$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa File: a07bc41a-66df-3190-be8f-7d32ceb83809.roa (raw, json) Hash identifier: N0HZn/6gei1jDMIzDg4ISKN+CL28JjWMA1o8N22UAOk= Subject key identifier: 2E:B2:C7:B9:76:2C:36:5B:91:4E:4D:11:44:C8:3A:80:72:BE:F8:CC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D422F7D866044953B2331BA60 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 36626 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:7d:86:60:44:95:3b:23:31:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=209be1e4-0f49-4d63-b4f2-3bd3b60a98d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1e:2c:19:b6:0e:55:d0:1a:12:e0:d5:7d:28: 2d:39:28:2c:67:db:0b:4e:66:62:17:53:c7:b8:11: 9e:9e:81:b0:de:a3:76:9c:03:6c:97:63:aa:83:69: 29:30:8e:5c:5d:cb:70:dd:35:58:5e:a8:f8:ef:d2: d5:87:bc:19:ab:d0:0e:e2:c6:dc:3c:8e:12:c3:9e: d5:d9:3a:70:35:bd:d3:7f:54:50:c9:51:d7:c8:ad: 6f:5f:9b:fc:84:e1:3c:41:da:83:07:c7:eb:0e:0e: b2:53:8e:f9:bf:ac:3f:34:e3:7e:fc:d7:7a:20:43: a4:d7:b8:3e:e8:30:e7:b4:85:2b:b3:d9:e1:cd:c2: 7b:44:f2:c4:f3:bd:bf:ed:25:64:68:59:0b:4a:38: 94:56:7c:81:3f:d2:bc:c9:a3:17:bf:27:b6:dc:91: 30:3a:08:07:32:a1:76:45:e0:67:16:0f:8a:75:3e: 39:44:b5:f5:8a:b0:be:a7:c3:0c:eb:8c:44:8b:38: 64:01:b0:24:b6:74:7a:dd:ef:66:ff:20:32:b5:4d: 2d:a6:6e:c8:be:01:c8:33:f7:0f:e4:12:e0:24:a2: 7a:55:9e:8f:64:25:87:27:79:6e:af:50:a9:e0:fa: c0:31:aa:7b:31:9e:2d:9a:ac:cd:37:52:62:cd:12: ee:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B2:C7:B9:76:2C:36:5B:91:4E:4D:11:44:C8:3A:80:72:BE:F8:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a07bc41a-66df-3190-be8f-7d32ceb83809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:1c:d9:9c:c4:18:6d:18:86:58:f6:7f:1f:1b:3b:90:83:0b: c6:88:6f:69:17:d8:43:0b:24:68:50:bf:7f:73:73:95:64:49: 22:e6:f3:33:57:b9:99:31:e9:3f:cb:8f:6f:a3:0f:a2:72:47: d6:9d:6e:27:c9:e3:4e:fb:95:89:5f:b6:64:a0:67:b3:df:3d: ab:17:40:c5:47:0b:f6:48:cc:29:12:c6:56:b6:55:3e:56:8e: 96:65:d5:1e:a1:85:00:ca:fa:1a:60:c8:d7:42:ef:39:88:7a: 0e:91:bf:89:e0:28:c8:2b:52:c7:da:b4:e0:7f:f2:bb:b5:e9: 6e:e0:cd:69:95:e3:e7:d0:e9:f9:13:b1:af:38:86:ce:49:3a: 43:e8:95:dd:ba:1b:e4:66:b7:6c:74:12:bb:14:47:e4:67:60: e5:6a:2c:b5:35:80:5f:12:47:26:13:3e:1b:dd:43:db:d0:f2: 6b:b4:78:28:c0:3a:e8:46:98:97:1c:2e:8e:cf:9c:c8:a3:76: 50:c8:b1:0a:3a:d5:29:9c:2d:54:94:3a:2e:7e:08:91:22:2c: 5b:ba:52:a0:33:d7:81:b9:84:03:31:6c:1b:36:4f:74:6e:c2: 42:bd:45:b2:8a:95:30:85:78:55:7f:12:c6:3a:07:63:10:86: 5b:ee:9f:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL32GYESVOyMxumAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk MjA5YmUxZTQtMGY0OS00ZDYzLWI0ZjItM2JkM2I2MGE5OGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h4sGbYOVdAaEuDVfSgtOSgsZ9sLTmZiF1PH uBGenoGw3qN2nANsl2Oqg2kpMI5cXctw3TVYXqj479LVh7wZq9AO4sbcPI4Sw57V 2TpwNb3Tf1RQyVHXyK1vX5v8hOE8QdqDB8frDg6yU475v6w/NON+/Nd6IEOk17g+ 6DDntIUrs9nhzcJ7RPLE872/7SVkaFkLSjiUVnyBP9K8yaMXvye23JEwOggHMqF2 ReBnFg+KdT45RLX1irC+p8MM64xEizhkAbAktnR63e9m/yAytU0tpm7IvgHIM/cP 5BLgJKJ6VZ6PZCWHJ3lur1Cp4PrAMap7MZ4tmqzNN1JizRLuRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC6yx7l2LDZbkU5NEUTIOoByvvjMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTA3YmM0MWEtNjZkZi0z MTkwLWJlOGYtN2QzMmNlYjgzODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGQc2ZzEGG0Yhlj2fx8bO5CDC8aIb2kX2EMLJGhQv39zc5VkSSLm 8zNXuZkx6T/Lj2+jD6JyR9adbifJ4077lYlftmSgZ7PfPasXQMVHC/ZIzCkSxla2 VT5WjpZl1R6hhQDK+hpgyNdC7zmIeg6Rv4ngKMgrUsfatOB/8ru16W7gzWmV4+fQ 6fkTsa84hs5JOkPold26G+Rmt2x0ErsUR+RnYOVqLLU1gF8SRyYTPhvdQ9vQ8mu0 eCjAOuhGmJccLo7PnMijdlDIsQo61SmcLVSUOi5+CJEiLFu6UqAz14G5hAMxbBs2 T3RuwkK9RbKKlTCFeFV/EsY6B2MQhlvun34= -----END CERTIFICATE-----Generated at Thu Mar 26 13:22:37 2026 by rpki-client