$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e8b2646-d7df-3aa2-bb49-faa32545f970.roa File: 9e8b2646-d7df-3aa2-bb49-faa32545f970.roa (raw, json) Hash identifier: XDkbgeczqylLq8aw3Ezmgmz+TqQcIkNX1eujrv12krE= Subject key identifier: 70:0A:31:03:F1:76:18:82:87:3E:2E:87:23:87:04:82:29:2E:CA:DB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C3B518244E97E634CD7E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e8b2646-d7df-3aa2-bb49-faa32545f970.roa Signing time: Thu 12 Mar 2026 14:31:08 +0000 ROA not before: Thu 12 Mar 2026 14:31:08 +0000 ROA not after: Wed 10 Jun 2026 14:31:08 +0000 asID: 396541 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:3b:51:82:44:e9:7e:63:4c:d7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:08 2026 GMT Not After : Jun 10 14:31:08 2026 GMT Subject: CN=d6176376-fe3e-4980-997d-eb41c3e98de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:18:56:5f:f5:8b:44:7c:b5:b6:01:da:68:d2: 9c:1c:e7:e7:61:47:5b:06:e7:1e:46:af:bd:23:7b: 2a:93:04:4e:e2:da:ea:02:4f:95:f5:36:e7:ab:11: ba:f1:a1:c6:46:ad:d8:ed:bc:48:99:84:87:42:11: 8e:9d:16:5c:ae:f4:0a:52:0e:ba:0b:f0:ba:76:6a: 2c:b1:4d:2f:70:41:3d:78:24:cf:b0:76:f1:2d:7d: 44:b7:3c:65:a6:15:9b:8d:0c:82:43:2e:d4:f3:64: dd:41:d4:76:fe:5e:43:e4:af:85:42:e8:90:9f:34: 99:d4:8a:2d:56:71:b6:ba:80:ec:45:46:6d:9c:d5: fd:cb:2e:52:7f:d3:bf:eb:39:f4:c8:68:56:75:4e: 02:3d:e5:21:75:8f:84:0d:d9:99:09:78:85:f1:ab: 0f:f8:8b:79:34:df:af:13:f4:45:9f:a6:c1:e4:c8: 22:f5:c2:2c:c6:09:e6:e8:52:c8:1c:9f:9e:39:c1: 28:4e:0f:00:c2:10:aa:14:08:97:0f:8a:0f:05:e4: 7b:83:b9:2d:3f:f5:1d:85:ec:50:73:ef:2e:6a:51: 8c:94:79:e6:2f:57:e7:44:e0:f6:38:4c:5d:30:3b: 65:25:23:19:42:7f:77:2b:10:68:21:f5:a9:27:3f: ca:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:0A:31:03:F1:76:18:82:87:3E:2E:87:23:87:04:82:29:2E:CA:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9e8b2646-d7df-3aa2-bb49-faa32545f970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b1:50:f0:ac:a0:d6:a4:d5:de:2a:e4:8c:3c:db:da:18:6f: 38:83:65:22:c3:0d:55:eb:05:a7:3a:d5:8c:15:fc:98:72:33: 0a:f4:9f:6a:4f:5b:e3:e5:b5:77:e2:75:80:9b:24:6a:61:57: 32:1e:24:40:ff:02:10:03:e5:27:da:22:8d:a0:3c:91:8e:10: b8:ad:c1:0e:5c:4f:ba:29:b0:31:5f:1d:64:cd:ba:62:ba:ca: f1:9a:e6:59:81:b6:43:cd:db:c9:52:be:9a:95:07:fa:2f:67: 1c:fb:1c:c0:a2:7d:f6:be:e5:17:e6:23:73:d8:2d:86:88:80: 9f:b5:c7:ed:76:ee:0d:6d:60:90:0a:ec:f0:29:68:15:5a:16: 5d:c3:0b:a3:26:8c:af:47:c9:42:11:92:74:9d:08:1b:3b:5a: 2c:1a:91:37:6c:1d:95:a0:66:28:35:3f:fd:a4:42:9d:11:96: 2e:11:23:ef:52:a9:00:a8:52:f1:04:96:63:b8:3d:34:66:ff: e0:d9:5e:7a:40:ba:e6:22:7b:98:60:80:5e:67:e5:a6:59:6e: 61:c5:c7:49:5f:6a:63:8c:80:bb:95:be:78:5c:76:8a:51:3e: 7a:00:7f:14:fa:ec:27:51:33:60:df:ad:36:66:84:d6:10:a0: 7b:ef:5b:6c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDDtRgkTpfmNM1+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwOFoXDTI2MDYxMDE0MzEwOFowLzEtMCsGA1UEAxMk ZDYxNzYzNzYtZmUzZS00OTgwLTk5N2QtZWI0MWMzZTk4ZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBhWX/WLRHy1tgHaaNKcHOfnYUdbBuceRq+9 I3sqkwRO4trqAk+V9TbnqxG68aHGRq3Y7bxImYSHQhGOnRZcrvQKUg66C/C6dmos sU0vcEE9eCTPsHbxLX1EtzxlphWbjQyCQy7U82TdQdR2/l5D5K+FQuiQnzSZ1Iot VnG2uoDsRUZtnNX9yy5Sf9O/6zn0yGhWdU4CPeUhdY+EDdmZCXiF8asP+It5NN+v E/RFn6bB5Mgi9cIsxgnm6FLIHJ+eOcEoTg8AwhCqFAiXD4oPBeR7g7ktP/UdhexQ c+8ualGMlHnmL1fnROD2OExdMDtlJSMZQn93KxBoIfWpJz/K8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHAKMQPxdhiChz4uhyOHBIIpLsrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWU4YjI2NDYtZDdkZi0z YWEyLWJiNDktZmFhMzI1NDVmOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADOxUPCsoNak1d4q5Iw829oYbziDZSLDDVXrBac61YwV/JhyMwr0 n2pPW+PltXfidYCbJGphVzIeJED/AhAD5SfaIo2gPJGOELitwQ5cT7opsDFfHWTN umK6yvGa5lmBtkPN28lSvpqVB/ovZxz7HMCiffa+5RfmI3PYLYaIgJ+1x+127g1t YJAK7PApaBVaFl3DC6MmjK9HyUIRknSdCBs7WiwakTdsHZWgZig1P/2kQp0Rli4R I+9SqQCoUvEElmO4PTRm/+DZXnpAuuYie5hggF5n5aZZbmHFx0lfamOMgLuVvnhc dopRPnoAfxT67CdRM2DfrTZmhNYQoHvvW2w= -----END CERTIFICATE-----Generated at Thu Mar 26 08:40:19 2026 by rpki-client