$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c78fdc71-9bcd-33b3-99dc-a782fd1c9bea.roa File: c78fdc71-9bcd-33b3-99dc-a782fd1c9bea.roa (raw, json) Hash identifier: Xt1KpJLb+k1b7kh7hF9DxhabHiI3gDlr+RTklE4vtpU= Subject key identifier: CE:D3:5D:1A:DB:59:73:66:55:60:65:DD:36:56:46:85:E3:5F:68:65 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C34678E9066B4E1E37980 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c78fdc71-9bcd-33b3-99dc-a782fd1c9bea.roa Signing time: Thu 12 Mar 2026 14:31:04 +0000 ROA not before: Thu 12 Mar 2026 14:31:04 +0000 ROA not after: Wed 10 Jun 2026 14:31:04 +0000 asID: 396563 IP address blocks: 2001:500:d937::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:34:67:8e:90:66:b4:e1:e3:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:04 2026 GMT Not After : Jun 10 14:31:04 2026 GMT Subject: CN=771e4de0-4430-4605-8b6a-22922d1ac6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:c2:68:3c:30:4d:53:4e:88:95:48:08:d8: 81:ee:fc:f5:35:12:87:81:4d:fe:cf:29:d0:63:fb: 4d:31:bf:76:86:fd:e4:02:28:61:70:a1:06:79:53: eb:f9:ab:fc:b5:43:18:3a:a3:49:eb:72:16:c7:11: 25:ea:ae:4e:b6:a8:f0:81:37:0c:ca:3a:13:99:03: 07:6c:09:42:c3:89:3b:2e:1b:80:d1:04:64:ff:e2: 40:56:d8:a3:dc:c3:a3:b1:dc:92:fc:1d:55:a9:aa: 9f:08:70:b6:a4:d5:78:c2:47:57:54:4f:86:44:cc: 80:47:80:7a:ef:43:55:e2:56:2e:77:e4:38:3d:ac: 55:51:98:ca:78:9d:cf:7c:79:77:00:ae:43:5c:fe: be:e4:69:5e:ba:46:63:84:0f:0e:87:c5:a1:4b:56: 96:75:a5:f9:ca:b2:7e:3e:02:e2:40:9e:8d:11:37: 77:ce:69:72:bf:89:ac:ba:4d:a6:23:42:2b:34:74: 22:d9:2d:2c:3e:36:08:95:c9:5d:dd:a8:dc:1e:24: 01:5a:30:51:fc:6f:9b:1d:63:53:a3:75:38:bf:ac: 49:e5:ed:17:6b:65:a0:90:29:fc:a4:e8:07:89:62: 96:65:8a:ff:92:24:9b:d1:42:2d:35:61:ca:fb:e9: 49:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D3:5D:1A:DB:59:73:66:55:60:65:DD:36:56:46:85:E3:5F:68:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c78fdc71-9bcd-33b3-99dc-a782fd1c9bea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:d937:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:50:83:45:a2:26:53:9f:04:7e:14:6d:a3:26:6a:6a:f8:b8: f4:4f:ec:44:9f:04:bb:b8:c9:b5:c9:f7:1c:a9:95:3d:f4:11: 7a:5e:79:86:0f:16:35:ca:b0:46:8e:98:d3:b9:94:a7:b0:a5: c2:5a:62:9d:9e:9d:dc:d3:06:4d:88:42:17:c1:fa:2b:be:a1: 15:1a:45:60:51:a8:81:66:b8:4c:8d:08:21:57:bd:71:ec:dc: 12:df:b2:23:c5:9f:6a:75:6b:3f:10:0a:9f:68:6f:d3:25:5d: 82:6b:90:d9:ff:7a:9e:f0:10:62:76:20:1f:d8:e4:cf:f1:ae: f8:eb:02:58:47:a7:3b:c8:29:c6:ce:66:13:c5:74:cf:6d:1f: 2a:28:cc:d0:f5:ff:da:67:aa:ae:b9:c0:09:eb:13:1d:9e:a1: 47:67:e9:00:cf:16:bc:10:8f:c0:50:70:df:5d:d1:c9:6d:ca: b2:6e:3e:ed:8e:45:ee:48:80:31:a1:7e:2b:9f:fc:45:b6:41: 70:85:d3:9d:48:ce:7a:50:d9:29:d4:40:6a:9c:27:33:a4:1e: 2a:a0:3b:52:de:41:60:54:6d:62:e1:64:cc:d7:40:7c:d7:58: ad:e1:eb:62:b8:5f:98:a9:47:de:d4:e9:d5:8c:86:fc:79:5b: 62:4b:6e:bd -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0lDDRnjpBmtOHjeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwNFoXDTI2MDYxMDE0MzEwNFowLzEtMCsGA1UEAxMk NzcxZTRkZTAtNDQzMC00NjA1LThiNmEtMjI5MjJkMWFjNmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBTCaDwwTVNOiJVICNiB7vz1NRKHgU3+zynQ Y/tNMb92hv3kAihhcKEGeVPr+av8tUMYOqNJ63IWxxEl6q5OtqjwgTcMyjoTmQMH bAlCw4k7LhuA0QRk/+JAVtij3MOjsdyS/B1VqaqfCHC2pNV4wkdXVE+GRMyAR4B6 70NV4lYud+Q4PaxVUZjKeJ3PfHl3AK5DXP6+5GleukZjhA8Oh8WhS1aWdaX5yrJ+ PgLiQJ6NETd3zmlyv4msuk2mI0IrNHQi2S0sPjYIlcld3ajcHiQBWjBR/G+bHWNT o3U4v6xJ5e0Xa2WgkCn8pOgHiWKWZYr/kiSb0UItNWHK++lJgQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFM7TXRrbWXNmVWBl3TZWRoXjX2hlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYzc4ZmRjNzEtOWJjZC0z M2IzLTk5ZGMtYTc4MmZkMWM5YmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFANk3 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBLUINFoiZTnwR+FG2jJmpq+Lj0T+xEnwS7uMm1 yfccqZU99BF6XnmGDxY1yrBGjpjTuZSnsKXCWmKdnp3c0wZNiEIXwforvqEVGkVg UaiBZrhMjQghV71x7NwS37IjxZ9qdWs/EAqfaG/TJV2Ca5DZ/3qe8BBidiAf2OTP 8a746wJYR6c7yCnGzmYTxXTPbR8qKMzQ9f/aZ6quucAJ6xMdnqFHZ+kAzxa8EI/A UHDfXdHJbcqybj7tjkXuSIAxoX4rn/xFtkFwhdOdSM56UNkp1EBqnCczpB4qoDtS 3kFgVG1i4WTM10B811it4etiuF+YqUfe1OnVjIb8eVtiS269 -----END CERTIFICATE-----Generated at Thu Mar 26 18:41:33 2026 by rpki-client