$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1af0d98-c4d1-384a-8894-45598f95da0b.roa File: c1af0d98-c4d1-384a-8894-45598f95da0b.roa (raw, json) Hash identifier: pwLciLQ3dkHO5azPDKAXl1J+fK351xZcL06oJYatXdM= Subject key identifier: CA:61:AB:5C:0B:76:3D:2F:62:73:AE:44:ED:6A:8E:46:9D:18:66:8D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C2FF4143689DB20CACD80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1af0d98-c4d1-384a-8894-45598f95da0b.roa Signing time: Thu 12 Mar 2026 14:31:02 +0000 ROA not before: Thu 12 Mar 2026 14:31:02 +0000 ROA not after: Wed 10 Jun 2026 14:31:02 +0000 asID: 396609 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:2f:f4:14:36:89:db:20:ca:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:02 2026 GMT Not After : Jun 10 14:31:02 2026 GMT Subject: CN=7f97c95e-bf5c-4e9b-afa1-9454c0716de5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:13:70:52:be:54:fe:ee:44:e8:ae:5c:e8:0e: 20:90:e0:b7:e2:db:98:44:0b:6d:29:6f:33:fe:fa: 4b:3c:f5:92:8d:50:bb:11:d0:9a:23:eb:ff:9d:3b: 2d:35:db:b9:f2:1f:64:ce:89:2a:da:f6:ba:70:c1: 92:fc:b4:8f:98:0d:a1:ef:cb:91:16:d6:3e:69:3c: f4:19:71:e6:0e:cf:bd:fa:1b:2c:b9:c5:14:7f:bf: 73:78:b9:99:cf:94:60:d8:38:a3:08:1d:85:43:52: 65:c7:d8:59:0a:84:7a:57:40:f3:16:6b:bb:ff:b9: 50:a6:9d:5b:7f:f2:78:82:f7:dc:ba:92:91:d6:13: a3:a3:89:d5:e2:b4:10:04:11:68:1b:ad:99:3c:1d: b9:f6:6f:e3:6c:f0:f6:b3:a2:06:49:b3:f5:97:75: d6:bb:c8:84:96:f1:43:06:4c:1b:cd:b9:a5:cf:d9: e0:4c:aa:a8:8c:18:59:0e:36:44:c3:1a:fe:4d:80: 1d:2b:2d:ff:0d:89:72:cf:44:20:2f:20:8f:13:78: 89:59:d2:4a:7c:ad:bd:50:30:25:9b:11:67:f3:98: 12:e1:b7:75:e8:e4:de:ae:3b:55:88:7b:c0:51:f6: af:6e:5b:aa:a0:1c:9b:8e:52:60:58:5c:4c:45:37: 45:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:61:AB:5C:0B:76:3D:2F:62:73:AE:44:ED:6A:8E:46:9D:18:66:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1af0d98-c4d1-384a-8894-45598f95da0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d3:9e:01:da:b1:b6:86:02:13:5b:80:d8:53:d9:42:da:cb: e3:8f:c9:37:1b:fa:f4:49:0b:26:24:11:c1:22:27:60:dc:da: 93:10:27:b4:96:19:53:2a:7d:2d:a0:dc:ba:f1:72:ba:ed:e5: d4:af:33:a1:a7:57:2b:67:66:48:15:44:12:00:8a:84:6a:a5: ad:be:b5:51:0f:12:d3:ee:f3:a0:41:53:77:6e:48:be:1e:d8: ca:e3:f2:2d:da:ee:b2:98:a4:b5:d0:3c:05:e8:1e:d2:c2:29: e8:20:4c:c8:f6:bc:74:a4:78:4f:2a:90:45:ba:4a:a6:3a:47: e5:0f:1b:ab:e6:65:5b:71:0d:fe:1f:1c:e2:98:da:aa:33:84: ab:f7:cf:2f:33:c0:6a:72:1e:d1:2d:91:7c:b9:07:23:d2:14: 3a:f4:ce:f3:8f:7e:8e:8a:18:42:a2:86:c8:a0:89:de:fb:9b: 6b:72:42:1a:19:9a:85:32:9f:59:d1:68:eb:c0:24:77:2a:05: 42:f4:7c:c2:7e:2b:90:d6:b6:a4:41:ea:4b:de:4f:9c:33:7d: 7f:bf:af:2d:98:c8:8a:e6:2e:54:5c:cd:64:e5:45:a5:c8:a6: 49:b7:6c:14:32:e0:06:e5:9c:36:b3:73:c7:d7:27:5c:6c:91: df:1c:18:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDC/0FDaJ2yDKzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwMloXDTI2MDYxMDE0MzEwMlowLzEtMCsGA1UEAxMk N2Y5N2M5NWUtYmY1Yy00ZTliLWFmYTEtOTQ1NGMwNzE2ZGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRNwUr5U/u5E6K5c6A4gkOC34tuYRAttKW8z /vpLPPWSjVC7EdCaI+v/nTstNdu58h9kzokq2va6cMGS/LSPmA2h78uRFtY+aTz0 GXHmDs+9+hssucUUf79zeLmZz5Rg2DijCB2FQ1Jlx9hZCoR6V0DzFmu7/7lQpp1b f/J4gvfcupKR1hOjo4nV4rQQBBFoG62ZPB259m/jbPD2s6IGSbP1l3XWu8iElvFD Bkwbzbmlz9ngTKqojBhZDjZEwxr+TYAdKy3/DYlyz0QgLyCPE3iJWdJKfK29UDAl mxFn85gS4bd16OTerjtViHvAUfavbluqoBybjlJgWFxMRTdFHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMphq1wLdj0vYnOuRO1qjkadGGaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzFhZjBkOTgtYzRkMS0z ODRhLTg4OTQtNDU1OThmOTVkYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG3TngHasbaGAhNbgNhT2ULay+OPyTcb+vRJCyYkEcEiJ2Dc2pMQ J7SWGVMqfS2g3Lrxcrrt5dSvM6GnVytnZkgVRBIAioRqpa2+tVEPEtPu86BBU3du SL4e2Mrj8i3a7rKYpLXQPAXoHtLCKeggTMj2vHSkeE8qkEW6SqY6R+UPG6vmZVtx Df4fHOKY2qozhKv3zy8zwGpyHtEtkXy5ByPSFDr0zvOPfo6KGEKihsigid77m2ty QhoZmoUyn1nRaOvAJHcqBUL0fMJ+K5DWtqRB6kveT5wzfX+/ry2YyIrmLlRczWTl RaXIpkm3bBQy4AblnDazc8fXJ1xskd8cGM4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:29 2026 by rpki-client