$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/338fed3e-ea23-3e5f-9457-b9acb1359af3.roa File: 338fed3e-ea23-3e5f-9457-b9acb1359af3.roa (raw, json) Hash identifier: Ndkj0Uoe1yDdBBO8ypI6LV0nostrWsfTqAEb+O8BRXE= Subject key identifier: 1A:59:B2:F3:F0:21:D0:C0:39:36:EC:32:9E:F3:AF:B4:58:3C:90:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C30F1C0BB4477168CBBA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/338fed3e-ea23-3e5f-9457-b9acb1359af3.roa Signing time: Thu 12 Mar 2026 14:31:03 +0000 ROA not before: Thu 12 Mar 2026 14:31:03 +0000 ROA not after: Wed 10 Jun 2026 14:31:03 +0000 asID: 396561 IP address blocks: 2001:500:d937::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:30:f1:c0:bb:44:77:16:8c:bb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:03 2026 GMT Not After : Jun 10 14:31:03 2026 GMT Subject: CN=49fdb156-c092-4465-8d06-776fd54a8486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2b:ec:af:f1:3b:2f:48:a3:f0:23:5a:5d:8c: fd:1d:72:e8:4b:d0:23:5b:13:27:dd:81:1e:8c:da: c9:fd:2d:e4:d3:87:8f:6e:d7:b7:ef:71:71:40:7d: c7:a1:8d:31:79:32:c0:69:6a:c7:b0:83:42:a5:f6: 19:f7:60:c5:44:fa:a3:36:93:9c:6a:34:a1:98:93: dc:7e:87:c6:6e:90:25:18:dc:cc:31:81:c8:f9:c4: 96:32:5b:0b:42:71:d4:93:c7:90:ec:48:a4:66:fb: 8b:ed:aa:4f:dd:a5:f1:ba:d7:3c:26:c0:54:b8:81: 57:c3:b4:16:a8:29:c2:d1:23:9f:e8:6c:f6:ef:ce: 01:82:ad:b4:1a:f7:9d:cb:5b:19:d7:b0:1e:5e:da: 4a:3a:db:a4:d3:7f:34:30:e5:d7:6c:d7:79:c8:4f: 2c:00:9a:1e:14:90:6c:f9:43:7e:fb:ae:55:67:39: 46:2d:8f:b6:c4:a0:aa:b3:7f:79:67:0d:ee:82:7a: 65:ee:0c:e3:20:a7:c1:12:b2:6e:ea:7b:c2:a1:d8: 0c:5c:12:23:bd:7e:7b:3d:bc:c0:51:a2:ce:0d:88: b9:11:08:86:6b:c3:78:09:26:e9:72:52:ae:31:66: 97:f3:23:c6:eb:cf:44:ab:01:3a:1b:19:a9:61:c8: 74:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:59:B2:F3:F0:21:D0:C0:39:36:EC:32:9E:F3:AF:B4:58:3C:90:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/338fed3e-ea23-3e5f-9457-b9acb1359af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:d7:d2:63:6e:70:0c:ab:f6:09:83:c8:e8:0b:c3:db:6b:ac: c6:cc:c0:2a:31:17:2c:fe:1b:74:96:27:aa:4f:5e:84:26:3e: 1e:d2:74:35:dc:27:02:a1:63:1b:97:38:91:87:88:a2:bf:d0: b5:10:de:57:d1:4a:fe:ed:e0:fd:eb:bc:b8:ea:6b:6a:75:49: fa:a5:b1:93:cc:8e:87:ca:b9:d9:1f:fc:36:31:70:c3:db:20: 4e:cf:f1:fe:1c:0a:95:d2:c6:8f:ee:d6:a3:c1:5c:80:2e:c1: ad:dc:6d:89:e7:ad:ee:97:2d:4d:c8:88:8a:48:d5:ce:a6:b9: a1:e2:fd:c5:4e:dc:1c:8f:f6:2c:12:8e:66:b9:88:86:10:a0: b8:44:54:0e:15:7f:5f:2a:5a:35:f9:51:4a:31:67:92:6c:f0: 91:94:b0:36:6c:2e:fb:0e:ae:f2:c5:b9:1f:d9:5a:47:76:f4: e6:83:a5:41:e7:67:81:f8:08:72:cb:eb:14:9a:af:59:56:f3: 1d:a3:76:4d:e8:3e:cb:9d:51:cc:49:92:35:23:49:3a:76:f5: 19:70:dd:97:8b:59:7e:2b:79:bc:00:c7:9a:f6:84:1b:6f:6c: 07:2d:78:ed:ce:62:9a:7a:1b:59:9e:8c:26:b8:91:bf:6c:1f: 99:b7:61:eb -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0lDDDxwLtEdxaMu6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwM1oXDTI2MDYxMDE0MzEwM1owLzEtMCsGA1UEAxMk NDlmZGIxNTYtYzA5Mi00NDY1LThkMDYtNzc2ZmQ1NGE4NDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuivsr/E7L0ij8CNaXYz9HXLoS9AjWxMn3YEe jNrJ/S3k04ePbte373FxQH3HoY0xeTLAaWrHsINCpfYZ92DFRPqjNpOcajShmJPc fofGbpAlGNzMMYHI+cSWMlsLQnHUk8eQ7EikZvuL7apP3aXxutc8JsBUuIFXw7QW qCnC0SOf6Gz2784Bgq20Gvedy1sZ17AeXtpKOtuk0380MOXXbNd5yE8sAJoeFJBs +UN++65VZzlGLY+2xKCqs395Zw3ugnpl7gzjIKfBErJu6nvCodgMXBIjvX57PbzA UaLODYi5EQiGa8N4CSbpclKuMWaX8yPG689EqwE6GxmpYch0+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBpZsvPwIdDAOTbsMp7zr7RYPJDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzM4ZmVkM2UtZWEyMy0z ZTVmLTk0NTctYjlhY2IxMzU5YWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA419JjbnAMq/YJg8joC8Pba6zGzMAqMRcs/ht0 lieqT16EJj4e0nQ13CcCoWMblziRh4iiv9C1EN5X0Ur+7eD967y46mtqdUn6pbGT zI6HyrnZH/w2MXDD2yBOz/H+HAqV0saP7tajwVyALsGt3G2J563uly1NyIiKSNXO prmh4v3FTtwcj/YsEo5muYiGEKC4RFQOFX9fKlo1+VFKMWeSbPCRlLA2bC77Dq7y xbkf2VpHdvTmg6VB52eB+Ahyy+sUmq9ZVvMdo3ZN6D7LnVHMSZI1I0k6dvUZcN2X i1l+K3m8AMea9oQbb2wHLXjtzmKaehtZnowmuJG/bB+Zt2Hr -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:00 2026 by rpki-client