$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3caf627e-f520-30d0-af6f-c5a07013dd67.roa File: 3caf627e-f520-30d0-af6f-c5a07013dd67.roa (raw, json) Hash identifier: OltF4iF8QFH3Bvrhd6SZZOM1peYJotp5jZ9dk4c6ckY= Subject key identifier: 1E:49:9C:C2:E0:CD:0A:67:46:32:CA:EE:46:F1:D5:9A:76:54:B3:E5 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D3DFF8BEE36F09CA87A53E770 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3caf627e-f520-30d0-af6f-c5a07013dd67.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396543 IP address blocks: 2001:500:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:8b:ee:36:f0:9c:a8:7a:53:e7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=895450cd-07eb-4f23-85d6-3129ee70e2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0d:5d:38:c5:07:d3:31:0d:91:0a:5c:39:bc: 81:8b:4f:45:6b:55:77:10:30:1d:45:88:a8:64:01: 84:e2:71:3a:27:a5:8e:27:3f:65:d4:e9:f4:23:3e: b3:8d:e2:96:71:06:17:ff:8d:0b:4d:38:48:54:69: 29:85:d0:2c:c5:c1:5c:e1:27:ec:f9:7f:a7:31:32: c0:7a:33:89:63:50:36:54:32:1f:0d:5b:0d:7b:58: d8:e6:15:c5:f7:6b:c7:9b:4a:ba:0b:5b:7a:5d:a7: a1:50:61:08:bd:74:06:2e:6a:91:de:ee:37:09:86: cb:77:fc:9e:54:6f:96:b2:e5:60:c1:50:e0:0f:0e: 93:f7:a3:5b:51:4f:a5:0f:88:3f:63:fc:1d:e2:83: 40:5c:fb:24:50:ab:c4:96:aa:a4:ba:1d:27:f0:72: a9:04:eb:e9:15:f0:7e:ef:4e:50:fa:f4:8f:00:0b: aa:e1:02:0a:7f:b8:9a:e7:50:b9:05:3f:7f:d6:6d: 21:4c:17:4a:5d:5d:13:23:2a:97:6e:0c:ba:42:78: f3:24:2e:3c:6a:ca:05:28:9c:fa:4b:bf:eb:94:28: f8:46:61:c5:8a:a0:4c:fe:e7:48:ba:d5:c1:a4:fa: 4b:80:1c:fa:a0:24:39:26:42:de:06:6f:03:86:62: 7e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:49:9C:C2:E0:CD:0A:67:46:32:CA:EE:46:F1:D5:9A:76:54:B3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3caf627e-f520-30d0-af6f-c5a07013dd67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:79:3b:d4:d2:58:a3:53:d0:82:cd:ae:3b:fd:61:74:91:80: 8d:a6:99:1f:99:71:51:43:2f:66:6a:e0:c2:84:80:0c:63:74: a2:34:0d:d5:3b:17:67:09:5a:dd:86:6d:08:7a:07:d3:5a:c7: 3f:9f:46:bd:63:db:95:87:d6:6a:b4:23:4e:c9:79:7c:1b:5a: 2f:94:2a:09:9d:da:25:53:ac:bc:a7:50:fa:75:22:23:f2:cb: 45:fa:13:b6:0b:de:b6:23:fa:f5:36:ab:2d:57:7e:22:5e:0f: 8b:03:ef:88:38:12:5a:d0:8f:63:37:15:dd:fc:8f:d7:01:c0: b5:32:b9:6f:88:2c:53:97:2c:17:e5:18:10:4b:5d:3b:38:c0: c4:89:5f:6d:24:b4:38:b8:84:66:03:f0:87:2e:12:6e:6e:26: 08:03:7f:d2:0d:f0:ca:8a:ac:b7:6c:36:b3:bf:03:a5:67:2a: c7:7b:44:0e:b0:29:91:4a:1c:5e:dd:12:c2:0a:1b:4e:5b:82: 68:cc:b1:54:39:ab:eb:56:90:00:d0:4e:fb:73:13:74:1f:fa: a5:26:46:b6:fa:5d:ae:a4:e0:cc:4c:bd:10:6a:59:a9:42:5e: f2:d7:c6:ce:5d:5f:3a:30:31:2c:b5:44:30:9c:2f:d4:d3:c5: 91:98:ba:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09/4vuNvCcqHpT53AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ODk1NDUwY2QtMDdlYi00ZjIzLTg1ZDYtMzEyOWVlNzBlMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA1dOMUH0zENkQpcObyBi09Fa1V3EDAdRYio ZAGE4nE6J6WOJz9l1On0Iz6zjeKWcQYX/40LTThIVGkphdAsxcFc4Sfs+X+nMTLA ejOJY1A2VDIfDVsNe1jY5hXF92vHm0q6C1t6XaehUGEIvXQGLmqR3u43CYbLd/ye VG+WsuVgwVDgDw6T96NbUU+lD4g/Y/wd4oNAXPskUKvElqqkuh0n8HKpBOvpFfB+ 705Q+vSPAAuq4QIKf7ia51C5BT9/1m0hTBdKXV0TIyqXbgy6QnjzJC48asoFKJz6 S7/rlCj4RmHFiqBM/udIutXBpPpLgBz6oCQ5JkLeBm8DhmJ++wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB5JnMLgzQpnRjLK7kbx1Zp2VLPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2NhZjYyN2UtZjUyMC0z MGQwLWFmNmYtYzVhMDcwMTNkZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHd5O9TSWKNT0ILNrjv9YXSRgI2mmR+ZcVFDL2Zq4MKEgAxjdKI0 DdU7F2cJWt2GbQh6B9Naxz+fRr1j25WH1mq0I07JeXwbWi+UKgmd2iVTrLynUPp1 IiPyy0X6E7YL3rYj+vU2qy1XfiJeD4sD74g4ElrQj2M3Fd38j9cBwLUyuW+ILFOX LBflGBBLXTs4wMSJX20ktDi4hGYD8IcuEm5uJggDf9IN8MqKrLdsNrO/A6VnKsd7 RA6wKZFKHF7dEsIKG05bgmjMsVQ5q+tWkADQTvtzE3Qf+qUmRrb6Xa6k4MxMvRBq WalCXvLXxs5dXzowMSy1RDCcL9TTxZGYusI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:24 2026 by rpki-client