$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa File: 40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa (raw, json) Hash identifier: blyBzJBtFJp+2A9uRrCvhpeJCCKT/7QnEnxraRTXxTQ= Subject key identifier: 67:44:B6:92:E7:A0:BA:08:D1:B0:EC:09:8D:01:83:F8:96:B1:7F:F6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F75A4059DCEBBB9ACE70A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa Signing time: Tue 10 Mar 2026 14:28:40 +0000 ROA not before: Tue 10 Mar 2026 14:28:40 +0000 ROA not after: Mon 08 Jun 2026 14:28:40 +0000 asID: 40717 IP address blocks: 2001:503:d414::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:75:a4:05:9d:ce:bb:b9:ac:e7:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 14:28:40 2026 GMT Not After : Jun 8 14:28:40 2026 GMT Subject: CN=aaff9fca-2faa-4c1b-a74f-271850bb9182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:88:28:f0:96:d4:4e:6f:54:87:6c:7e:5d:c0: d6:d9:24:24:61:44:25:22:3c:3f:6c:04:a0:38:a7: 9d:04:3c:38:a3:9c:5a:f4:0c:2d:c9:4d:aa:ed:b6: b4:2e:1e:7a:73:34:54:77:cf:e3:e0:b4:d3:24:26: 15:35:fc:ff:1d:e1:77:99:a7:df:89:b2:12:f3:d9: 53:59:9d:e9:c5:4a:d8:ca:1a:d2:fb:6b:75:09:15: ff:b6:27:65:64:66:09:6c:b2:84:e3:68:7f:b0:2d: 1e:c7:93:03:2e:36:7c:c2:83:35:0f:ae:70:57:38: dc:e8:d9:e1:1e:60:41:eb:c2:a3:f0:b8:57:49:88: c7:30:a1:64:2f:78:2c:5a:a9:40:92:57:64:5f:a7: 8c:cd:ca:8a:d0:cc:4e:ca:60:29:95:a9:e4:98:3a: 0c:93:db:41:37:db:27:ef:8c:66:41:18:d9:79:6f: 6e:b8:a4:b0:8e:91:3e:eb:fa:17:e0:45:b6:cf:a9: fd:16:b5:2e:27:a8:d2:66:3f:01:f0:a7:74:a3:2e: 95:c1:cc:ba:dc:a8:bf:47:70:89:9f:a9:cb:c6:b1: fa:28:1b:ef:6d:7c:ce:51:57:c8:a9:e4:5d:98:55: ff:93:96:9e:a6:54:85:16:00:8c:9b:46:3d:de:e2: ec:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:44:B6:92:E7:A0:BA:08:D1:B0:EC:09:8D:01:83:F8:96:B1:7F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/40cc5d4d-5383-317e-95ab-7843bb7d4e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d414:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:19:c8:9e:f6:03:56:82:38:ed:15:24:7a:38:ff:a6:60:50: ee:f3:22:f4:f5:eb:18:45:39:ce:5f:d4:b0:ac:58:8c:b7:ae: 15:45:5f:d4:06:02:b9:d4:51:6f:60:16:93:29:26:0f:1d:82: aa:e9:86:0b:32:f3:f8:a1:3b:69:c3:bb:10:14:50:b3:62:9f: 58:8a:f4:c7:68:16:0b:92:18:99:6c:45:47:6f:17:d3:7c:dc: f2:9c:5e:e7:3b:75:07:8f:d7:dc:a7:3a:a8:de:c9:af:9f:ec: 98:3a:4f:6e:7d:b4:90:a5:c8:a9:09:8d:c4:a1:c6:ef:5d:6a: df:e7:e7:b1:c2:47:b5:d6:01:9c:49:93:7f:a0:18:e1:18:e9: 72:2c:d5:61:f9:99:e8:7b:c2:bd:d3:5d:2c:8e:c5:e3:9f:c3: ab:9c:f0:b0:23:7f:eb:88:3f:f4:f9:4d:de:62:b2:b2:b2:77: e8:a5:10:61:f9:75:05:32:0f:23:a3:28:af:d5:47:aa:f2:93: 91:58:1c:c5:28:aa:48:86:14:f8:9b:67:67:ea:62:54:06:44: 61:4c:0d:c2:a2:91:bb:45:13:96:a2:cf:d5:5c:62:df:b7:b7: a5:1d:ac:fc:f4:51:73:71:b3:43:82:05:99:fc:90:c8:f3:fe: a2:44:c2:cd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fdaQFnc67uaznCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDE0Mjg0MFoXDTI2MDYwODE0Mjg0MFowLzEtMCsGA1UEAxMk YWFmZjlmY2EtMmZhYS00YzFiLWE3NGYtMjcxODUwYmI5MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4go8JbUTm9Uh2x+XcDW2SQkYUQlIjw/bASg OKedBDw4o5xa9AwtyU2q7ba0Lh56czRUd8/j4LTTJCYVNfz/HeF3maffibIS89lT WZ3pxUrYyhrS+2t1CRX/tidlZGYJbLKE42h/sC0ex5MDLjZ8woM1D65wVzjc6Nnh HmBB68Kj8LhXSYjHMKFkL3gsWqlAkldkX6eMzcqK0MxOymAplankmDoMk9tBN9sn 74xmQRjZeW9uuKSwjpE+6/oX4EW2z6n9FrUuJ6jSZj8B8Kd0oy6Vwcy63Ki/R3CJ n6nLxrH6KBvvbXzOUVfIqeRdmFX/k5aeplSFFgCMm0Y93uLswQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGdEtpLnoLoI0bDsCY0Bg/iWsX/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDBjYzVkNGQtNTM4My0z MTdlLTk1YWItNzg0M2JiN2Q0ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA9QU AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCaGcie9gNWgjjtFSR6OP+mYFDu8yL09esYRTnO X9SwrFiMt64VRV/UBgK51FFvYBaTKSYPHYKq6YYLMvP4oTtpw7sQFFCzYp9YivTH aBYLkhiZbEVHbxfTfNzynF7nO3UHj9fcpzqo3smvn+yYOk9ufbSQpcipCY3Eocbv XWrf5+exwke11gGcSZN/oBjhGOlyLNVh+Znoe8K9010sjsXjn8OrnPCwI3/riD/0 +U3eYrKysnfopRBh+XUFMg8joyiv1Ueq8pORWBzFKKpIhhT4m2dn6mJUBkRhTA3C opG7RROWos/VXGLft7elHaz89FFzcbNDggWZ/JDI8/6iRMLN -----END CERTIFICATE-----Generated at Thu Mar 26 14:01:02 2026 by rpki-client