$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3299eba7-5501-3052-a8c3-1e1e326229a6.roa File: 3299eba7-5501-3052-a8c3-1e1e326229a6.roa (raw, json) Hash identifier: ThQglUX/8iWpSj20EThglapnxc8dZHE/jFU3jRSi8jM= Subject key identifier: 64:CE:44:59:B1:81:A0:BA:BC:60:53:F3:AD:46:80:E5:A0:06:DF:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C3AA1DF43F816FDEB9100 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3299eba7-5501-3052-a8c3-1e1e326229a6.roa Signing time: Thu 12 Mar 2026 14:31:07 +0000 ROA not before: Thu 12 Mar 2026 14:31:07 +0000 ROA not after: Wed 10 Jun 2026 14:31:07 +0000 asID: 396565 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:3a:a1:df:43:f8:16:fd:eb:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:07 2026 GMT Not After : Jun 10 14:31:07 2026 GMT Subject: CN=f417c1e6-017d-4816-a9e6-40ca38c0dcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:41:6e:65:f3:ac:36:a6:cb:44:1e:25:79:87: eb:82:83:1b:43:13:e2:c6:6c:af:fd:18:3b:16:55: f7:48:92:24:bf:66:cd:55:a1:8e:86:17:64:65:5b: 5f:26:46:4c:80:48:78:e9:14:07:9f:db:e4:b7:d1: 65:5b:48:6c:d5:e5:4e:9f:55:06:93:a9:8d:d4:1e: 6b:ac:91:48:74:60:00:f4:98:e2:57:9a:3a:3d:c4: 1b:27:b3:50:20:da:64:b3:e8:ea:bb:c5:7b:17:da: 36:60:4f:e3:f1:5e:42:ec:27:74:c4:71:77:a3:3d: 38:42:c6:06:b2:12:b7:84:88:df:e2:07:1b:e0:37: a9:8e:eb:5f:6b:4a:71:91:56:92:c6:e4:38:e7:28: 1d:bb:a7:f8:73:4c:d2:3c:c9:97:45:3d:a8:0e:a1: ef:69:16:0c:c5:80:24:1b:6e:1d:9e:b7:a7:e1:86: bb:8b:de:c8:8f:66:82:54:0e:95:9a:c0:c9:a4:a5: 52:d8:ba:dd:99:fb:f8:72:bb:64:ed:2a:92:3c:35: 64:4d:55:d8:09:3a:81:bc:ca:eb:4b:a8:6b:d6:5c: 53:d7:4d:1f:b6:b5:c3:dd:6c:75:92:db:ca:28:4b: 68:b5:f6:7c:95:1b:d7:69:77:2a:d5:dc:1f:57:fe: 35:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CE:44:59:B1:81:A0:BA:BC:60:53:F3:AD:46:80:E5:A0:06:DF:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3299eba7-5501-3052-a8c3-1e1e326229a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:39:56:9f:09:75:39:e6:79:29:b7:bf:96:14:f3:65:23:f8: e6:d3:c8:7a:f3:5f:6f:a0:ce:9c:b9:d2:12:03:84:43:86:e2: 8f:4e:dc:f9:bb:fa:4c:e0:33:aa:52:e0:1a:b7:6f:f9:22:71: c4:55:e0:7f:67:cf:9e:50:aa:1f:7c:72:59:13:5c:a0:2c:6b: b2:69:5a:a1:c6:c3:08:75:5c:fe:cf:1d:34:6e:5b:fc:1a:fd: ac:8f:6f:82:69:05:60:4c:1b:36:b5:c0:81:e4:9f:31:ad:40: 06:2d:c4:79:9b:6d:08:a0:55:01:ee:bb:17:83:2f:d7:a9:b8: ec:f3:e2:38:a6:9c:b4:e8:49:54:ef:f4:1f:60:64:70:0e:79: 50:36:a5:e8:45:16:b0:b5:52:dc:04:b0:c9:49:19:8f:e7:87: d5:ec:d6:95:5b:14:84:45:ad:d2:26:f3:48:5b:2b:eb:c8:58: ff:e3:ec:b3:88:8f:68:cf:ea:b0:af:f2:24:6e:6d:5b:85:47: fd:43:97:37:f4:e2:78:58:85:3a:a7:37:b7:eb:00:51:af:f1: f2:62:0a:64:2a:71:6d:a6:74:ef:27:30:ac:e4:dc:df:98:2d: f9:85:5b:f0:e8:97:ca:8b:04:65:c9:1e:f4:e1:1d:45:7b:5c: f1:00:5f:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDDqh30P4Fv3rkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwN1oXDTI2MDYxMDE0MzEwN1owLzEtMCsGA1UEAxMk ZjQxN2MxZTYtMDE3ZC00ODE2LWE5ZTYtNDBjYTM4YzBkY2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkFuZfOsNqbLRB4leYfrgoMbQxPixmyv/Rg7 FlX3SJIkv2bNVaGOhhdkZVtfJkZMgEh46RQHn9vkt9FlW0hs1eVOn1UGk6mN1B5r rJFIdGAA9JjiV5o6PcQbJ7NQINpks+jqu8V7F9o2YE/j8V5C7Cd0xHF3oz04QsYG shK3hIjf4gcb4Depjutfa0pxkVaSxuQ45ygdu6f4c0zSPMmXRT2oDqHvaRYMxYAk G24dnren4Ya7i97Ij2aCVA6VmsDJpKVS2Lrdmfv4crtk7SqSPDVkTVXYCTqBvMrr S6hr1lxT100ftrXD3Wx1ktvKKEtotfZ8lRvXaXcq1dwfV/41BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGTORFmxgaC6vGBT861GgOWgBt/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzI5OWViYTctNTUwMS0z MDUyLWE4YzMtMWUxZTMyNjIyOWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEI5Vp8JdTnmeSm3v5YU82Uj+ObTyHrzX2+gzpy50hIDhEOG4o9O 3Pm7+kzgM6pS4Bq3b/kiccRV4H9nz55Qqh98clkTXKAsa7JpWqHGwwh1XP7PHTRu W/wa/ayPb4JpBWBMGza1wIHknzGtQAYtxHmbbQigVQHuuxeDL9epuOzz4jimnLTo SVTv9B9gZHAOeVA2pehFFrC1UtwEsMlJGY/nh9Xs1pVbFIRFrdIm80hbK+vIWP/j 7LOIj2jP6rCv8iRubVuFR/1Dlzf04nhYhTqnN7frAFGv8fJiCmQqcW2mdO8nMKzk 3N+YLfmFW/Dol8qLBGXJHvThHUV7XPEAX44= -----END CERTIFICATE-----Generated at Thu Mar 26 15:39:21 2026 by rpki-client