$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a8797d1-289e-3654-b380-2d2967c7627a.roa File: 4a8797d1-289e-3654-b380-2d2967c7627a.roa (raw, json) Hash identifier: ZUSKIp5aL/bsRRVuyy9SztP1Qx+svSuTp008abgIvIE= Subject key identifier: 36:81:31:71:72:8D:C9:4B:01:20:82:2D:5C:BC:A1:43:0C:41:44:A2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D422F7C1426F003E9DE04C680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a8797d1-289e-3654-b380-2d2967c7627a.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 397200 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:7c:14:26:f0:03:e9:de:04:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=cf977da5-aa60-4e45-a210-edb1e1e35bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:85:28:b0:11:f7:45:3e:c4:f3:6c:7e:30:ca: bd:86:b2:4e:14:ef:2b:eb:bf:5d:b9:b7:2e:ae:3a: 4e:5e:0a:94:3f:59:95:0d:1a:e8:18:33:52:40:24: 4b:90:50:3c:ab:88:1a:aa:2b:e9:19:dc:87:82:6d: 41:96:1d:96:bf:b0:96:b6:0c:c0:0d:ef:1c:6a:88: 62:96:5a:84:96:22:7c:75:cb:bd:8c:68:2b:53:0b: cf:04:cc:e0:0a:fe:31:4f:39:c4:05:0a:ee:e1:bf: 67:b3:d9:15:82:00:f5:3c:14:9c:94:2b:44:f1:87: dd:bb:0e:30:cb:2d:2b:e7:31:13:ca:d9:29:5c:60: 0c:b6:d8:5b:12:ff:26:21:d5:ef:19:cc:8c:20:70: 94:17:55:06:fb:ca:f5:12:74:58:2e:d8:92:db:21: 53:92:92:a9:14:47:87:f2:5d:f3:5f:5e:ea:81:c8: fe:42:e6:32:85:87:aa:59:c0:40:ee:26:65:4e:51: 95:68:eb:48:cc:67:5f:41:90:10:c3:1e:e0:ba:15: f2:ec:b0:0f:ab:74:b2:11:8e:29:c7:ff:4e:30:7b: 5d:69:0a:df:4c:19:c4:0a:40:92:5d:db:67:38:2b: 33:da:aa:03:af:94:60:30:b8:ab:c4:46:85:4d:55: db:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:81:31:71:72:8D:C9:4B:01:20:82:2D:5C:BC:A1:43:0C:41:44:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a8797d1-289e-3654-b380-2d2967c7627a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f6:4c:06:ba:03:5e:ab:e3:f3:e4:7b:a0:b3:4f:01:7b:72: 1d:05:c2:ba:71:ae:9e:aa:ef:66:c4:2e:7a:78:ad:ad:78:b6: 93:62:5b:52:a9:7a:e6:7b:dc:9a:23:23:05:ae:ee:64:81:3f: c9:fd:4d:cf:f9:2c:85:26:57:c9:f4:fd:51:c7:08:73:ba:30: ba:5c:4e:ec:d6:0a:32:bd:fa:93:55:f4:e3:6a:0d:c2:2f:c0: 2d:d5:a8:fa:cd:d3:e0:89:cf:7a:74:8e:00:05:35:74:44:74: 67:02:bf:2e:4c:51:8a:b1:02:13:48:0f:93:72:48:1a:8c:00: 6d:72:7b:51:72:f0:1e:52:df:d1:c4:52:14:9f:30:70:bc:a4: eb:65:0f:06:4a:d9:d1:f3:cb:b1:63:81:b2:ae:a8:29:86:1f: 3a:af:2b:51:d5:11:15:20:46:53:55:d9:e6:d0:c8:83:68:1f: 31:14:24:06:55:f3:3d:5b:82:c4:c5:ed:64:e4:62:d5:95:2c: 9e:41:41:b5:68:b6:08:ee:08:92:1a:86:c1:46:9e:4d:27:ad: f1:5f:dc:5c:9a:e7:a2:51:83:4a:14:f6:47:1a:8a:12:1a:9d: e3:05:93:88:88:e1:f6:bc:b8:cf:a9:6e:63:62:b3:c9:09:b3: 65:04:fe:05 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL3wUJvAD6d4ExoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk Y2Y5NzdkYTUtYWE2MC00ZTQ1LWEyMTAtZWRiMWUxZTM1YmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYUosBH3RT7E82x+MMq9hrJOFO8r679dubcu rjpOXgqUP1mVDRroGDNSQCRLkFA8q4gaqivpGdyHgm1Blh2Wv7CWtgzADe8caohi llqEliJ8dcu9jGgrUwvPBMzgCv4xTznEBQru4b9ns9kVggD1PBSclCtE8Yfduw4w yy0r5zETytkpXGAMtthbEv8mIdXvGcyMIHCUF1UG+8r1EnRYLtiS2yFTkpKpFEeH 8l3zX17qgcj+QuYyhYeqWcBA7iZlTlGVaOtIzGdfQZAQwx7guhXy7LAPq3SyEY4p x/9OMHtdaQrfTBnECkCSXdtnOCsz2qoDr5RgMLirxEaFTVXb5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDaBMXFyjclLASCCLVy8oUMMQUSiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGE4Nzk3ZDEtMjg5ZS0z NjU0LWIzODAtMmQyOTY3Yzc2MjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABT2TAa6A16r4/Pke6CzTwF7ch0Fwrpxrp6q72bELnp4ra14tpNi W1KpeuZ73JojIwWu7mSBP8n9Tc/5LIUmV8n0/VHHCHO6MLpcTuzWCjK9+pNV9ONq DcIvwC3VqPrN0+CJz3p0jgAFNXREdGcCvy5MUYqxAhNID5NySBqMAG1ye1Fy8B5S 39HEUhSfMHC8pOtlDwZK2dHzy7FjgbKuqCmGHzqvK1HVERUgRlNV2ebQyINoHzEU JAZV8z1bgsTF7WTkYtWVLJ5BQbVotgjuCJIahsFGnk0nrfFf3Fya56JRg0oU9kca ihIaneMFk4iI4fa8uM+pbmNis8kJs2UE/gU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:07 2026 by rpki-client