$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dd496c7-9413-37c5-9119-31a231370c13.roa File: 3dd496c7-9413-37c5-9119-31a231370c13.roa (raw, json) Hash identifier: Mq4dR5+uLPtNxMos4H9BlDTOji8jpYp0psVjR5JDoHs= Subject key identifier: E7:60:44:30:B1:2A:15:99:A2:D4:D7:9E:FA:2D:1E:0B:28:B3:17:FD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D19B4EB59552E809137709A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dd496c7-9413-37c5-9119-31a231370c13.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 396565 IP address blocks: 2001:500:134::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:eb:59:55:2e:80:91:37:70:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=983ebecf-6801-4f75-8e11-c736350ffda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:96:6e:fd:92:e5:1f:0b:0b:c7:80:4b:6b:94: 73:a6:25:bb:1a:40:de:f1:22:7f:c2:e4:fa:32:7e: e1:59:d0:32:65:da:06:ad:0a:58:d9:a6:10:01:34: 72:00:23:0d:9c:2b:91:73:3f:9e:1d:5b:55:01:4f: 3d:ce:77:3d:7b:93:80:7e:9f:9f:48:73:1f:a9:41: 1b:dc:98:ee:57:3a:76:f5:bf:b1:a6:39:2c:bb:78: 5b:a2:1e:3a:6f:aa:bf:89:a3:61:f7:67:3d:26:03: 7c:c2:17:0f:e6:ec:a2:e1:09:9d:f9:47:96:8e:a1: 5b:66:82:22:6d:76:0b:9f:0d:ec:52:4b:59:4e:c8: 4a:dd:17:a2:b1:6d:e9:f6:0e:29:45:a5:7b:db:3f: cc:30:85:76:f8:e4:94:b5:8d:13:c4:81:1b:fa:01: 34:85:2d:dd:7d:4a:05:7d:15:11:3c:72:d6:f9:8d: 59:af:ae:4b:ba:2f:ed:6c:dd:3b:b7:4f:02:ce:6d: 60:cb:e4:05:f8:33:d9:61:aa:95:1b:fd:48:72:e1: 6e:57:f2:a2:e7:5d:8b:67:c9:df:81:31:67:b5:6e: c1:74:dd:e9:cf:7e:7c:2d:8c:76:67:ac:ab:d9:e7: 04:29:44:55:04:41:db:97:24:2a:14:7d:da:28:fd: 14:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:60:44:30:B1:2A:15:99:A2:D4:D7:9E:FA:2D:1E:0B:28:B3:17:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dd496c7-9413-37c5-9119-31a231370c13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:57:66:80:c6:09:2a:fe:a6:1d:91:bd:d4:a3:23:39:5c:5e: df:2b:df:02:f7:ee:b5:64:85:ab:13:1a:76:33:f9:89:39:bc: 23:50:6c:fb:71:30:d6:1e:88:07:fe:7d:a9:0c:c9:4e:42:a7: 4d:56:25:f5:49:41:f2:6f:b3:69:53:d2:41:3d:22:3b:03:1b: fd:e9:87:39:a5:53:f4:72:5c:7b:06:ed:46:d0:97:cc:a5:9c: 4a:05:a8:95:69:d6:d5:e6:1d:f4:b2:fb:7b:9c:a0:6b:f0:ed: 99:59:03:cd:f9:b6:d0:16:b5:b5:63:dc:01:3d:0d:0e:42:69: 8f:6c:57:34:c5:0e:98:59:60:db:f2:91:b1:21:b7:0a:6c:02: 7f:90:ce:f6:f0:a6:c3:fa:3c:88:11:62:e8:c0:9a:54:70:af: 79:6d:48:d6:90:58:97:37:13:0b:a9:4f:6d:9b:67:8f:65:c5: 53:63:00:7b:2b:fc:7d:b4:01:99:1e:96:b3:3c:af:87:ff:fb: 14:c9:6d:fe:f6:1c:60:4a:91:50:09:39:ab:3c:24:76:ea:5f: c9:6b:9f:cb:4d:f7:c8:3c:57:f4:58:98:c6:7e:ab:20:5c:18: 84:cf:fe:bc:cf:65:a6:8b:00:e8:13:94:4c:3c:56:cf:ca:cb: 1a:32:c6:fa -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0ZtOtZVS6AkTdwmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk OTgzZWJlY2YtNjgwMS00Zjc1LThlMTEtYzczNjM1MGZmZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Zu/ZLlHwsLx4BLa5RzpiW7GkDe8SJ/wuT6 Mn7hWdAyZdoGrQpY2aYQATRyACMNnCuRcz+eHVtVAU89znc9e5OAfp+fSHMfqUEb 3JjuVzp29b+xpjksu3hboh46b6q/iaNh92c9JgN8whcP5uyi4Qmd+UeWjqFbZoIi bXYLnw3sUktZTshK3ReisW3p9g4pRaV72z/MMIV2+OSUtY0TxIEb+gE0hS3dfUoF fRURPHLW+Y1Zr65Lui/tbN07t08Czm1gy+QF+DPZYaqVG/1IcuFuV/Ki512LZ8nf gTFntW7BdN3pz358LYx2Z6yr2ecEKURVBEHblyQqFH3aKP0U1wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFOdgRDCxKhWZotTXnvotHgsosxf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2RkNDk2YzctOTQxMy0z N2M1LTkxMTktMzFhMjMxMzcwYzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE0 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCOV2aAxgkq/qYdkb3UoyM5XF7fK98C9+61ZIWr Exp2M/mJObwjUGz7cTDWHogH/n2pDMlOQqdNViX1SUHyb7NpU9JBPSI7Axv96Yc5 pVP0clx7Bu1G0JfMpZxKBaiVadbV5h30svt7nKBr8O2ZWQPN+bbQFrW1Y9wBPQ0O QmmPbFc0xQ6YWWDb8pGxIbcKbAJ/kM728KbD+jyIEWLowJpUcK95bUjWkFiXNxML qU9tm2ePZcVTYwB7K/x9tAGZHpazPK+H//sUyW3+9hxgSpFQCTmrPCR26l/Ja5/L TffIPFf0WJjGfqsgXBiEz/68z2WmiwDoE5RMPFbPyssaMsb6 -----END CERTIFICATE-----Generated at Thu Mar 26 22:34:36 2026 by rpki-client