw1i0NJ EP6+KiEYd1BK0iAEYJs+gp2CncNFKCXlRex+gnFevcbwSwcdcAZcSZTdZvRVh+es Zq7wxWPIuftBlJHQk0NFqT/cAfzutM5YjKCgzKK34GBqxN+sl+RC75R6GRE5XfhR aQy3saCVGVPAzqWsn7NDlIWRP80r4uUca8aLmY3HtxP7DaNURo4oUHY9F7rDSPZ1 rJ7qsKsAyo83FlwuulP0cD9hJzZUD7WWmUUlmhpalODtvEeu -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:47 2026 by rpki-client