$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d8f56d-487d-380c-bc70-d58fec63705a.roa File: 35d8f56d-487d-380c-bc70-d58fec63705a.roa (raw, json) Hash identifier: +LQgWUJG2SWn8H19GKKtxcuQgJWgiYCrF7/GhevVKqw= Subject key identifier: 2F:0F:E8:3A:56:9F:69:2F:64:04:3D:25:5B:8E:8B:50:D0:17:A8:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F4A66D73B4BBF6E11252D40 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d8f56d-487d-380c-bc70-d58fec63705a.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396553 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:66:d7:3b:4b:bf:6e:11:25:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=6a868cfc-2227-49c0-9dfd-4afaf8fa5b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e5:3a:c8:a4:a5:f7:19:7e:38:0a:bc:fd:4a: 1d:e3:26:f4:0c:a4:d5:c7:2f:de:4d:ac:1d:5f:89: c4:0a:a7:af:dc:ed:0e:b4:04:9e:aa:f2:40:61:58: 27:9c:3f:36:9c:59:f5:5a:11:46:9c:da:13:a1:96: 3a:65:1b:17:18:27:bd:f5:44:c3:45:1d:a3:1c:43: 3c:6a:16:46:18:d3:74:6e:5d:e0:f6:d3:4b:c0:38: ba:17:c4:d5:eb:79:08:cc:b0:17:72:fb:b4:59:ed: 2a:21:bd:27:5d:e0:42:7f:dc:c0:56:0a:55:0f:1e: 5a:64:f4:12:7d:55:78:d4:89:5f:2d:e1:97:dd:11: db:4f:10:62:dc:d6:eb:80:cd:94:ef:93:c5:a6:89: 17:7a:45:73:3c:7b:d6:3d:d6:eb:0a:b3:a7:4e:b6: c0:69:03:b1:2e:19:7f:8d:a6:30:cd:78:a6:7d:b9: 7a:c7:db:55:f6:e9:de:bf:ed:db:94:29:cf:8a:a4: ca:90:17:14:7d:d2:54:34:b3:1e:9d:ef:ed:7b:8c: 76:aa:f5:4d:1a:4f:ae:d8:5a:cf:d0:e5:26:81:ca: 1c:7b:c1:88:2c:61:c6:3f:46:bb:f2:bd:59:a9:f0: ac:00:d7:f1:11:9a:31:c9:8b:20:ab:1a:15:46:04: 3d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0F:E8:3A:56:9F:69:2F:64:04:3D:25:5B:8E:8B:50:D0:17:A8:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/35d8f56d-487d-380c-bc70-d58fec63705a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:34:df:81:8b:6b:13:63:0b:f9:38:8e:12:01:05:fa:b4:de: 3d:15:09:f7:8e:61:a4:d5:b9:11:a3:8d:4d:c4:00:6e:35:a5: f4:d0:7c:71:f6:9b:42:e1:7c:fe:45:9e:fb:9e:84:ff:e7:1c: 20:ed:bb:d4:0a:0d:44:a5:09:df:66:06:6b:54:9c:6c:8e:bc: 0e:d2:81:0c:27:8a:1c:48:71:b5:e2:2f:01:9c:1c:58:4e:49: 24:b3:a2:ed:06:f9:34:db:6c:e2:b4:d2:3e:56:3c:2c:c3:48: 4f:98:ad:83:25:5c:67:df:bb:80:19:c1:ec:6d:1b:3d:82:23: 44:fd:36:1b:6c:54:03:7e:79:66:f7:b6:4e:1a:69:fa:57:c1: ae:16:17:31:88:ec:92:25:7d:4b:d8:7d:26:fe:95:a8:6b:7d: 53:c5:d8:0a:24:4c:9c:80:6b:15:62:93:dc:b1:02:81:66:f6: f6:f6:2a:02:83:b7:ce:2d:da:92:de:dc:04:77:c5:08:97:7f: 70:cb:de:03:73:79:d4:07:69:e3:6d:59:80:f6:bb:0f:13:e8: 19:54:36:a1:1d:c0:f6:34:8a:52:10:62:13:e7:64:b1:30:bb: 7c:e6:ec:dc:6b:85:54:36:4c:f0:8e:05:ff:8e:78:56:7d:f9: e7:6f:ce:69 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmbXO0u/bhElLUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk NmE4NjhjZmMtMjIyNy00OWMwLTlkZmQtNGFmYWY4ZmE1Yjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+U6yKSl9xl+OAq8/Uod4yb0DKTVxy/eTawd X4nECqev3O0OtASeqvJAYVgnnD82nFn1WhFGnNoToZY6ZRsXGCe99UTDRR2jHEM8 ahZGGNN0bl3g9tNLwDi6F8TV63kIzLAXcvu0We0qIb0nXeBCf9zAVgpVDx5aZPQS fVV41IlfLeGX3RHbTxBi3NbrgM2U75PFpokXekVzPHvWPdbrCrOnTrbAaQOxLhl/ jaYwzXimfbl6x9tV9unev+3blCnPiqTKkBcUfdJUNLMene/te4x2qvVNGk+u2FrP 0OUmgcoce8GILGHGP0a78r1ZqfCsANfxEZoxyYsgqxoVRgQ9HwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFC8P6DpWn2kvZAQ9JVuOi1DQF6jzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzVkOGY1NmQtNDg3ZC0z ODBjLWJjNzAtZDU4ZmVjNjM3MDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCvNN+Bi2sTYwv5OI4SAQX6tN49FQn3jmGk1bkR o41NxABuNaX00Hxx9ptC4Xz+RZ77noT/5xwg7bvUCg1EpQnfZgZrVJxsjrwO0oEM J4ocSHG14i8BnBxYTkkks6LtBvk022zitNI+Vjwsw0hPmK2DJVxn37uAGcHsbRs9 giNE/TYbbFQDfnlm97ZOGmn6V8GuFhcxiOySJX1L2H0m/pWoa31TxdgKJEycgGsV YpPcsQKBZvb29ioCg7fOLdqS3twEd8UIl39wy94Dc3nUB2njbVmA9rsPE+gZVDah HcD2NIpSEGIT52SxMLt85uzca4VUNkzwjgX/jnhWffnnb85p -----END CERTIFICATE-----Generated at Thu Mar 26 16:04:28 2026 by rpki-client