$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97d7d508-579d-36e9-ab83-9b04ca072e3c.roa File: 97d7d508-579d-36e9-ab83-9b04ca072e3c.roa (raw, json) Hash identifier: qK8cw/uYyhQcUjf3eTaB8gjqjDXpdZq1pmxNkIeWe1Y= Subject key identifier: 2D:8B:AA:6F:7D:A6:89:21:F2:08:59:26:8B:3A:56:3E:B3:D7:02:FA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C35A908BC9D4E0D3FD300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97d7d508-579d-36e9-ab83-9b04ca072e3c.roa Signing time: Thu 12 Mar 2026 14:31:05 +0000 ROA not before: Thu 12 Mar 2026 14:31:05 +0000 ROA not after: Wed 10 Jun 2026 14:31:05 +0000 asID: 396543 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:35:a9:08:bc:9d:4e:0d:3f:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:05 2026 GMT Not After : Jun 10 14:31:05 2026 GMT Subject: CN=72e3674b-0a17-40b9-9c50-a42cf31b1d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a3:6f:03:28:e7:03:94:43:b1:dc:89:9c:19: 0c:1e:76:be:2e:28:fd:b5:e2:9a:3a:7e:40:30:4a: 80:ad:56:42:56:5d:de:b1:02:e0:a4:e7:90:f2:64: 18:79:57:77:7d:a7:4d:72:75:37:16:0b:5f:b6:7f: 82:96:26:27:e9:91:00:98:4a:a4:46:83:9f:67:39: 2d:0d:fa:ce:43:e5:09:bf:f2:fa:18:c4:10:6f:e7: 79:49:c9:34:9e:1e:cb:73:4a:1e:45:f9:c2:42:90: 69:39:5a:01:2c:48:54:18:7f:76:61:16:72:b5:33: 54:79:fd:67:32:ae:7d:61:07:ee:f9:90:21:18:a8: 57:3c:43:60:1b:ac:b1:4d:20:1f:ef:41:4c:35:e1: 0b:19:af:fd:7a:e1:a4:4c:a7:bc:07:7d:de:fa:f5: 4d:ba:60:92:7e:e6:cf:32:a9:30:2f:ec:dc:6a:b1: 02:97:a8:9a:6d:00:e2:a1:0c:1e:ea:5c:9b:8d:aa: 47:b8:a4:71:8e:57:90:64:16:26:9e:67:c5:db:8d: 58:fa:c9:10:f6:89:96:77:6b:e8:41:77:7a:8f:5f: 06:ab:61:b2:99:b8:e1:1d:1d:68:83:9e:b9:fd:a1: ed:6e:3d:42:9e:30:5f:88:a3:78:43:9e:32:7b:77: c1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8B:AA:6F:7D:A6:89:21:F2:08:59:26:8B:3A:56:3E:B3:D7:02:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/97d7d508-579d-36e9-ab83-9b04ca072e3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:44:7c:04:f7:1e:5b:83:b7:04:f0:cf:2e:34:a2:5b:af:5d: 25:08:7a:33:23:30:c2:4d:c2:6b:14:35:ff:76:6e:30:20:46: e7:dd:66:ac:a0:6a:fb:0b:93:77:ed:56:a2:f6:48:b7:8a:1d: eb:7e:c7:33:17:9e:c2:f7:6d:2a:db:bd:f6:5c:19:5a:97:74: 70:ba:cb:7c:86:d4:72:57:cf:fe:c8:39:f7:75:d5:68:f8:29: d0:ee:53:40:63:6b:4b:1b:90:47:ef:82:14:95:4f:89:30:66: 36:6f:26:5b:f6:3d:7e:68:b1:ae:d5:f0:3a:05:b4:a8:7f:02: a8:39:78:f0:3e:f7:21:cc:5f:00:ab:0e:9c:af:e5:15:68:4b: 68:53:1e:8c:d4:e5:0e:57:38:b9:3c:62:fa:19:f3:dd:46:06: ee:52:f3:53:cc:3e:ac:19:c3:f3:fa:66:7d:de:65:c7:ac:c9: 06:08:f6:11:7a:a5:e8:79:99:a6:29:fb:11:d6:72:63:07:f9: 4f:86:34:2c:07:ac:46:e1:10:9a:2a:a2:0c:3b:34:23:b6:44: 40:9c:34:31:e7:f2:2a:f6:11:eb:d8:bf:a2:84:ab:53:55:e1: 69:81:54:e8:ef:b2:47:33:0c:1c:2f:d5:e6:49:b7:4c:45:53: 39:34:6f:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDDWpCLydTg0/0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwNVoXDTI2MDYxMDE0MzEwNVowLzEtMCsGA1UEAxMk NzJlMzY3NGItMGExNy00MGI5LTljNTAtYTQyY2YzMWIxZDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKNvAyjnA5RDsdyJnBkMHna+Lij9teKaOn5A MEqArVZCVl3esQLgpOeQ8mQYeVd3fadNcnU3Fgtftn+CliYn6ZEAmEqkRoOfZzkt DfrOQ+UJv/L6GMQQb+d5Sck0nh7Lc0oeRfnCQpBpOVoBLEhUGH92YRZytTNUef1n Mq59YQfu+ZAhGKhXPENgG6yxTSAf70FMNeELGa/9euGkTKe8B33e+vVNumCSfubP MqkwL+zcarECl6iabQDioQwe6lybjapHuKRxjleQZBYmnmfF241Y+skQ9omWd2vo QXd6j18Gq2GymbjhHR1og565/aHtbj1CnjBfiKN4Q54ye3fBAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC2Lqm99pokh8ghZJos6Vj6z1wL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTdkN2Q1MDgtNTc5ZC0z NmU5LWFiODMtOWIwNGNhMDcyZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJJEfAT3HluDtwTwzy40oluvXSUIejMjMMJNwmsUNf92bjAgRufd ZqygavsLk3ftVqL2SLeKHet+xzMXnsL3bSrbvfZcGVqXdHC6y3yG1HJXz/7IOfd1 1Wj4KdDuU0Bja0sbkEfvghSVT4kwZjZvJlv2PX5osa7V8DoFtKh/Aqg5ePA+9yHM XwCrDpyv5RVoS2hTHozU5Q5XOLk8YvoZ891GBu5S81PMPqwZw/P6Zn3eZcesyQYI 9hF6peh5maYp+xHWcmMH+U+GNCwHrEbhEJoqogw7NCO2RECcNDHn8ir2EevYv6KE q1NV4WmBVOjvskczDBwv1eZJt0xFUzk0b+w= -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:19 2026 by rpki-client