$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/617fa947-359e-3310-951b-4abf6edf3172.roa File: 617fa947-359e-3310-951b-4abf6edf3172.roa (raw, json) Hash identifier: shvZ9I4wTArTyFACO2kszVR+4dZ1YjxdwH+cUCwmTb8= Subject key identifier: 70:3F:96:A1:DC:EB:BA:92:D8:AB:8A:1B:B3:03:63:0F:11:67:CB:A0 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D422F8A5E3C9D43915DEBC6C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/617fa947-359e-3310-951b-4abf6edf3172.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 397208 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8a:5e:3c:9d:43:91:5d:eb:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=bff47044-c881-4fba-ac96-db04826e1571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4e:86:9b:8f:11:d9:1e:72:63:ac:6b:42:29: 07:b2:a4:62:8b:bc:0c:e0:8d:c3:21:f5:53:d1:29: cb:3a:3b:fa:e7:29:85:5a:fe:52:ac:ae:4a:68:37: 6a:51:f4:ae:aa:a0:00:6c:9d:d6:fc:25:48:8b:9d: 75:ea:55:7c:a9:74:d5:4c:e8:8e:80:66:15:5d:35: be:4e:0e:fc:46:89:d3:60:d3:41:da:f2:83:0b:9f: 92:95:78:2f:07:f2:f9:8f:aa:46:b7:0a:95:75:f0: fd:2c:51:88:fb:12:23:a0:57:68:09:a3:7a:88:f2: 4e:6f:4a:d5:03:af:23:fc:d8:0f:82:8f:60:1b:12: 5d:53:72:9f:97:d2:01:00:a5:19:90:28:fd:19:30: c8:f5:ab:79:c8:e6:6e:cb:99:cd:1a:94:49:52:6a: 40:fd:cd:62:51:01:4f:69:27:30:ab:8f:85:0e:df: 3b:ca:3b:32:8c:f8:c4:c8:18:28:8a:40:f3:e9:a8: 9c:9d:e3:dc:db:7a:c3:df:c2:76:4a:a9:a9:f0:d8: 92:9b:64:61:89:7b:be:f5:4e:89:e9:f5:53:90:d5: cf:ac:aa:a6:0e:78:23:41:ca:ac:31:77:b8:47:c7: b9:cd:4f:73:61:33:60:47:3c:dc:b1:77:36:f6:5c: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3F:96:A1:DC:EB:BA:92:D8:AB:8A:1B:B3:03:63:0F:11:67:CB:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/617fa947-359e-3310-951b-4abf6edf3172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b1:35:53:23:63:a8:c3:10:93:a5:58:42:f9:cc:80:0e:66: 4c:23:99:45:d1:d1:6b:77:d3:ef:9d:94:24:e4:35:d2:60:50: 31:b8:0d:f0:2c:0a:d2:da:42:f5:da:4f:72:2e:47:4c:23:be: 2a:e0:b2:86:47:ab:c6:7b:3a:ed:16:d6:b4:65:58:ba:ac:21: 79:a9:85:31:12:12:27:38:b6:85:4c:eb:53:df:13:c1:f9:b9: 91:2c:39:69:1c:8b:52:44:f2:1b:61:b1:4e:0d:89:22:b9:b1: b4:00:99:f5:7a:db:dc:d6:02:d8:6c:e6:93:c1:e1:e6:00:fe: c1:f1:e6:ea:fd:e6:58:11:be:79:04:9f:2b:f7:46:af:07:5b: 2f:38:22:c7:22:35:51:ef:a9:e5:50:cb:93:41:b4:d1:0e:3f: 58:9b:2a:6f:ae:00:77:73:97:5a:bb:0c:0e:9c:b6:64:17:6e: 42:b5:cc:c5:7f:35:06:5d:8c:a7:05:a7:a8:33:bc:8a:06:96: 28:e9:a6:0a:46:b2:da:0b:67:77:d3:c9:28:b4:c7:ad:ce:d7: 3e:64:b8:4d:f0:97:02:80:63:21:cb:67:46:9d:b1:7a:27:6b: ea:eb:96:11:92:1c:21:bd:d6:d3:79:0d:90:27:6d:59:96:18: b5:d5:18:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL4pePJ1DkV3rxsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk YmZmNDcwNDQtYzg4MS00ZmJhLWFjOTYtZGIwNDgyNmUxNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU6Gm48R2R5yY6xrQikHsqRii7wM4I3DIfVT 0SnLOjv65ymFWv5SrK5KaDdqUfSuqqAAbJ3W/CVIi5116lV8qXTVTOiOgGYVXTW+ Tg78RonTYNNB2vKDC5+SlXgvB/L5j6pGtwqVdfD9LFGI+xIjoFdoCaN6iPJOb0rV A68j/NgPgo9gGxJdU3Kfl9IBAKUZkCj9GTDI9at5yOZuy5nNGpRJUmpA/c1iUQFP aScwq4+FDt87yjsyjPjEyBgoikDz6aicnePc23rD38J2Sqmp8NiSm2RhiXu+9U6J 6fVTkNXPrKqmDngjQcqsMXe4R8e5zU9zYTNgRzzcsXc29lzvGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHA/lqHc67qS2KuKG7MDYw8RZ8ugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjE3ZmE5NDctMzU5ZS0z MzEwLTk1MWItNGFiZjZlZGYzMTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHaxNVMjY6jDEJOlWEL5zIAOZkwjmUXR0Wt30++dlCTkNdJgUDG4 DfAsCtLaQvXaT3IuR0wjvirgsoZHq8Z7Ou0W1rRlWLqsIXmphTESEic4toVM61Pf E8H5uZEsOWkci1JE8hthsU4NiSK5sbQAmfV629zWAths5pPB4eYA/sHx5ur95lgR vnkEnyv3Rq8HWy84IsciNVHvqeVQy5NBtNEOP1ibKm+uAHdzl1q7DA6ctmQXbkK1 zMV/NQZdjKcFp6gzvIoGlijppgpGstoLZ3fTySi0x63O1z5kuE3wlwKAYyHLZ0ad sXona+rrlhGSHCG91tN5DZAnbVmWGLXVGIw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:21:57 2026 by rpki-client