$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/989efb90-8fc1-3096-8925-4dc64f638d88.roa File: 989efb90-8fc1-3096-8925-4dc64f638d88.roa (raw, json) Hash identifier: 7onV+Kg7eO8GulwAzMAlS4ZEqk4L0bRvJJR5q/h/DBU= Subject key identifier: 68:17:AC:DF:45:65:63:B5:8E:F7:92:93:C4:19:27:B5:4F:BA:4D:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F4A6908D1F8EF1C7920E368 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/989efb90-8fc1-3096-8925-4dc64f638d88.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396547 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:69:08:d1:f8:ef:1c:79:20:e3:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=7f608ef2-2ea0-42f0-ba16-561eba01e4d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:41:df:f4:d0:21:57:15:8a:70:45:6f:48:65: f7:c7:78:94:27:7d:7a:39:82:b5:b8:4c:70:c5:14: f8:db:e9:ce:c5:77:77:52:d7:2d:10:13:81:54:ec: b7:76:6c:5f:7d:ac:0e:32:77:1a:c0:53:4b:40:56: bf:03:12:47:dc:cd:09:46:34:97:98:1b:3e:ab:3a: 6c:36:8e:78:9d:e9:21:e9:5d:51:4e:31:0a:66:62: e6:1c:a6:ed:a0:83:18:48:18:94:7a:44:1a:70:35: 8a:f5:84:09:cc:8a:39:88:ad:7d:7d:da:37:43:50: f4:bf:da:ce:b8:99:69:60:a4:f2:8a:ed:72:cb:eb: 6b:6e:5d:ba:80:90:94:eb:98:cd:53:72:c2:93:97: 66:5b:d0:eb:23:eb:82:57:1f:9b:67:0a:5b:aa:fe: 71:a2:08:53:a4:8c:8d:a0:e8:5a:b8:f9:27:99:2b: 0a:09:71:4e:08:8a:74:26:db:0e:05:e0:db:9b:ee: 2d:f1:55:12:ea:7d:bc:ab:44:e7:01:31:2f:fe:0b: 76:7e:93:44:55:2d:18:fc:c0:58:be:a2:9e:4d:cc: 14:c8:3d:16:97:7e:a1:ec:71:42:2e:46:1a:0e:a2: 0c:b1:9c:77:10:99:5d:77:25:4d:3d:e7:1e:a0:62: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:17:AC:DF:45:65:63:B5:8E:F7:92:93:C4:19:27:B5:4F:BA:4D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/989efb90-8fc1-3096-8925-4dc64f638d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ba:d0:46:21:65:91:6f:c1:4f:d5:3d:ea:18:18:b3:6b:0f: 41:d8:14:40:77:50:14:51:e1:94:52:0a:f1:ce:77:e8:70:53: fb:9c:7e:d5:c3:e2:8d:1f:36:9f:dc:5a:35:dd:18:de:36:4c: 76:53:7a:c4:87:c0:01:aa:1f:9d:ad:ea:b6:8e:18:d3:0a:db: 0e:26:14:36:18:b8:60:4c:59:ab:7b:1e:c8:7d:61:fb:1d:44: 58:b5:d0:ff:f4:2e:f4:8a:98:d9:b5:d3:39:a4:ad:c7:f9:8f: 5b:02:6c:fa:c8:1a:9e:f1:8f:70:ef:9a:cf:f7:66:68:9c:e4: 0c:23:02:d6:da:06:50:aa:1c:e6:3d:ef:eb:2c:6f:2b:05:1f: 60:39:92:06:ab:cf:b5:ba:18:36:80:0e:4c:11:ac:5c:f4:ad: a9:aa:03:68:0e:bf:f7:86:69:6a:89:ad:54:54:18:c1:c8:65: e9:95:1e:fd:b3:5e:8f:a9:b4:31:1b:1c:e2:ef:0b:af:e8:be: 75:88:2a:a5:27:9d:b7:00:5a:8e:d8:6a:cc:a0:31:71:dc:96: 10:b8:97:11:b7:08:63:bd:a3:09:43:0c:83:20:34:0d:71:53: 90:50:84:fa:02:e5:8d:c6:d6:3d:8d:1f:3f:07:a6:91:37:57: 6c:a8:f5:38 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmkI0fjvHHkg42gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk N2Y2MDhlZjItMmVhMC00MmYwLWJhMTYtNTYxZWJhMDFlNGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0Hf9NAhVxWKcEVvSGX3x3iUJ316OYK1uExw xRT42+nOxXd3UtctEBOBVOy3dmxffawOMncawFNLQFa/AxJH3M0JRjSXmBs+qzps No54nekh6V1RTjEKZmLmHKbtoIMYSBiUekQacDWK9YQJzIo5iK19fdo3Q1D0v9rO uJlpYKTyiu1yy+trbl26gJCU65jNU3LCk5dmW9DrI+uCVx+bZwpbqv5xoghTpIyN oOhauPknmSsKCXFOCIp0JtsOBeDbm+4t8VUS6n28q0TnATEv/gt2fpNEVS0Y/MBY vqKeTcwUyD0Wl36h7HFCLkYaDqIMsZx3EJlddyVNPeceoGK8CwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGgXrN9FZWO1jveSk8QZJ7VPuk0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTg5ZWZiOTAtOGZjMS0z MDk2LTg5MjUtNGRjNjRmNjM4ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCButBGIWWRb8FP1T3qGBizaw9B2BRAd1AUUeGU UgrxznfocFP7nH7Vw+KNHzaf3Fo13RjeNkx2U3rEh8ABqh+dreq2jhjTCtsOJhQ2 GLhgTFmrex7IfWH7HURYtdD/9C70ipjZtdM5pK3H+Y9bAmz6yBqe8Y9w75rP92Zo nOQMIwLW2gZQqhzmPe/rLG8rBR9gOZIGq8+1uhg2gA5MEaxc9K2pqgNoDr/3hmlq ia1UVBjByGXplR79s16PqbQxGxzi7wuv6L51iCqlJ523AFqO2GrMoDFx3JYQuJcR twhjvaMJQwyDIDQNcVOQUIT6AuWNxtY9jR8/B6aRN1dsqPU4 -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:16 2026 by rpki-client