$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9befb946-83d4-34ae-8b8c-850b1b46d5a5.roa File: 9befb946-83d4-34ae-8b8c-850b1b46d5a5.roa (raw, json) Hash identifier: /4MSyrKRw6Wi0YY9z+60r8QTzVWWkqN73OFdVMBwGBs= Subject key identifier: 6E:38:D0:C8:A4:B9:EC:03:DD:E2:FD:8F:19:63:6A:BF:92:1B:4C:7A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D24E133050F2F06C43FDDBB00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9befb946-83d4-34ae-8b8c-850b1b46d5a5.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396550 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:33:05:0f:2f:06:c4:3f:dd:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=f7620d7b-ba2f-4b9c-82f9-ae96a3a9d495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:36:b2:e0:eb:d6:46:bd:42:d9:9b:91:9d:22: 09:fc:e5:b7:8a:d5:3c:eb:bc:26:4c:86:ae:d2:e3: 10:c9:42:63:49:ba:4b:38:5f:bf:51:7b:84:a4:9d: 92:b8:57:8a:39:60:dd:10:9e:ad:11:21:40:39:61: ea:32:ef:ac:3f:00:7e:3d:e9:60:f9:ab:5c:2a:41: b3:6d:e3:f7:82:d0:5b:b6:eb:cc:1c:80:6f:e7:14: bc:b1:10:55:be:36:41:32:09:57:35:9f:b0:24:f5: 62:31:46:9d:43:79:ad:66:4e:63:ff:7b:aa:c9:17: ae:0b:58:95:03:4f:ab:d2:9e:27:28:94:4e:a1:83: 70:12:7f:96:ee:8f:d3:33:1e:26:14:d9:7b:c4:7f: 2d:ff:95:56:7d:8b:09:cd:ad:aa:86:6a:14:0b:e5: a3:cb:83:6c:e1:62:27:0f:01:9a:0f:0f:19:41:9e: b2:45:0a:48:fc:65:e4:60:8c:ab:61:2b:69:c5:c4: 62:83:f5:a3:69:8b:a2:27:bb:d6:4c:e3:0e:33:07: 6f:09:e4:e7:eb:8a:f3:65:fd:71:97:cb:81:dd:60: 02:f8:3c:d7:1d:67:df:8f:eb:7c:1c:37:b4:79:ab: bc:ee:25:40:0a:73:5e:05:ec:f3:14:81:82:71:66: 2f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:38:D0:C8:A4:B9:EC:03:DD:E2:FD:8F:19:63:6A:BF:92:1B:4C:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9befb946-83d4-34ae-8b8c-850b1b46d5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:9f:3a:9d:c4:86:15:ad:b7:94:d1:a4:aa:e8:fd:78:b5:42: e2:9c:7a:e3:ac:73:48:3f:47:1d:07:e2:ed:6f:35:a4:df:e8: e1:9d:bc:f0:9f:1f:a3:b4:98:34:e4:c0:bb:ea:d0:ba:03:e6: b2:fb:54:cf:e7:b9:a2:6c:ff:a2:4a:67:75:b5:6c:28:3b:55: ee:10:d0:e6:a5:c5:09:00:eb:4d:ff:0b:47:5e:15:df:9b:37: 1f:be:8f:54:5d:e0:23:9a:75:64:5a:f9:ac:c6:85:22:80:53: d8:3c:e9:ac:96:c2:b4:6f:9e:d3:df:f6:c0:cf:b7:bc:31:6b: fa:e5:69:06:9d:50:12:dd:d5:6a:37:f7:e3:ac:02:29:f2:48: 2d:34:c0:93:37:62:8f:64:c2:44:d4:50:2c:9e:c6:7b:88:b4: 74:68:5e:69:ca:85:0c:f6:c2:c0:dd:ad:50:14:6f:34:3d:4a: 72:19:bb:9e:16:fb:d3:59:9a:5d:80:6f:77:bb:00:8a:69:ca: 0f:1f:61:fb:2d:30:24:d3:a0:8e:45:0f:ef:71:e9:2f:b2:2f: 97:c8:99:69:09:2b:3b:ec:10:83:a0:00:08:5c:53:2e:03:c6: 7f:3b:db:53:1d:ca:ed:a5:4b:59:bf:d0:11:b0:31:70:d8:a5: 28:d2:f8:f3 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0k4TMFDy8GxD/duwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk Zjc2MjBkN2ItYmEyZi00YjljLTgyZjktYWU5NmEzYTlkNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDay4OvWRr1C2ZuRnSIJ/OW3itU867wmTIau 0uMQyUJjSbpLOF+/UXuEpJ2SuFeKOWDdEJ6tESFAOWHqMu+sPwB+Pelg+atcKkGz beP3gtBbtuvMHIBv5xS8sRBVvjZBMglXNZ+wJPViMUadQ3mtZk5j/3uqyReuC1iV A0+r0p4nKJROoYNwEn+W7o/TMx4mFNl7xH8t/5VWfYsJza2qhmoUC+Wjy4Ns4WIn DwGaDw8ZQZ6yRQpI/GXkYIyrYStpxcRig/WjaYuiJ7vWTOMOMwdvCeTn64rzZf1x l8uB3WAC+DzXHWffj+t8HDe0eau87iVACnNeBezzFIGCcWYvFwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFG440MikuewD3eL9jxljar+SG0x6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWJlZmI5NDYtODNkNC0z NGFlLThiOGMtODUwYjFiNDZkNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC0nzqdxIYVrbeU0aSq6P14tULinHrjrHNIP0cd B+LtbzWk3+jhnbzwnx+jtJg05MC76tC6A+ay+1TP57mibP+iSmd1tWwoO1XuENDm pcUJAOtN/wtHXhXfmzcfvo9UXeAjmnVkWvmsxoUigFPYPOmslsK0b57T3/bAz7e8 MWv65WkGnVAS3dVqN/fjrAIp8kgtNMCTN2KPZMJE1FAsnsZ7iLR0aF5pyoUM9sLA 3a1QFG80PUpyGbueFvvTWZpdgG93uwCKacoPH2H7LTAk06CORQ/vcekvsi+XyJlp CSs77BCDoAAIXFMuA8Z/O9tTHcrtpUtZv9ARsDFw2KUo0vjz -----END CERTIFICATE-----Generated at Thu Mar 26 15:05:34 2026 by rpki-client