$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbfcb385-8039-3bd7-af63-73b04b4a419a.roa File: bbfcb385-8039-3bd7-af63-73b04b4a419a.roa (raw, json) Hash identifier: lXZy3bFQn293vLktdnnMdeH6n/ID6qpyimV2SDHw5rw= Subject key identifier: 08:23:4E:2C:71:01:C3:E4:80:2E:EA:94:99:0E:15:5D:89:A1:03:25 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C313A7117614250697F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbfcb385-8039-3bd7-af63-73b04b4a419a.roa Signing time: Thu 12 Mar 2026 14:31:03 +0000 ROA not before: Thu 12 Mar 2026 14:31:03 +0000 ROA not after: Wed 10 Jun 2026 14:31:03 +0000 asID: 397198 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:31:3a:71:17:61:42:50:69:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:03 2026 GMT Not After : Jun 10 14:31:03 2026 GMT Subject: CN=350b3df3-eabf-46b8-90f7-bd8a648b6331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:24:ce:c3:3b:06:4c:05:9a:5e:04:81:39:ea: 2e:9b:f3:64:5e:95:b4:ea:44:79:85:38:25:0d:be: 65:4b:be:8b:2b:7b:78:69:83:d3:0a:27:79:49:e5: bf:b0:4d:42:eb:4c:75:e3:b8:d0:10:ea:96:57:8d: 06:b4:ca:c4:73:97:b7:3b:2f:ae:94:f3:a1:94:27: 8d:3c:cc:aa:4d:87:61:97:1c:31:00:c0:8d:41:91: 90:de:e5:8d:0b:71:69:77:ad:d2:12:3b:dd:81:f3: fb:87:b8:0d:f2:dc:c3:2e:7b:a3:1b:f8:cc:eb:39: ce:c9:7f:d6:96:b8:d9:e2:a3:37:c0:1a:d7:f9:53: 39:b1:c2:8e:9c:da:be:0b:7a:d4:4e:50:f1:bf:44: 97:f1:fc:b6:56:6d:32:28:85:40:bd:c8:37:78:6f: e9:fd:11:f2:e7:7e:01:de:e1:90:6f:ef:0d:80:b8: e0:54:e2:ee:a1:a8:2e:2c:2d:4a:9a:f9:94:9a:1f: 06:9a:db:d1:08:e5:69:c6:94:f6:14:b8:63:d4:cf: e0:c7:e4:9e:a7:a6:09:87:db:92:07:60:d0:e4:11: 78:16:21:23:ca:f8:79:47:65:43:dc:df:7b:b9:2d: 9d:7e:d6:bd:7a:89:b4:00:71:f3:c4:ac:dd:63:73: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:23:4E:2C:71:01:C3:E4:80:2E:EA:94:99:0E:15:5D:89:A1:03:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bbfcb385-8039-3bd7-af63-73b04b4a419a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:57:23:c4:00:2e:d8:7e:6e:69:c6:98:c5:2e:9a:45:7f:a7: 44:d3:b8:cb:d7:59:2c:96:5c:15:0b:d3:30:ef:2f:2f:ad:1e: 1e:9f:32:63:55:17:de:ab:0d:09:59:55:1d:1e:e5:fa:67:75: 43:c4:32:96:48:9f:51:48:01:2d:f5:9f:08:74:bb:2a:00:f5: 65:ac:85:21:3b:4e:7e:bd:ca:99:60:20:4a:bf:8e:0e:bc:12: 68:9c:23:40:89:15:62:7e:2f:c7:c7:00:15:45:b7:35:cf:6f: 09:c6:7f:07:c8:9e:f0:cb:4f:98:e0:f4:6f:4a:b0:b0:81:6d: 32:c5:34:bc:0b:6e:d5:03:d1:f2:7b:54:b9:72:0c:09:19:a3: 2d:ca:a2:59:31:d0:f4:5d:6f:84:97:73:34:9d:ff:38:fe:97: 62:1c:a9:b6:ad:77:5e:f3:c8:88:13:da:b9:de:50:b0:0d:54: 10:45:d6:29:6b:63:d5:2f:76:af:d2:aa:03:e9:62:37:6c:92: e8:22:c1:65:2b:71:bb:79:fc:1a:b4:32:e5:fa:f9:d4:b8:90: d9:4d:50:6e:28:ae:0d:69:38:b2:d0:39:65:0b:03:c5:95:74: 82:8e:71:ec:9a:3c:86:6e:5b:86:e5:f2:07:8b:6f:59:c6:b8: ec:01:cc:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDDE6cRdhQlBpf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwM1oXDTI2MDYxMDE0MzEwM1owLzEtMCsGA1UEAxMk MzUwYjNkZjMtZWFiZi00NmI4LTkwZjctYmQ4YTY0OGI2MzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCTOwzsGTAWaXgSBOeoum/NkXpW06kR5hTgl Db5lS76LK3t4aYPTCid5SeW/sE1C60x147jQEOqWV40GtMrEc5e3Oy+ulPOhlCeN PMyqTYdhlxwxAMCNQZGQ3uWNC3Fpd63SEjvdgfP7h7gN8tzDLnujG/jM6znOyX/W lrjZ4qM3wBrX+VM5scKOnNq+C3rUTlDxv0SX8fy2Vm0yKIVAvcg3eG/p/RHy534B 3uGQb+8NgLjgVOLuoaguLC1KmvmUmh8GmtvRCOVpxpT2FLhj1M/gx+Sep6YJh9uS B2DQ5BF4FiEjyvh5R2VD3N97uS2dfta9eom0AHHzxKzdY3NedQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAgjTixxAcPkgC7qlJkOFV2JoQMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmJmY2IzODUtODAzOS0z YmQ3LWFmNjMtNzNiMDRiNGE0MTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADtXI8QALth+bmnGmMUumkV/p0TTuMvXWSyWXBUL0zDvLy+tHh6f MmNVF96rDQlZVR0e5fpndUPEMpZIn1FIAS31nwh0uyoA9WWshSE7Tn69yplgIEq/ jg68EmicI0CJFWJ+L8fHABVFtzXPbwnGfwfInvDLT5jg9G9KsLCBbTLFNLwLbtUD 0fJ7VLlyDAkZoy3Kolkx0PRdb4SXczSd/zj+l2Icqbatd17zyIgT2rneULANVBBF 1ilrY9Uvdq/SqgPpYjdskugiwWUrcbt5/Bq0MuX6+dS4kNlNUG4org1pOLLQOWUL A8WVdIKOceyaPIZuW4bl8geLb1nGuOwBzPI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:08:58 2026 by rpki-client