$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3657ce32-2ed6-3d85-8046-d42eee12cf33.roa File: 3657ce32-2ed6-3d85-8046-d42eee12cf33.roa (raw, json) Hash identifier: e/+jA5ivPiKWvPZgQ3Ewk5Zjvm490KVLcpQm8CilGjg= Subject key identifier: 0C:22:A1:64:75:50:49:75:E5:22:8F:BB:C3:81:8D:53:E2:C5:81:F0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D24E126695977DEE2024D29F8 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3657ce32-2ed6-3d85-8046-d42eee12cf33.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396617 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:26:69:59:77:de:e2:02:4d:29:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=dda93671-32aa-44b7-91d2-53be12a36acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4a:24:3d:db:54:eb:4d:a8:2f:9b:73:ef:b0: 3b:3f:3a:93:81:ea:a0:5a:73:4f:81:7a:2e:da:d0: d6:ac:7d:eb:ec:63:f4:e2:4f:fd:c6:7c:8d:70:f0: e7:f1:5b:7d:8f:44:aa:91:c7:4b:89:0c:29:81:e7: 8c:f6:d6:57:db:83:3b:b8:d3:44:c6:48:82:f4:7d: b1:f6:fe:d8:e4:87:2d:0b:83:df:70:e1:8b:12:37: e8:44:3d:6a:d2:91:90:70:9c:3f:9d:9e:4d:57:35: 3a:f9:5f:02:5a:c0:d1:50:a5:a6:2c:1f:8c:c5:5a: f7:fc:14:48:0e:0b:e0:3e:80:5a:ee:43:cd:f4:fb: 3c:9a:8e:2d:96:2f:f8:d3:ec:21:31:1b:83:e4:40: e1:37:c7:4c:f4:eb:c9:48:d4:7a:f7:f9:49:95:88: 7b:e2:11:ae:17:6f:a6:c5:23:d4:22:db:07:de:6b: ef:c2:4c:f6:a6:d1:a0:2f:61:3a:52:5f:79:7b:fe: 38:6f:a4:64:e2:ff:33:f6:c9:4c:52:a0:4b:f9:cb: 70:63:d9:cb:6d:14:04:b8:ef:55:66:37:6a:b4:ca: 32:42:90:42:55:3d:38:f5:dd:93:43:de:0e:51:e3: c4:f1:e7:aa:dc:28:e3:aa:0f:9c:10:e3:f1:61:96: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:22:A1:64:75:50:49:75:E5:22:8F:BB:C3:81:8D:53:E2:C5:81:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3657ce32-2ed6-3d85-8046-d42eee12cf33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f5:73:7a:4a:0f:05:c9:40:57:21:95:8e:5b:a3:8d:85:46: 1f:a4:66:e5:64:52:20:8e:d0:1b:ca:fe:94:d4:6d:d6:56:71: d6:b4:6e:31:e2:72:e0:8e:03:65:99:a1:a8:3d:b3:d6:d5:c7: 25:31:a0:5c:56:1c:cf:a9:63:00:4b:9c:0c:be:c8:b9:57:6f: 4e:2e:31:9d:98:32:52:33:64:c3:8d:6d:fb:6d:9f:77:37:85: 96:60:e8:5b:6b:6c:f4:2b:70:39:92:73:33:90:35:83:24:93: 63:86:67:94:99:4d:31:16:96:90:5c:02:8d:45:f3:e5:3d:41: 6e:02:83:dd:ae:99:14:ba:35:56:d6:bb:fe:86:aa:8e:58:c3: 2c:0f:1a:eb:6d:87:54:b6:4e:e2:2b:7c:99:b8:10:6a:cd:87: 45:53:81:84:c1:4e:9a:31:6e:5d:55:95:fa:c5:21:9b:4c:ae: 0c:1e:84:77:0b:81:5c:76:5a:69:73:c2:45:c6:79:f2:70:b0: 09:ff:79:7e:f8:81:84:63:71:99:9c:8a:fb:f4:21:12:15:7d: eb:c6:bd:38:be:76:41:78:7e:ef:d7:a0:f6:a7:4e:3d:1c:92: 9a:0b:29:8f:c3:85:5f:98:c4:e1:6e:4d:27:e6:50:bb:fc:97: fb:7d:e0:27 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0k4SZpWXfe4gJNKfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk ZGRhOTM2NzEtMzJhYS00NGI3LTkxZDItNTNiZTEyYTM2YWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0okPdtU602oL5tz77A7PzqTgeqgWnNPgXou 2tDWrH3r7GP04k/9xnyNcPDn8Vt9j0SqkcdLiQwpgeeM9tZX24M7uNNExkiC9H2x 9v7Y5IctC4PfcOGLEjfoRD1q0pGQcJw/nZ5NVzU6+V8CWsDRUKWmLB+MxVr3/BRI DgvgPoBa7kPN9Ps8mo4tli/40+whMRuD5EDhN8dM9OvJSNR69/lJlYh74hGuF2+m xSPUItsH3mvvwkz2ptGgL2E6Ul95e/44b6Rk4v8z9slMUqBL+ctwY9nLbRQEuO9V ZjdqtMoyQpBCVT049d2TQ94OUePE8eeq3Cjjqg+cEOPxYZZckQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFAwioWR1UEl15SKPu8OBjVPixYHwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzY1N2NlMzItMmVkNi0z ZDg1LTgwNDYtZDQyZWVlMTJjZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAS9XN6Sg8FyUBXIZWOW6ONhUYfpGblZFIgjtAb yv6U1G3WVnHWtG4x4nLgjgNlmaGoPbPW1cclMaBcVhzPqWMAS5wMvsi5V29OLjGd mDJSM2TDjW37bZ93N4WWYOhba2z0K3A5knMzkDWDJJNjhmeUmU0xFpaQXAKNRfPl PUFuAoPdrpkUujVW1rv+hqqOWMMsDxrrbYdUtk7iK3yZuBBqzYdFU4GEwU6aMW5d VZX6xSGbTK4MHoR3C4Fcdlppc8JFxnnycLAJ/3l++IGEY3GZnIr79CESFX3rxr04 vnZBeH7v16D2p049HJKaCymPw4VfmMThbk0n5lC7/Jf7feAn -----END CERTIFICATE-----Generated at Thu Mar 26 12:40:58 2026 by rpki-client