$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa File: c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa (raw, json) Hash identifier: cAGcN2uW49HxMs0Nrw6dFWFLAtmRBqLxbMXI1chIxNM= Subject key identifier: 10:64:E6:37:7E:F8:57:35:B3:10:F3:BC:F8:14:37:F6:88:DF:CB:5A Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D1F4A6A856CA00C73F4DF2C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 396581 IP address blocks: 2001:500:133::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:6a:85:6c:a0:0c:73:f4:df:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=1008b7ea-b8e2-4a24-9dfb-098c38a5e8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:15:fc:89:08:88:12:4f:17:79:76:8d:2a:3b: e5:7b:77:0d:ac:c4:d8:48:c7:58:e5:41:4d:24:a8: 40:a9:e8:cc:4b:02:96:84:66:1c:4d:2d:da:e9:1a: 91:b2:d9:81:83:e4:2d:f9:fe:86:2c:74:23:9b:51: 47:42:d0:92:89:4c:08:25:ed:10:d0:a4:0e:da:d1: 84:b9:a6:20:a4:38:5a:81:aa:d3:1a:1c:37:d8:96: 46:4b:d9:32:75:45:46:73:02:69:46:79:85:be:07: 95:dd:db:63:6e:02:02:53:a7:a2:5e:24:95:01:f8: 74:ad:32:34:20:67:9b:80:4f:ee:41:bf:53:d6:6b: 53:26:6a:7e:14:bd:23:c2:bf:75:c0:bc:3b:12:cc: 74:54:ce:4f:c4:ec:95:bd:91:06:4e:86:5e:33:b9: 84:eb:cf:45:0c:e3:92:6c:9a:e9:7b:7b:44:44:77: cd:50:c6:ce:7d:49:58:c9:ec:f8:8f:ab:95:a6:17: 2a:59:cc:75:fa:c9:84:0c:fa:56:b5:fa:62:f5:76: 22:e6:91:6f:ab:e8:3d:27:cc:2a:01:58:01:5b:72: 4f:37:0b:7b:77:61:7e:f7:40:b7:9c:e2:1b:77:f5: 1f:9d:c4:5d:47:0b:a4:8a:0e:47:7f:f0:cf:b8:f0: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:E6:37:7E:F8:57:35:B3:10:F3:BC:F8:14:37:F6:88:DF:CB:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c438eec8-a5a5-36f1-b071-2d581bfe14b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:133:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:b8:13:7a:a9:14:75:c3:d7:ec:71:43:ba:d3:3f:37:84:b7: 2e:9a:07:fd:19:f4:69:02:64:cf:95:44:7e:d4:21:96:d0:4c: 57:11:9a:de:9d:29:bf:14:82:92:f6:66:bf:85:7d:7d:1a:0b: 10:8c:20:5a:2a:a6:b8:88:8b:9f:f8:50:cb:59:e2:93:a8:d9: e9:dd:67:f4:c9:e5:72:72:d4:9f:cf:b9:49:60:fd:44:5a:27: 72:71:55:93:44:09:28:34:91:17:a3:fc:20:15:86:00:f2:b5: fc:96:83:f4:ff:ed:d8:07:ca:a9:82:57:b0:1b:86:1e:6e:a2: 5e:5d:68:30:e9:3b:58:78:b5:65:58:d4:f4:63:18:eb:69:67: d2:cd:a7:2a:c1:56:ce:06:04:8b:40:fb:72:fe:57:ee:f3:c6: 8b:d5:e1:81:4e:f3:d9:a8:71:0f:63:32:d5:03:da:a0:be:de: 33:e2:40:88:39:64:b6:c8:84:34:2d:5c:fa:77:c9:48:4c:4f: 64:f5:4f:b9:de:c7:b1:88:f4:aa:be:21:ec:21:9c:13:59:e5: ce:9f:30:d1:86:1a:23:00:0a:7e:25:1f:1f:95:9c:f0:40:4e: b1:89:76:83:b0:da:16:12:4c:14:59:f1:64:a5:65:d2:d8:bf: 36:b2:62:67 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0fSmqFbKAMc/TfLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MTAwOGI3ZWEtYjhlMi00YTI0LTlkZmItMDk4YzM4YTVlOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxX8iQiIEk8XeXaNKjvle3cNrMTYSMdY5UFN JKhAqejMSwKWhGYcTS3a6RqRstmBg+Qt+f6GLHQjm1FHQtCSiUwIJe0Q0KQO2tGE uaYgpDhagarTGhw32JZGS9kydUVGcwJpRnmFvgeV3dtjbgICU6eiXiSVAfh0rTI0 IGebgE/uQb9T1mtTJmp+FL0jwr91wLw7Esx0VM5PxOyVvZEGToZeM7mE689FDOOS bJrpe3tERHfNUMbOfUlYyez4j6uVphcqWcx1+smEDPpWtfpi9XYi5pFvq+g9J8wq AVgBW3JPNwt7d2F+90C3nOIbd/UfncRdRwukig5Hf/DPuPDH3wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFBBk5jd++Fc1sxDzvPgUN/aI38taMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzQzOGVlYzgtYTVhNS0z NmYxLWIwNzEtMmQ1ODFiZmUxNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAEz AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBsuBN6qRR1w9fscUO60z83hLcumgf9GfRpAmTP lUR+1CGW0ExXEZrenSm/FIKS9ma/hX19GgsQjCBaKqa4iIuf+FDLWeKTqNnp3Wf0 yeVyctSfz7lJYP1EWidycVWTRAkoNJEXo/wgFYYA8rX8loP0/+3YB8qpglewG4Ye bqJeXWgw6TtYeLVlWNT0YxjraWfSzacqwVbOBgSLQPty/lfu88aL1eGBTvPZqHEP YzLVA9qgvt4z4kCIOWS2yIQ0LVz6d8lITE9k9U+53sexiPSqviHsIZwTWeXOnzDR hhojAAp+JR8flZzwQE6xiXaDsNoWEkwUWfFkpWXS2L82smJn -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:29 2026 by rpki-client