$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35af7919-ac24-3711-b19c-92f730b0defb.roa File: 35af7919-ac24-3711-b19c-92f730b0defb.roa (raw, json) Hash identifier: 1y9EYdYVj32ez9t+M+lywuOsr+wa7/JSgWV4T+rYKeU= Subject key identifier: 21:96:AE:31:E9:77:BC:7B:47:8F:F7:E1:43:DF:B8:84:24:AF:F0:E9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F4A6919AB00D05F4D6D3580 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35af7919-ac24-3711-b19c-92f730b0defb.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 397208 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:69:19:ab:00:d0:5f:4d:6d:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=a56e8702-7fb5-481e-bc26-44e0ae54a1b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9d:78:1d:e2:b7:61:4b:43:63:10:97:93:aa: c3:81:41:2a:5e:84:fd:90:34:c8:d6:20:86:dd:a7: 20:bc:d8:70:21:14:a3:32:28:b8:c5:24:f2:bb:75: 11:4f:ba:b6:d3:0b:48:48:92:f0:b9:37:df:e6:9f: a1:8b:64:de:5a:83:ca:72:63:1f:f5:82:b0:d7:b1: 45:06:1d:2f:ae:72:b1:41:1b:c8:5e:4d:59:04:d5: b0:1f:f9:5e:90:33:1a:41:e3:81:28:13:76:18:80: a4:41:24:a3:f8:7d:e6:a4:c3:d9:e0:9f:7c:f3:1f: 73:3f:b5:20:d9:16:75:ad:d9:db:5f:fc:51:8c:e1: d1:03:41:7a:81:9e:d8:5d:77:71:91:8c:bc:b3:60: dc:d0:ff:46:1a:66:c9:40:e0:f6:5e:17:98:a8:2a: e3:3f:fa:fc:b2:2f:64:f7:0e:ef:82:56:8d:8a:62: 31:2d:c3:84:89:f0:f5:ac:38:36:f4:1d:f9:44:f2: 97:24:af:ec:4d:06:f8:d1:2a:91:0d:16:dd:2d:9c: 19:f1:08:94:82:1d:b3:cd:f9:50:bd:71:9c:4e:b8: 81:0d:81:71:54:5a:b1:c2:3d:79:c9:e8:be:f9:62: 99:c2:0b:90:70:bc:9a:fa:fd:17:25:f9:0d:ae:12: 8c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:96:AE:31:E9:77:BC:7B:47:8F:F7:E1:43:DF:B8:84:24:AF:F0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35af7919-ac24-3711-b19c-92f730b0defb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:27:d3:22:9e:75:9c:0e:79:80:39:74:f6:84:50:0a:9e:05: a5:88:e4:35:df:9c:71:26:d1:94:82:b3:bc:91:0c:11:a5:b3: b2:f9:a6:26:c8:2f:32:af:3f:2b:71:24:28:48:9b:e0:b3:a5: f4:c0:c2:4f:26:dc:72:28:46:ae:b8:20:81:3d:80:11:54:a5: b2:15:0b:df:bb:a6:b9:81:be:91:ba:19:50:61:f7:51:73:7c: f2:2a:77:a2:01:6d:27:10:c0:3a:14:c7:8f:73:87:c3:d0:0c: f9:56:65:0a:73:20:c3:b0:1b:87:9f:dd:cc:ee:98:af:04:00: d8:7f:af:7f:48:28:3b:d5:b6:b4:c7:ab:60:41:3c:9e:91:23: 8d:fd:0a:47:7c:e0:02:d3:95:c2:34:85:a9:f1:d8:c5:cc:e5: f0:c1:a3:8b:0f:be:2f:a5:78:bd:2f:bc:e0:3e:79:28:8f:e9: 7b:d5:c5:16:5c:fb:47:3e:7b:c1:d5:98:ad:ce:9b:38:86:1f: 6d:cb:de:9e:46:f3:91:7f:d4:cd:4a:0b:df:26:3c:25:cd:2d: 04:96:03:63:8e:c9:3b:d9:a3:f6:2c:96:a0:84:05:12:2a:c3: e4:87:7c:d0:73:c3:1f:ec:c1:ec:b2:91:cb:5d:87:49:03:db: a3:3b:5d:41 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmkZqwDQX01tNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YTU2ZTg3MDItN2ZiNS00ODFlLWJjMjYtNDRlMGFlNTRhMWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp14HeK3YUtDYxCXk6rDgUEqXoT9kDTI1iCG 3acgvNhwIRSjMii4xSTyu3URT7q20wtISJLwuTff5p+hi2TeWoPKcmMf9YKw17FF Bh0vrnKxQRvIXk1ZBNWwH/lekDMaQeOBKBN2GICkQSSj+H3mpMPZ4J988x9zP7Ug 2RZ1rdnbX/xRjOHRA0F6gZ7YXXdxkYy8s2Dc0P9GGmbJQOD2XheYqCrjP/r8si9k 9w7vglaNimIxLcOEifD1rDg29B35RPKXJK/sTQb40SqRDRbdLZwZ8QiUgh2zzflQ vXGcTriBDYFxVFqxwj15yei++WKZwguQcLya+v0XJfkNrhKMmQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFCGWrjHpd7x7R4/34UPfuIQkr/DpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzVhZjc5MTktYWMyNC0z NzExLWIxOWMtOTJmNzMwYjBkZWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCdJ9MinnWcDnmAOXT2hFAKngWliOQ135xxJtGU grO8kQwRpbOy+aYmyC8yrz8rcSQoSJvgs6X0wMJPJtxyKEauuCCBPYARVKWyFQvf u6a5gb6RuhlQYfdRc3zyKneiAW0nEMA6FMePc4fD0Az5VmUKcyDDsBuHn93M7piv BADYf69/SCg71ba0x6tgQTyekSON/QpHfOAC05XCNIWp8djFzOXwwaOLD74vpXi9 L7zgPnkoj+l71cUWXPtHPnvB1Zitzps4hh9ty96eRvORf9TNSgvfJjwlzS0ElgNj jsk72aP2LJaghAUSKsPkh3zQc8Mf7MHsspHLXYdJA9ujO11B -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:41 2026 by rpki-client