$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa852c86-45ac-3800-acf4-686ccad4d9f1.roa File: aa852c86-45ac-3800-acf4-686ccad4d9f1.roa (raw, json) Hash identifier: 5Q8tuEDDBT0vWc5cpzH4WjNBLFc5upvHodIa6yKomnw= Subject key identifier: B8:B2:38:97:90:A4:38:0E:6E:CE:B3:27:B8:03:1D:67:8E:82:18:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D16247A01E395C681D0B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa852c86-45ac-3800-acf4-686ccad4d9f1.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396572 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:16:24:7a:01:e3:95:c6:81:d0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1125abf6-e4b6-4c2e-89cf-6035bf7215a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:bc:83:c8:47:78:34:4c:3f:b4:0e:2c:68:f2: c7:17:a3:45:bd:0f:e5:47:55:a5:e6:a2:07:6e:ec: 8e:47:e8:4c:3f:52:1b:37:1f:9c:7f:5f:2d:d0:28: 0a:01:46:5d:b4:51:81:16:25:49:2e:af:bc:93:65: 70:1b:87:00:2e:c7:15:50:fc:f3:45:3b:e9:02:9c: 5d:72:cd:e0:26:4c:57:6b:40:d1:74:d7:57:99:43: 8c:d6:f1:16:c1:2d:9f:2e:1f:dc:e4:55:e3:3d:44: 2d:01:03:a3:6f:01:17:10:bd:57:0c:4c:c1:1e:82: af:2a:5e:66:34:ae:9c:49:e8:af:59:aa:5b:8c:53: 18:fb:44:0d:e4:91:c8:d3:3a:af:6b:52:9b:e9:57: fb:87:96:c1:c5:e1:22:1a:fd:17:95:a3:3e:6f:d6: ab:e5:61:52:bb:a4:3c:2e:ae:7d:a1:5f:d9:c9:94: 80:79:e5:14:11:a2:88:c4:2d:7e:e3:49:14:3c:b9: 41:15:44:19:0a:a9:28:19:2e:fe:6d:91:54:05:90: fc:0f:5c:60:50:3c:30:2e:26:92:48:73:9d:02:2b: 0a:eb:e5:0e:fa:2f:7e:9c:a8:07:99:30:8a:64:53: 3a:e4:be:fe:d9:3d:52:74:b5:3f:1a:02:6e:8c:cb: 59:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B2:38:97:90:A4:38:0E:6E:CE:B3:27:B8:03:1D:67:8E:82:18:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa852c86-45ac-3800-acf4-686ccad4d9f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:6b:39:5a:3a:6e:74:4d:60:19:2e:c5:1d:ef:fa:a7:94:c8: 02:c8:93:9b:49:1d:3d:0a:5f:00:4f:06:8e:fc:20:9b:13:46: 33:e7:8e:ff:f5:d9:f9:bb:d9:00:77:d4:d9:2c:82:60:f5:ce: c4:0d:9b:1a:4b:82:aa:fe:cd:a3:eb:b3:fc:58:d5:bd:5b:90: dc:eb:e3:1e:7d:aa:23:d8:d3:d3:0c:80:ee:39:a0:4d:b7:3f: 3f:49:a2:44:7d:d7:e8:2e:13:22:91:11:da:e6:b0:63:f4:af: 7d:f7:43:b0:c5:7f:41:7f:b3:b8:6f:20:e2:a2:b5:59:60:cc: 0e:fa:73:5f:be:e2:e6:ea:0b:d0:1f:2b:51:80:cf:f6:30:49: f4:28:cf:3a:3d:16:c6:39:30:6b:6a:32:cb:52:e9:f9:4b:6f: 77:74:f9:61:f0:67:a1:88:5b:6b:5b:9f:d1:61:ea:1e:83:3e: 07:6b:8b:9c:e5:6d:b6:a3:67:1e:b2:2b:79:bd:ad:63:1f:51: 49:58:92:77:e0:b2:42:d9:ca:d3:6a:a9:17:98:3e:15:eb:e6: d2:f5:8a:85:f7:d8:57:df:79:21:37:38:00:b7:56:58:25:db: 81:d0:ee:7a:63:55:c2:29:70:ee:b7:24:37:0d:c9:24:20:17: 1f:a9:0e:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPRYkegHjlcaB0LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MTEyNWFiZjYtZTRiNi00YzJlLTg5Y2YtNjAzNWJmNzIxNWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhryDyEd4NEw/tA4saPLHF6NFvQ/lR1Wl5qIH buyOR+hMP1IbNx+cf18t0CgKAUZdtFGBFiVJLq+8k2VwG4cALscVUPzzRTvpApxd cs3gJkxXa0DRdNdXmUOM1vEWwS2fLh/c5FXjPUQtAQOjbwEXEL1XDEzBHoKvKl5m NK6cSeivWapbjFMY+0QN5JHI0zqva1Kb6Vf7h5bBxeEiGv0XlaM+b9ar5WFSu6Q8 Lq59oV/ZyZSAeeUUEaKIxC1+40kUPLlBFUQZCqkoGS7+bZFUBZD8D1xgUDwwLiaS SHOdAisK6+UO+i9+nKgHmTCKZFM65L7+2T1SdLU/GgJujMtZ5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLiyOJeQpDgObs6zJ7gDHWeOghhpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWE4NTJjODYtNDVhYy0z ODAwLWFjZjQtNjg2Y2NhZDRkOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFFrOVo6bnRNYBkuxR3v+qeUyALIk5tJHT0KXwBPBo78IJsTRjPn jv/12fm72QB31NksgmD1zsQNmxpLgqr+zaPrs/xY1b1bkNzr4x59qiPY09MMgO45 oE23Pz9JokR91+guEyKREdrmsGP0r333Q7DFf0F/s7hvIOKitVlgzA76c1++4ubq C9AfK1GAz/YwSfQozzo9FsY5MGtqMstS6flLb3d0+WHwZ6GIW2tbn9Fh6h6DPgdr i5zlbbajZx6yK3m9rWMfUUlYknfgskLZytNqqReYPhXr5tL1ioX32FffeSE3OAC3 Vlgl24HQ7npjVcIpcO63JDcNySQgFx+pDng= -----END CERTIFICATE-----Generated at Thu Mar 26 18:51:29 2026 by rpki-client