$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5256def5-4931-3d31-9c86-b0f630cdf8a0.roa File: 5256def5-4931-3d31-9c86-b0f630cdf8a0.roa (raw, json) Hash identifier: Lr5UY1AhfaIesoATIQuodThfZv5zjt/jzEURyLoVdFg= Subject key identifier: 34:74:AF:27:04:1A:C1:A2:44:8A:AE:1D:1A:FC:B8:84:76:C2:AE:E6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D422F83E596A94823B6907800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5256def5-4931-3d31-9c86-b0f630cdf8a0.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 396542 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:83:e5:96:a9:48:23:b6:90:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=18c289fc-20d7-4afb-b822-2b2ab9335b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:29:5c:7d:72:34:4a:f2:73:4a:4b:2e:79:d2: 10:0a:15:81:d1:b9:3e:4b:65:f0:4c:40:b1:c2:8a: da:fa:39:50:86:1f:b2:f3:81:e1:1e:c4:2a:d9:24: ce:0f:3b:96:ac:b0:0a:d1:ff:62:b7:ba:c7:80:12: 8e:aa:54:8b:e6:31:c0:17:de:aa:2a:b1:ac:62:da: bb:e1:a0:78:1e:93:34:11:a3:70:43:a6:20:0f:4c: 4d:86:56:32:16:3d:21:23:87:4e:6d:a2:d9:60:d5: 72:e5:71:9a:02:18:4e:ba:2c:e3:bb:be:09:78:45: 78:02:dc:fe:4f:09:e2:3c:b3:69:63:84:ff:a5:d6: 04:af:e6:06:a6:63:8a:a1:ed:f2:dd:c2:6b:56:37: d2:52:20:54:65:78:c0:be:6f:82:29:e1:fd:64:e1: 1f:08:45:15:5e:65:49:35:5a:92:61:6b:99:f9:e7: 18:bb:34:0f:ad:ff:2c:a8:45:39:6e:c5:75:4d:7f: 80:61:58:e2:b1:de:5d:50:d6:9c:4b:f5:4e:10:51: e1:42:b4:db:5c:26:30:e4:db:a6:d1:2d:19:87:94: e1:59:2e:9e:f8:59:34:2a:ac:f6:8d:e5:bc:b4:25: 66:99:f0:81:1a:3d:a6:db:ae:88:60:1e:a8:ea:be: a4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:74:AF:27:04:1A:C1:A2:44:8A:AE:1D:1A:FC:B8:84:76:C2:AE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5256def5-4931-3d31-9c86-b0f630cdf8a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8f:e0:25:37:56:2f:d9:e9:93:ab:0b:8f:cf:9f:66:b4:e4: d7:cb:dd:75:e4:4e:df:7d:da:f5:81:e8:be:a0:2e:b6:ba:c0: c1:f9:67:75:fa:aa:79:51:ec:8b:67:8d:63:64:d2:2f:14:45: 52:ce:32:ef:1e:9b:58:d3:06:d4:ef:78:63:c6:ca:c8:96:13: 90:65:c4:ff:f9:66:a2:77:01:bd:30:1c:02:f5:a6:8f:3c:ab: 07:37:a2:ec:07:5d:67:12:1a:21:87:cb:97:49:12:a9:fd:3f: 6d:29:73:27:ed:15:3f:c2:3e:6d:24:b3:48:cf:6f:19:20:18: 43:09:01:35:e7:56:13:a5:a1:70:23:7b:8d:5c:e5:5c:1f:65: 2b:6f:87:6b:82:fa:12:a1:a7:fe:c8:45:3a:c9:73:91:fc:16: d9:51:57:09:d0:85:c4:ec:4c:e1:bf:f6:f2:cd:c2:39:0e:d2: 0c:8d:f7:83:74:39:74:28:73:d5:3c:ae:2e:a3:49:7a:b9:a9: 30:09:e7:fb:83:ea:23:fc:1c:e2:14:99:e2:63:2f:14:48:36: f9:a7:c1:32:d7:1f:21:1b:73:00:e9:ff:9c:5d:25:91:42:34: 61:29:b5:ba:58:bd:37:55:8c:0c:8e:83:96:ac:09:ac:db:15: bf:b4:05:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL4PllqlII7aQeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk MThjMjg5ZmMtMjBkNy00YWZiLWI4MjItMmIyYWI5MzM1YjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvilcfXI0SvJzSksuedIQChWB0bk+S2XwTECx wora+jlQhh+y84HhHsQq2STODzuWrLAK0f9it7rHgBKOqlSL5jHAF96qKrGsYtq7 4aB4HpM0EaNwQ6YgD0xNhlYyFj0hI4dObaLZYNVy5XGaAhhOuizju74JeEV4Atz+ TwniPLNpY4T/pdYEr+YGpmOKoe3y3cJrVjfSUiBUZXjAvm+CKeH9ZOEfCEUVXmVJ NVqSYWuZ+ecYuzQPrf8sqEU5bsV1TX+AYVjisd5dUNacS/VOEFHhQrTbXCYw5Num 0S0Zh5ThWS6e+Fk0Kqz2jeW8tCVmmfCBGj2m266IYB6o6r6kZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDR0rycEGsGiRIquHRr8uIR2wq7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTI1NmRlZjUtNDkzMS0z ZDMxLTljODYtYjBmNjMwY2RmOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOP4CU3Vi/Z6ZOrC4/Pn2a05NfL3XXkTt992vWB6L6gLra6wMH5 Z3X6qnlR7ItnjWNk0i8URVLOMu8em1jTBtTveGPGysiWE5BlxP/5ZqJ3Ab0wHAL1 po88qwc3ouwHXWcSGiGHy5dJEqn9P20pcyftFT/CPm0ks0jPbxkgGEMJATXnVhOl oXAje41c5VwfZStvh2uC+hKhp/7IRTrJc5H8FtlRVwnQhcTsTOG/9vLNwjkO0gyN 94N0OXQoc9U8ri6jSXq5qTAJ5/uD6iP8HOIUmeJjLxRINvmnwTLXHyEbcwDp/5xd JZFCNGEptbpYvTdVjAyOg5asCazbFb+0BTI= -----END CERTIFICATE-----Generated at Thu Mar 26 13:43:01 2026 by rpki-client