$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35687240-109b-31cf-a4fa-3a2b819a7c72.roa File: 35687240-109b-31cf-a4fa-3a2b819a7c72.roa (raw, json) Hash identifier: 7CCQueNK5pBFWQS1NNRbCHA1wACQUt9zMHO35VMvNZI= Subject key identifier: 32:B3:B7:5C:40:1C:52:D5:35:4B:85:95:D7:B9:AD:66:5F:57:0E:79 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D32F5A7A6B364453B59833780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35687240-109b-31cf-a4fa-3a2b819a7c72.roa Signing time: Tue 17 Mar 2026 14:06:57 +0000 ROA not before: Tue 17 Mar 2026 14:06:57 +0000 ROA not after: Mon 15 Jun 2026 14:06:57 +0000 asID: 396546 IP address blocks: 2001:500:856e::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:a7:a6:b3:64:45:3b:59:83:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 17 14:06:57 2026 GMT Not After : Jun 15 14:06:57 2026 GMT Subject: CN=18e4096d-7ddc-4abc-b977-c77c3ac77b94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b0:7e:68:4c:9f:03:e5:a2:da:09:31:c6:d6: 0e:8e:25:6b:1a:4a:04:38:b1:47:b4:cc:d2:ef:d4: 87:5d:40:48:17:cc:77:19:de:83:52:2c:4f:21:34: 35:55:97:37:14:a2:b9:01:58:2f:15:45:64:6d:f4: 55:38:0d:14:a5:1c:6b:b2:06:e0:67:3a:84:86:f4: ef:cd:64:9d:b1:00:ca:a2:ae:47:02:ec:c5:0d:8a: 8c:c6:7a:e9:4c:c2:eb:a4:55:28:5e:54:4a:b3:7c: de:68:34:1b:b3:fe:c2:2c:5e:e1:13:0b:be:78:db: b8:b7:b9:95:86:08:03:06:76:1a:7e:c6:61:f6:ff: b9:0c:90:e6:eb:db:a6:d5:84:ff:e5:52:de:6f:af: 19:b6:b9:44:8f:c3:7e:33:95:a2:f9:04:a0:ce:5d: 50:41:3e:9c:8f:69:c0:3a:a0:9c:6e:e7:fc:47:af: e1:89:13:07:be:27:44:aa:d7:b7:89:ff:9f:93:45: 4a:01:d8:64:42:d3:f8:20:0a:f9:fc:23:ab:90:67: 88:5a:3b:bc:d4:ce:39:57:83:60:b8:cc:63:5a:58: f6:9c:a5:66:37:64:b4:10:28:41:da:96:81:5d:dd: fc:54:28:52:2b:e5:c3:ee:7b:40:5f:e1:32:7b:7a: 42:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B3:B7:5C:40:1C:52:D5:35:4B:85:95:D7:B9:AD:66:5F:57:0E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35687240-109b-31cf-a4fa-3a2b819a7c72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:96:0d:62:0a:41:59:d6:05:29:92:f7:bb:86:ca:c5:be:e2: ba:a1:eb:08:04:c0:c6:f7:09:76:e2:1e:36:c3:f1:c8:8b:a1: 4c:23:ad:f7:8f:0e:94:70:87:82:f2:1e:56:0c:7f:f9:98:cb: 6d:3a:00:05:be:14:30:39:34:9b:72:dd:1e:59:67:9b:1a:8c: af:c5:cf:bc:66:13:ab:8b:9d:0f:6e:61:6d:44:3f:01:91:3d: a2:38:46:0d:42:00:eb:a2:bd:2d:c9:ed:78:62:fa:ac:7d:b0: e8:38:65:fa:e5:fa:32:70:86:de:bd:10:87:4a:dc:f4:ba:63: e2:eb:dd:23:80:fd:97:4b:7a:0d:da:6c:0d:1b:15:9f:d1:5b: 06:ec:4c:88:e6:6c:f2:48:db:3f:d5:fe:c4:f2:9a:19:07:06: 3f:8c:00:b6:d1:ab:db:24:3a:7d:80:fa:e7:a5:cc:fc:8c:f6: 3d:59:b0:1b:a4:0d:35:c9:ea:6b:0a:b9:7c:3b:90:c6:5f:85: ca:06:7c:8d:45:db:70:d9:df:86:b8:06:bc:e1:dc:5b:a9:ae: 37:fe:a4:a2:12:76:2f:fb:33:c9:36:2c:cf:ea:f7:98:ff:de: f3:02:93:80:ee:32:a4:70:5f:60:d3:ff:07:f8:cd:6b:8c:1d: 4e:de:19:ca -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0y9aems2RFO1mDN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNzE0MDY1N1oXDTI2MDYxNTE0MDY1N1owLzEtMCsGA1UEAxMk MThlNDA5NmQtN2RkYy00YWJjLWI5NzctYzc3YzNhYzc3Yjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7B+aEyfA+Wi2gkxxtYOjiVrGkoEOLFHtMzS 79SHXUBIF8x3Gd6DUixPITQ1VZc3FKK5AVgvFUVkbfRVOA0UpRxrsgbgZzqEhvTv zWSdsQDKoq5HAuzFDYqMxnrpTMLrpFUoXlRKs3zeaDQbs/7CLF7hEwu+eNu4t7mV hggDBnYafsZh9v+5DJDm69um1YT/5VLeb68ZtrlEj8N+M5Wi+QSgzl1QQT6cj2nA OqCcbuf8R6/hiRMHvidEqte3if+fk0VKAdhkQtP4IAr5/COrkGeIWju81M45V4Ng uMxjWlj2nKVmN2S0EChB2paBXd38VChSK+XD7ntAX+Eye3pChQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDKzt1xAHFLVNUuFlde5rWZfVw55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzU2ODcyNDAtMTA5Yi0z MWNmLWE0ZmEtM2EyYjgxOWE3YzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBclg1iCkFZ1gUpkve7hsrFvuK6oesIBMDG9wl2 4h42w/HIi6FMI633jw6UcIeC8h5WDH/5mMttOgAFvhQwOTSbct0eWWebGoyvxc+8 ZhOri50PbmFtRD8BkT2iOEYNQgDror0tye14YvqsfbDoOGX65foycIbevRCHStz0 umPi690jgP2XS3oN2mwNGxWf0VsG7EyI5mzySNs/1f7E8poZBwY/jAC20avbJDp9 gPrnpcz8jPY9WbAbpA01yeprCrl8O5DGX4XKBnyNRdtw2d+GuAa84dxbqa43/qSi EnYv+zPJNizP6veY/97zApOA7jKkcF9g0/8H+M1rjB1O3hnK -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:19 2026 by rpki-client