$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f857a38-b25b-30fb-876d-64382ae98d9a.roa File: 7f857a38-b25b-30fb-876d-64382ae98d9a.roa (raw, json) Hash identifier: EYaWzRiG2AuewiC4tQ0B9mm+mLXIjEyptRtkVXzD4Bg= Subject key identifier: FF:40:47:F0:20:F3:C4:33:5A:D2:CA:DB:AA:10:F8:BD:E1:42:A8:00 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D6E1B5D7671CD553DA3A0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f857a38-b25b-30fb-876d-64382ae98d9a.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 36619 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:6e:1b:5d:76:71:cd:55:3d:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=10d10d77-13d7-4f4d-bf39-b35c5a5faf8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:28:0c:d7:f6:49:83:23:2b:a5:56:67:cd: cd:75:75:b6:89:ae:4b:ef:af:26:bf:ef:7e:a9:a7: 5d:9d:22:bd:ab:f6:75:7c:0b:42:e0:14:84:ec:0d: 8f:68:be:b7:d3:76:70:4f:d3:69:de:a9:f0:b8:ef: 31:96:38:91:80:15:60:92:d8:da:99:1c:ad:cd:37: 53:b0:e2:91:19:12:c6:2a:d4:4e:06:27:31:f7:65: 70:fc:6a:9b:3d:b0:c0:10:3a:17:77:27:c6:f7:c1: a4:14:33:97:d0:71:e7:8a:0c:c9:cd:94:8b:76:1d: 98:2a:68:18:93:fa:1b:a1:ca:25:77:95:8a:00:28: 4b:30:71:0d:89:36:ae:5f:6a:4d:71:27:83:50:83: 25:f1:cd:c1:f5:35:9b:45:db:5b:e1:21:c9:a4:53: db:62:77:e6:1b:59:5b:b7:e3:60:96:b3:66:87:75: cb:e7:1e:17:53:35:d2:46:c4:3b:06:04:b1:c3:d8: 92:4a:07:8a:e2:1c:03:d5:c1:b5:80:4c:fd:76:6e: d4:b6:58:f5:83:ae:b4:d7:8d:09:ac:86:42:b4:41: fa:f1:9b:63:b1:ae:d8:e9:ec:19:dd:e3:c4:00:41: e0:34:c1:d9:71:0f:bd:79:ca:6d:3a:01:c0:55:71: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:40:47:F0:20:F3:C4:33:5A:D2:CA:DB:AA:10:F8:BD:E1:42:A8:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f857a38-b25b-30fb-876d-64382ae98d9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:5e:f5:5a:ab:f4:f5:6f:e2:c1:a0:4c:11:7a:4a:65:c7:d3: d7:80:e4:25:92:82:40:39:40:0e:e2:bd:3f:01:f7:35:48:f0: 23:b3:9c:34:75:37:ea:b6:25:06:eb:5e:e1:9c:77:f8:8e:2d: 8e:07:b7:31:5c:4e:50:29:73:69:c5:74:9d:2b:13:b9:d5:f9: 3c:a0:84:77:3b:5a:23:e3:10:d7:7e:c0:77:61:72:60:f5:65: 94:46:af:f2:98:9a:c1:16:95:e8:80:3e:a1:48:68:c4:e0:6e: 6a:b8:09:84:2b:91:0f:07:8c:4c:00:37:c1:60:d4:0b:74:ac: 30:52:20:a7:51:2b:bd:a9:47:fa:76:44:8b:18:ae:c0:41:64: 2a:7e:a7:8e:2c:06:c3:6d:e3:05:fb:bb:13:f6:10:55:89:83: 68:a7:83:3d:6f:21:03:2c:1c:f7:ae:6c:03:17:81:34:2f:7c: 4d:97:33:45:62:3b:be:d4:39:34:d8:2d:0d:05:71:b9:fd:f3: e3:ad:3f:d0:40:6d:33:fc:6c:e3:55:02:01:9b:a4:c0:20:ee: 65:9e:7d:fc:b0:b3:9b:f2:5e:25:65:b7:da:6e:01:a0:72:e1: 7d:c5:71:dc:f8:94:30:fb:2a:a8:cf:98:aa:c9:31:b3:74:0a: a6:28:ab:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPW4bXXZxzVU9o6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTBkMTBkNzctMTNkNy00ZjRkLWJmMzktYjM1YzVhNWZhZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviIoDNf2SYMjK6VWZ83NdXW2ia5L768mv+9+ qaddnSK9q/Z1fAtC4BSE7A2PaL6303ZwT9Np3qnwuO8xljiRgBVgktjamRytzTdT sOKRGRLGKtROBicx92Vw/GqbPbDAEDoXdyfG98GkFDOX0HHnigzJzZSLdh2YKmgY k/obocold5WKAChLMHENiTauX2pNcSeDUIMl8c3B9TWbRdtb4SHJpFPbYnfmG1lb t+NglrNmh3XL5x4XUzXSRsQ7BgSxw9iSSgeK4hwD1cG1gEz9dm7Utlj1g660140J rIZCtEH68Ztjsa7Y6ewZ3ePEAEHgNMHZcQ+9ecptOgHAVXE2QQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP9AR/Ag88QzWtLK26oQ+L3hQqgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvN2Y4NTdhMzgtYjI1Yi0z MGZiLTg3NmQtNjQzODJhZTk4ZDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL5e9Vqr9PVv4sGgTBF6SmXH09eA5CWSgkA5QA7ivT8B9zVI8COz nDR1N+q2JQbrXuGcd/iOLY4HtzFcTlApc2nFdJ0rE7nV+TyghHc7WiPjENd+wHdh cmD1ZZRGr/KYmsEWleiAPqFIaMTgbmq4CYQrkQ8HjEwAN8Fg1At0rDBSIKdRK72p R/p2RIsYrsBBZCp+p44sBsNt4wX7uxP2EFWJg2ingz1vIQMsHPeubAMXgTQvfE2X M0ViO77UOTTYLQ0Fcbn98+OtP9BAbTP8bONVAgGbpMAg7mWeffyws5vyXiVlt9pu AaBy4X3Fcdz4lDD7KqjPmKrJMbN0CqYoq8E= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:57 2026 by rpki-client