$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85912367-a091-390c-b227-fa5b3aef5f7b.roa File: 85912367-a091-390c-b227-fa5b3aef5f7b.roa (raw, json) Hash identifier: oW+jt8BS+jp0kopQnUa1rHH4OYlMBn1DytDnYR1/VWE= Subject key identifier: 5A:A7:0E:46:19:36:C4:80:B4:B8:EA:A7:A6:AE:9D:7C:09:0E:D4:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D422F84401FDC84C70C962480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85912367-a091-390c-b227-fa5b3aef5f7b.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 396613 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:84:40:1f:dc:84:c7:0c:96:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=66c1e653-82b7-45ea-9b5f-4295bb223139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:51:90:6c:fe:65:ab:cb:da:f6:77:a0:84:d1: 41:cc:d2:9c:7f:84:b8:32:d9:68:9d:f0:ac:f1:ce: 57:3f:a0:d4:0d:1f:91:78:86:01:be:df:75:f0:c3: ee:4b:07:86:49:a9:cf:c0:a2:3b:67:f0:4a:9b:a3: b7:e1:b7:6c:cd:0d:28:8b:4c:23:34:d3:08:75:eb: e9:f9:f8:cb:bd:e5:34:71:73:c5:42:14:69:47:39: 9b:24:44:4f:c4:71:b1:23:69:8c:d5:14:c8:57:63: d2:ea:c0:7c:dd:ba:fb:72:bf:ae:f5:24:e6:20:46: 55:8f:67:60:38:45:ab:df:13:0e:37:f2:93:b0:2b: 55:ed:0c:e3:f0:4d:28:57:01:e3:2b:3d:80:3b:03: 77:b8:89:fd:89:42:c3:3c:f9:b5:82:4a:83:82:22: 29:04:e6:81:d6:69:c3:6b:7f:7d:34:d0:fa:60:93: e3:f7:18:ef:18:cc:49:7d:f5:f7:08:43:10:dd:98: 63:37:4a:fb:51:f5:d2:b3:c8:e4:40:6f:4f:3b:b5: d1:35:34:c6:cd:34:86:b9:99:06:3f:67:aa:0e:9d: d2:ab:50:1e:17:90:c5:af:32:fc:37:53:7f:b7:59: d9:f3:86:55:36:ec:24:8c:b0:2d:ac:53:7a:42:73: b1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A7:0E:46:19:36:C4:80:B4:B8:EA:A7:A6:AE:9D:7C:09:0E:D4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85912367-a091-390c-b227-fa5b3aef5f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7e:69:62:ba:4a:c5:7d:06:79:4d:8a:de:65:61:7c:36:c6: af:bf:99:99:d3:00:b0:c6:8c:82:ed:a8:34:81:f2:07:ec:32: a4:89:57:38:9d:d1:3a:1a:b2:2a:af:e3:06:66:21:e4:f7:9d: 75:3f:22:c7:5c:f0:ca:a4:98:a8:68:8f:1c:1f:4d:e6:b5:67: e7:3b:71:62:40:e5:5b:a7:8b:7f:7c:af:06:38:be:fb:5c:86: 40:8e:52:4b:25:a1:1f:42:97:ca:e1:f2:a7:0e:b0:bc:bd:8e: 22:8e:19:fc:07:36:d2:1d:82:6f:05:90:b6:9c:bc:31:8e:0d: f9:4c:ae:c6:4f:04:9b:0d:66:b2:67:66:0c:b6:8c:e8:3a:54: 55:a3:73:d3:19:08:b5:b0:d0:85:30:4a:bf:17:9f:ad:06:95: 86:af:6b:cf:52:91:ef:5e:78:18:cf:fb:aa:46:c9:1e:b8:a2: 17:ab:96:5f:51:58:32:cc:63:88:0e:c6:c0:3d:78:c5:fe:19: 04:56:e4:3d:87:cc:be:10:dd:e7:c0:d9:95:8e:f6:ad:a8:a3: a0:d6:fe:22:13:6a:cd:ca:6e:d3:71:d8:90:e3:c0:cd:1c:27: d9:1a:da:17:6a:67:75:d1:4c:eb:66:0b:35:a2:0c:ae:8a:0a: ca:f3:9e:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL4RAH9yExwyWJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk NjZjMWU2NTMtODJiNy00NWVhLTliNWYtNDI5NWJiMjIzMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lGQbP5lq8va9neghNFBzNKcf4S4MtlonfCs 8c5XP6DUDR+ReIYBvt918MPuSweGSanPwKI7Z/BKm6O34bdszQ0oi0wjNNMIdevp +fjLveU0cXPFQhRpRzmbJERPxHGxI2mM1RTIV2PS6sB83br7cr+u9STmIEZVj2dg OEWr3xMON/KTsCtV7Qzj8E0oVwHjKz2AOwN3uIn9iULDPPm1gkqDgiIpBOaB1mnD a399NND6YJPj9xjvGMxJffX3CEMQ3ZhjN0r7UfXSs8jkQG9PO7XRNTTGzTSGuZkG P2eqDp3Sq1AeF5DFrzL8N1N/t1nZ84ZVNuwkjLAtrFN6QnOxFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFqnDkYZNsSAtLjqp6aunXwJDtRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODU5MTIzNjctYTA5MS0z OTBjLWIyMjctZmE1YjNhZWY1ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE5+aWK6SsV9BnlNit5lYXw2xq+/mZnTALDGjILtqDSB8gfsMqSJ Vzid0Toasiqv4wZmIeT3nXU/Isdc8MqkmKhojxwfTea1Z+c7cWJA5Vuni398rwY4 vvtchkCOUksloR9Cl8rh8qcOsLy9jiKOGfwHNtIdgm8FkLacvDGODflMrsZPBJsN ZrJnZgy2jOg6VFWjc9MZCLWw0IUwSr8Xn60GlYava89Ske9eeBjP+6pGyR64oher ll9RWDLMY4gOxsA9eMX+GQRW5D2HzL4Q3efA2ZWO9q2oo6DW/iITas3KbtNx2JDj wM0cJ9ka2hdqZ3XRTOtmCzWiDK6KCsrznrI= -----END CERTIFICATE-----Generated at Thu Mar 26 16:46:18 2026 by rpki-client