$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1ad85b9-8788-3b05-8df5-7137f7076f4b.roa File: a1ad85b9-8788-3b05-8df5-7137f7076f4b.roa (raw, json) Hash identifier: 1qMROyd1paC/la0epPccizEybL019uQ32jpFgWOA0Gk= Subject key identifier: 33:B1:93:D1:09:97:FA:86:7F:FE:C9:2B:C9:82:D0:1B:3E:67:45:79 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0BDD18ADC446FEFFC11B3EC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1ad85b9-8788-3b05-8df5-7137f7076f4b.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 20431 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:18:ad:c4:46:fe:ff:c1:1b:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=afe10c84-45c1-4896-aa70-2b14d7927f0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ba:69:2c:4b:c9:de:e4:d3:ff:d8:b0:75:f8: 9b:2a:bc:d7:76:ac:ed:bf:4b:5d:08:d5:06:07:b0: 4b:d8:82:cb:f3:19:b1:dc:89:e7:11:da:64:e1:ef: db:d1:0c:87:c8:61:a3:f6:75:2b:bc:70:f7:19:c1: 33:d0:fc:9e:f9:4c:01:f3:f6:13:e0:55:cc:78:e9: 8f:12:bb:f9:18:d4:77:a5:8f:da:4a:8f:e2:0d:d8: 2a:8c:c8:9d:ab:09:37:c5:5f:be:c2:63:a3:f4:05: 1a:ce:63:e9:41:27:bb:4b:a3:a9:d3:69:d3:35:6c: 64:ea:20:48:58:14:6f:44:87:e3:32:3d:86:6a:3b: aa:e9:48:e2:cb:bc:3b:bb:9b:f8:db:03:ca:97:51: 9b:c2:25:70:55:93:8d:41:8f:ce:dd:11:c6:5f:6a: 99:c0:33:45:31:8b:bd:d2:83:ce:0b:37:83:9b:2a: 7d:ee:9e:ce:24:39:5f:91:28:bc:94:58:0a:e3:f1: 4b:1f:95:a5:1d:87:3d:7a:af:20:31:36:12:bd:47: 48:95:e5:b7:f1:19:50:0a:b3:c3:e0:a7:98:2c:3b: 92:ff:1f:0d:ae:dc:8e:39:9e:4c:cb:2c:49:ef:84: 36:8b:1e:06:87:58:61:57:da:bc:7c:ff:23:dd:f9: 69:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B1:93:D1:09:97:FA:86:7F:FE:C9:2B:C9:82:D0:1B:3E:67:45:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1ad85b9-8788-3b05-8df5-7137f7076f4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:6d:6a:38:49:04:68:78:78:9e:b5:5c:61:2f:8e:ad:d2:f1: 28:40:f1:47:a0:2d:08:bd:0d:c2:f4:da:31:4b:d6:d4:36:ea: 33:e4:e9:bc:db:47:06:74:34:b4:c9:00:81:b0:e5:f7:4f:ba: 81:3d:68:02:6f:1c:a6:92:99:f3:14:c1:c7:2f:53:cf:b4:1f: 5c:ea:de:b9:4c:fc:ac:e9:26:77:9f:71:45:17:71:71:6c:04: 7c:b7:0c:1b:5a:d4:6c:be:d8:f8:fe:62:70:49:e6:dc:b9:2c: 1a:fe:23:78:32:99:1e:61:54:67:a9:c9:bb:e2:0d:77:5d:d3: d2:56:fc:95:f9:1e:00:bd:f0:c3:7f:c8:ae:22:49:94:a4:55: 48:77:b1:ec:e1:9c:aa:d8:85:0c:ef:73:1f:49:51:25:49:ae: 8c:15:08:a3:9c:47:dd:eb:0f:59:ae:55:51:5b:b0:2f:a0:90: a2:eb:cb:17:27:a6:f7:8c:e6:64:46:70:0a:30:b2:ae:c2:c5: dd:19:54:63:83:6e:eb:3c:fc:31:6e:f9:60:20:ea:72:bb:f0: 4a:8a:5a:f3:0d:98:f9:7c:3a:b6:82:1b:8b:1c:7e:e7:17:a9: f0:0b:ce:56:c5:59:65:e1:97:ac:ed:4e:f0:e0:e7:21:67:00: cb:b7:42:ea -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0L3RitxEb+/8EbPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk YWZlMTBjODQtNDVjMS00ODk2LWFhNzAtMmIxNGQ3OTI3ZjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rppLEvJ3uTT/9iwdfibKrzXdqztv0tdCNUG B7BL2ILL8xmx3InnEdpk4e/b0QyHyGGj9nUrvHD3GcEz0Pye+UwB8/YT4FXMeOmP Erv5GNR3pY/aSo/iDdgqjMidqwk3xV++wmOj9AUazmPpQSe7S6Op02nTNWxk6iBI WBRvRIfjMj2Gajuq6Ujiy7w7u5v42wPKl1GbwiVwVZONQY/O3RHGX2qZwDNFMYu9 0oPOCzeDmyp97p7OJDlfkSi8lFgK4/FLH5WlHYc9eq8gMTYSvUdIleW38RlQCrPD 4KeYLDuS/x8NrtyOOZ5MyyxJ74Q2ix4Gh1hhV9q8fP8j3flp5wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDOxk9EJl/qGf/7JK8mC0Bs+Z0V5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTFhZDg1YjktODc4OC0z YjA1LThkZjUtNzEzN2Y3MDc2ZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBzbWo4SQRoeHietVxhL46t0vEoQPFHoC0IvQ3C 9NoxS9bUNuoz5Om820cGdDS0yQCBsOX3T7qBPWgCbxymkpnzFMHHL1PPtB9c6t65 TPys6SZ3n3FFF3FxbAR8twwbWtRsvtj4/mJwSebcuSwa/iN4MpkeYVRnqcm74g13 XdPSVvyV+R4AvfDDf8iuIkmUpFVId7Hs4Zyq2IUM73MfSVElSa6MFQijnEfd6w9Z rlVRW7AvoJCi68sXJ6b3jOZkRnAKMLKuwsXdGVRjg27rPPwxbvlgIOpyu/BKilrz DZj5fDq2ghuLHH7nF6nwC85WxVll4Zes7U7w4OchZwDLt0Lq -----END CERTIFICATE-----Generated at Thu Mar 26 15:06:58 2026 by rpki-client