$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5651fa24-8c78-3138-8ab6-dac9c1726f5f.roa File: 5651fa24-8c78-3138-8ab6-dac9c1726f5f.roa (raw, json) Hash identifier: 2tDEkReDZn+skJm6/N6IJ8DgttVf/f0RsCnhvs8Cs5k= Subject key identifier: 3B:56:4F:9B:DE:C3:1A:3D:85:D0:57:F4:84:1B:65:0D:B6:81:2D:7F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D24E130FFE24B89638F68DFC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5651fa24-8c78-3138-8ab6-dac9c1726f5f.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 40717 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:30:ff:e2:4b:89:63:8f:68:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=01e6176b-52f0-4266-a7f3-bf16fd4676d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:8a:b1:30:56:0a:e9:91:ed:39:a0:84:8c:89: a2:86:a4:d9:56:32:e5:47:54:69:42:0d:15:5c:d0: 7e:c7:68:1c:9c:02:0c:be:83:65:61:19:22:a6:7e: a3:d8:01:7c:2f:67:f8:b2:c6:e5:a6:c8:3c:86:f5: 0b:f4:bf:74:c8:6d:a4:f2:23:16:31:b9:1c:9a:4e: fe:31:f7:3b:55:57:84:81:60:88:9b:54:60:8e:bc: cc:f1:f5:49:65:4b:03:5e:c8:64:ee:50:56:cb:2d: a5:7e:db:e7:b5:1e:45:48:37:44:db:c8:d2:f0:7b: 86:f4:99:e5:15:0a:9c:68:01:07:8b:b0:86:2c:87: 08:23:0f:b0:dc:0f:49:d1:5b:42:b6:8c:5c:87:34: c0:5e:b7:5f:70:a0:bd:11:3a:58:c6:24:b8:f3:de: 57:ae:e1:70:b7:49:63:bb:3c:2d:af:7c:a0:31:45: 28:f6:fe:9b:7b:33:10:cf:2b:29:44:21:98:fa:39: 0d:da:28:c0:66:29:fa:0d:c2:a5:2c:37:6f:9e:d8: 30:8b:f4:0a:3b:1a:58:0f:a6:41:01:71:bf:51:dd: 79:c5:43:b6:a4:9f:25:92:3d:2d:28:64:31:9c:7f: 7b:f9:7e:40:68:20:f2:ca:81:c1:a5:f9:65:34:76: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:56:4F:9B:DE:C3:1A:3D:85:D0:57:F4:84:1B:65:0D:B6:81:2D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5651fa24-8c78-3138-8ab6-dac9c1726f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ea:ee:c4:3f:95:94:27:52:07:7a:d9:bd:1c:71:5c:01:c6: b2:35:81:85:f4:d6:1d:ae:18:2c:88:c7:81:45:50:b6:da:84: 4a:d5:18:40:a7:00:7c:36:95:02:60:fe:f4:8a:b5:8c:41:69: 4e:c0:29:bc:75:80:ed:bf:2e:5d:36:2b:76:c0:3a:60:5b:be: dc:9a:74:ce:ba:2e:a7:68:71:7c:ba:81:ba:81:56:37:a9:e6: b2:58:28:8a:1a:4a:c3:46:27:55:76:f1:61:93:c4:29:be:ae: ec:81:db:c9:e2:59:fb:c8:22:64:da:63:83:64:a7:c0:79:c9: 7f:b0:cd:54:15:8b:33:2c:0e:ea:0a:7b:4f:20:d0:56:73:46: 05:98:02:2f:ab:9b:55:4d:ff:f4:4a:5d:26:6d:9c:50:22:95: 70:b1:08:41:4d:56:80:41:f0:f0:1e:70:5f:16:ba:44:06:a3: 36:0e:05:3e:96:1e:61:f4:d2:4a:bb:c4:fc:f7:1d:d9:23:6b: 70:e7:26:69:43:7c:76:d9:34:a9:4d:92:13:49:4d:e0:54:5c: 4f:60:74:09:5c:8a:85:d9:c2:0c:92:9d:59:72:c5:b2:60:dd: a2:cd:e2:ea:90:be:88:1b:48:41:78:c0:13:ec:24:11:04:ee: 71:fd:f4:f3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0k4TD/4kuJY49o38AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MDFlNjE3NmItNTJmMC00MjY2LWE3ZjMtYmYxNmZkNDY3NmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYqxMFYK6ZHtOaCEjImihqTZVjLlR1RpQg0V XNB+x2gcnAIMvoNlYRkipn6j2AF8L2f4ssblpsg8hvUL9L90yG2k8iMWMbkcmk7+ Mfc7VVeEgWCIm1RgjrzM8fVJZUsDXshk7lBWyy2lftvntR5FSDdE28jS8HuG9Jnl FQqcaAEHi7CGLIcIIw+w3A9J0VtCtoxchzTAXrdfcKC9ETpYxiS4895XruFwt0lj uzwtr3ygMUUo9v6bezMQzyspRCGY+jkN2ijAZin6DcKlLDdvntgwi/QKOxpYD6ZB AXG/Ud15xUO2pJ8lkj0tKGQxnH97+X5AaCDyyoHBpfllNHZ7eQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDtWT5vewxo9hdBX9IQbZQ22gS1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNTY1MWZhMjQtOGM3OC0z MTM4LThhYjYtZGFjOWMxNzI2ZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCf6u7EP5WUJ1IHetm9HHFcAcayNYGF9NYdrhgs iMeBRVC22oRK1RhApwB8NpUCYP70irWMQWlOwCm8dYDtvy5dNit2wDpgW77cmnTO ui6naHF8uoG6gVY3qeayWCiKGkrDRidVdvFhk8Qpvq7sgdvJ4ln7yCJk2mODZKfA ecl/sM1UFYszLA7qCntPINBWc0YFmAIvq5tVTf/0Sl0mbZxQIpVwsQhBTVaAQfDw HnBfFrpEBqM2DgU+lh5h9NJKu8T89x3ZI2tw5yZpQ3x22TSpTZITSU3gVFxPYHQJ XIqF2cIMkp1ZcsWyYN2izeLqkL6IG0hBeMAT7CQRBO5x/fTz -----END CERTIFICATE-----Generated at Thu Mar 26 16:28:34 2026 by rpki-client