$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac965a2-094c-3dc2-9c98-83726b1bd7be.roa File: cac965a2-094c-3dc2-9c98-83726b1bd7be.roa (raw, json) Hash identifier: ztfYmPxvoaB3GlezHgBzNsPydITtBWrOvDxkBm53cP0= Subject key identifier: 5D:A7:67:CF:53:5D:FE:AF:1E:18:94:BA:A7:30:4A:30:3B:46:D2:1D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D386A3C217C87BF0F3840F8C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac965a2-094c-3dc2-9c98-83726b1bd7be.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 36625 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:3c:21:7c:87:bf:0f:38:40:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=f61618e5-f768-4573-ada3-5afe1c58400b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:bc:a7:49:29:87:ca:11:fe:f6:de:68:43: 91:4c:95:2d:8b:9e:5f:e4:91:57:5a:c9:54:2c:b2: 35:27:35:2c:47:d0:bb:c2:24:04:97:c7:20:24:8e: c5:82:c8:f3:ae:61:9e:1a:be:cd:7a:cc:1b:94:aa: f8:f7:fd:1a:aa:93:62:ef:b4:4b:09:fb:a6:80:1b: bf:14:42:5e:8b:fb:5d:a1:70:c9:ad:16:8b:c2:de: 2a:81:3a:29:e4:0f:2e:51:37:98:52:43:2c:b6:66: e7:90:5d:c3:b6:20:0b:d4:a1:3e:93:23:90:49:0c: 43:70:a1:3b:a5:1a:e8:1b:c9:8d:54:ba:fb:21:d9: 5e:7f:47:84:f2:d9:cd:cf:83:15:46:0f:31:d2:81: 73:91:db:3b:a6:69:e7:8a:ec:66:6f:cc:88:57:6a: 81:bc:d3:41:61:8a:cf:7e:ec:d1:77:95:84:ae:14: 9d:6a:60:42:11:47:e2:db:da:6a:9b:0c:d1:48:bb: 20:3d:03:76:63:42:1e:21:2e:f0:df:68:ce:cf:5d: 6f:aa:37:40:92:40:6f:f3:2f:d1:21:d5:51:3a:45: 1c:71:96:3d:47:f7:21:b7:44:1a:4d:46:29:5e:1c: f0:c8:f6:8c:e7:fd:9c:0e:52:68:4d:b2:06:fc:64: 3f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A7:67:CF:53:5D:FE:AF:1E:18:94:BA:A7:30:4A:30:3B:46:D2:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cac965a2-094c-3dc2-9c98-83726b1bd7be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:61:4e:e1:aa:c2:77:40:15:4e:9a:61:80:6b:d0:81:d9:ec: f5:f6:ef:af:d7:57:71:8d:77:a4:58:1a:b2:47:12:df:41:b2: 22:99:81:ab:d4:3d:53:0d:3b:b5:0a:51:42:38:66:22:25:14: 84:13:b7:b4:38:2e:19:55:c5:0c:30:2b:f9:a9:12:82:71:e1: 53:6c:53:e1:5f:29:0e:ca:55:8b:f0:29:e8:97:94:40:14:72: 89:8e:3f:36:fe:ca:17:de:17:94:5d:cd:fd:bf:ce:23:04:31: 77:c1:66:eb:df:9a:34:d4:ed:5c:89:87:09:1a:9e:68:c6:43: 69:c5:4f:af:99:83:2b:1d:91:5f:eb:1f:62:58:85:8f:c3:7e: c5:33:8e:9f:76:df:0a:82:ff:3a:f3:3e:ee:0b:04:2a:fa:9f: 80:be:d5:04:1d:d2:b0:f5:54:c4:0c:53:75:c5:b5:d1:92:cf: 46:44:da:6c:5a:c4:44:d8:cb:1c:19:c2:58:55:72:42:52:e9: 67:09:5b:83:7f:c2:ca:f1:57:da:5b:54:97:c7:6b:19:9c:fc: a6:e4:95:7a:1a:4d:e0:fc:22:7d:b8:ec:78:c7:c9:0a:d2:c6: 5f:8e:9c:f4:ed:76:23:95:a0:4e:79:65:ac:34:e6:f9:ce:7d: 00:8c:4c:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04ajwhfIe/DzhA+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk ZjYxNjE4ZTUtZjc2OC00NTczLWFkYTMtNWFmZTFjNTg0MDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK28p0kph8oR/vbeaEORTJUti55f5JFXWslU LLI1JzUsR9C7wiQEl8cgJI7FgsjzrmGeGr7NeswblKr49/0aqpNi77RLCfumgBu/ FEJei/tdoXDJrRaLwt4qgTop5A8uUTeYUkMstmbnkF3DtiAL1KE+kyOQSQxDcKE7 pRroG8mNVLr7Idlef0eE8tnNz4MVRg8x0oFzkds7pmnniuxmb8yIV2qBvNNBYYrP fuzRd5WErhSdamBCEUfi29pqmwzRSLsgPQN2Y0IeIS7w32jOz11vqjdAkkBv8y/R IdVROkUccZY9R/cht0QaTUYpXhzwyPaM5/2cDlJoTbIG/GQ/KQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF2nZ89TXf6vHhiUuqcwSjA7RtIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2FjOTY1YTItMDk0Yy0z ZGMyLTljOTgtODM3MjZiMWJkN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ5hTuGqwndAFU6aYYBr0IHZ7PX276/XV3GNd6RYGrJHEt9BsiKZ gavUPVMNO7UKUUI4ZiIlFIQTt7Q4LhlVxQwwK/mpEoJx4VNsU+FfKQ7KVYvwKeiX lEAUcomOPzb+yhfeF5Rdzf2/ziMEMXfBZuvfmjTU7VyJhwkanmjGQ2nFT6+Zgysd kV/rH2JYhY/DfsUzjp923wqC/zrzPu4LBCr6n4C+1QQd0rD1VMQMU3XFtdGSz0ZE 2mxaxETYyxwZwlhVckJS6WcJW4N/wsrxV9pbVJfHaxmc/KbklXoaTeD8In247HjH yQrSxl+OnPTtdiOVoE55Zaw05vnOfQCMTIA= -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:28 2026 by rpki-client