$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0673a39-f8c7-3629-acb2-b7f396147420.roa File: c0673a39-f8c7-3629-acb2-b7f396147420.roa (raw, json) Hash identifier: Kz8RyZ/nNRsoFmpy+ZoEeweAp8L6Gd3QOXg+3v303Zo= Subject key identifier: 15:1D:81:67:34:51:8F:70:29:CB:70:62:42:72:E0:6D:A2:BD:7D:34 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C30056A15B062E5618740 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0673a39-f8c7-3629-acb2-b7f396147420.roa Signing time: Thu 12 Mar 2026 14:31:02 +0000 ROA not before: Thu 12 Mar 2026 14:31:02 +0000 ROA not after: Wed 10 Jun 2026 14:31:02 +0000 asID: 36628 IP address blocks: 2001:500:d937::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:30:05:6a:15:b0:62:e5:61:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:02 2026 GMT Not After : Jun 10 14:31:02 2026 GMT Subject: CN=8189a016-14ce-4916-9f60-34afc3a8d411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c8:bd:e6:81:f7:a2:a7:3f:68:f8:2b:e9:e3: 8f:65:b5:0a:c3:1d:20:b2:64:3f:cc:26:96:ea:8c: 85:3b:43:4f:87:1c:db:4d:20:32:a5:30:08:ed:f9: 13:a4:87:81:b4:38:e0:fa:96:56:59:f0:23:68:d5: 96:c7:52:d8:93:83:41:c0:50:ec:17:21:e5:15:f7: 16:3a:04:df:9a:fe:eb:35:16:de:dc:3c:7c:d2:95: 44:96:7c:80:fa:4a:52:da:b1:0d:b0:7f:af:4e:6e: 0e:59:4e:96:dc:04:6b:ea:17:fa:5f:cc:5a:7a:ba: df:c4:02:ef:22:25:ca:98:f2:4e:e0:5a:ee:22:41: f1:3f:de:d3:e1:6f:12:3c:41:58:64:25:98:69:2a: 18:83:f9:5c:ab:67:ef:a4:d6:ae:74:88:2f:e5:a4: 1a:93:cc:ab:19:aa:4c:03:60:95:82:21:62:3d:24: c1:9f:6e:8f:20:d6:3a:1b:c6:6d:d5:10:1f:80:fc: a2:2d:98:57:47:b7:76:f0:dd:e7:18:4c:56:63:4e: 18:c2:de:f9:ae:a5:09:e7:07:c5:58:90:43:15:2b: 4a:f3:19:ee:c9:19:3a:66:16:b7:71:f8:5c:5d:cd: 9a:9a:12:9a:a1:bb:85:8e:bb:a5:d2:ea:8e:90:48: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1D:81:67:34:51:8F:70:29:CB:70:62:42:72:E0:6D:A2:BD:7D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c0673a39-f8c7-3629-acb2-b7f396147420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:20:2e:44:46:63:54:26:40:68:1c:92:e6:10:61:13:95:c3: 51:c4:ac:ac:66:2b:69:19:89:14:e3:06:1a:b8:50:9a:1f:39: 8c:c2:5c:05:84:b7:6e:18:89:47:d9:a7:d6:92:13:c5:97:0c: 9d:d5:ef:c0:34:15:1b:b1:a7:5e:6e:a3:c9:0a:39:c5:1d:01: 90:95:15:7b:04:ed:60:86:71:ce:a2:2b:a9:97:4a:42:02:f0: 60:47:6e:42:ca:2f:b2:81:6d:bb:f3:6d:a0:73:3a:b0:a7:e9: 25:51:b2:64:2e:81:93:0d:18:d2:b0:de:a6:c4:ec:b9:96:e4: 3c:33:da:d4:dc:c0:9e:a4:2e:0c:43:ce:69:2d:75:fc:09:41: 1b:8b:eb:f3:e0:14:39:d6:20:df:62:e8:21:7d:fb:97:0f:be: 7d:59:4e:a1:a0:9d:55:77:b6:b7:7d:c7:76:c2:de:26:03:88: 1c:55:d8:d3:05:a8:0c:71:f4:e4:27:0d:2b:ec:0b:36:a0:5e: 51:66:61:db:b3:50:fa:77:4a:ac:0c:1b:bb:d4:a1:34:9a:49: 8e:d2:b0:31:b5:84:e3:15:70:35:75:d2:23:f0:14:8a:1d:98: 76:46:9a:92:59:75:f3:fc:68:22:2a:51:30:a8:98:78:25:3c: 1b:54:4e:41 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0lDDAFahWwYuVhh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwMloXDTI2MDYxMDE0MzEwMlowLzEtMCsGA1UEAxMk ODE4OWEwMTYtMTRjZS00OTE2LTlmNjAtMzRhZmMzYThkNDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlci95oH3oqc/aPgr6eOPZbUKwx0gsmQ/zCaW 6oyFO0NPhxzbTSAypTAI7fkTpIeBtDjg+pZWWfAjaNWWx1LYk4NBwFDsFyHlFfcW OgTfmv7rNRbe3Dx80pVElnyA+kpS2rENsH+vTm4OWU6W3ARr6hf6X8xaerrfxALv IiXKmPJO4FruIkHxP97T4W8SPEFYZCWYaSoYg/lcq2fvpNaudIgv5aQak8yrGapM A2CVgiFiPSTBn26PINY6G8Zt1RAfgPyiLZhXR7d28N3nGExWY04Ywt75rqUJ5wfF WJBDFStK8xnuyRk6Zha3cfhcXc2amhKaobuFjrul0uqOkEjPZQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBUdgWc0UY9wKctwYkJy4G2ivX00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzA2NzNhMzktZjhjNy0z NjI5LWFjYjItYjdmMzk2MTQ3NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBKIC5ERmNUJkBoHJLmEGETlcNRxKysZitpGYkU 4wYauFCaHzmMwlwFhLduGIlH2afWkhPFlwyd1e/ANBUbsadebqPJCjnFHQGQlRV7 BO1ghnHOoiupl0pCAvBgR25Cyi+ygW27822gczqwp+klUbJkLoGTDRjSsN6mxOy5 luQ8M9rU3MCepC4MQ85pLXX8CUEbi+vz4BQ51iDfYughffuXD759WU6hoJ1Vd7a3 fcd2wt4mA4gcVdjTBagMcfTkJw0r7As2oF5RZmHbs1D6d0qsDBu71KE0mkmO0rAx tYTjFXA1ddIj8BSKHZh2RpqSWXXz/GgiKlEwqJh4JTwbVE5B -----END CERTIFICATE-----Generated at Thu Mar 26 19:36:00 2026 by rpki-client