$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafd0a0f-c59f-3c37-93aa-88a3146a2119.roa File: cafd0a0f-c59f-3c37-93aa-88a3146a2119.roa (raw, json) Hash identifier: P0kPBbAp2AndcBVzGmnZqSN+XD5lSKEOQc4q6G5QGBc= Subject key identifier: 2B:70:F8:16:E0:1B:61:92:2C:0C:A6:C6:47:84:8A:43:44:60:32:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D2644AA40D40B33321F589080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafd0a0f-c59f-3c37-93aa-88a3146a2119.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 396564 IP address blocks: 2001:500:135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:aa:40:d4:0b:33:32:1f:58:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=9c9d792e-e58c-45aa-aad4-29479640ecb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c0:a5:52:1a:79:da:fd:84:6c:8f:61:0e:1e: a1:ea:6b:dc:54:a6:fe:44:e9:59:3e:fe:97:bf:1e: 17:c4:93:0c:7a:eb:f7:d6:24:df:90:e1:8e:c9:e6: b6:a5:5f:bd:78:58:28:a0:df:b6:be:70:d8:ac:61: 62:ac:e3:14:ec:a3:24:9d:9d:9e:48:b5:b9:29:92: c6:92:d4:3f:1f:a9:18:8d:1a:54:ba:4e:0a:8d:21: fc:89:1b:3a:7f:d3:3b:68:db:ca:57:85:01:37:59: ce:4d:19:4e:6b:2d:8f:8c:cc:31:e4:74:e9:38:7a: c9:00:8a:6f:f7:b5:05:9e:29:6b:73:85:9d:7d:f5: 74:7c:50:fa:c4:4e:f0:ae:7d:61:8d:79:35:a4:b0: 03:52:19:50:28:a3:1b:bf:67:64:29:4a:1f:a0:d7: bf:63:bb:51:1a:30:fc:44:b3:d8:75:5d:52:85:29: 69:9d:11:ce:1a:09:f1:9a:87:49:0e:d6:70:71:89: 80:ba:0a:37:02:f6:4f:ed:91:f7:af:88:b4:d6:2f: 7d:d1:24:29:01:5b:9e:83:0d:d7:7b:b6:11:03:97: bb:96:10:56:83:62:99:3e:6d:3a:6b:4c:41:6e:0e: 9a:09:e6:98:84:7f:99:04:f0:f1:d4:7f:b7:14:3b: c9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:70:F8:16:E0:1B:61:92:2C:0C:A6:C6:47:84:8A:43:44:60:32:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cafd0a0f-c59f-3c37-93aa-88a3146a2119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:19:1e:b4:50:62:89:7f:02:3b:69:3f:dd:dd:7b:40:01:0a: ab:8a:dc:95:20:62:29:90:ae:22:83:0c:66:2f:67:64:5a:f6: e0:b5:12:fc:20:26:42:6e:4c:5f:79:e4:f2:98:4d:0b:f0:43: ff:52:bc:ac:e8:84:7d:1f:5c:38:39:5b:e3:8b:f8:bf:91:b7: 15:89:01:6d:fe:49:20:79:71:71:fb:42:8e:b6:e7:e1:63:e0: 2f:e6:81:90:a8:45:24:32:a5:15:96:8c:fd:de:c3:51:92:44: a3:ff:46:e4:b1:ba:ca:a9:74:a4:e1:27:49:3a:7a:02:de:21: 48:0f:de:52:30:e5:2e:b8:e9:82:53:ff:f0:6e:2b:b5:03:95: 92:de:54:fd:ff:58:1d:c5:ac:a5:6c:13:0e:88:a4:91:81:33: 9a:1a:11:00:89:2c:9b:86:a0:01:57:a2:9a:bb:44:03:dc:dc: b6:55:51:1f:5b:c4:93:d2:b4:30:f4:1f:70:69:05:e1:3a:e6: 74:47:65:a1:97:a8:74:96:98:08:d0:a3:8e:2d:c5:88:ee:a7: 4a:88:bd:ca:7d:53:0a:d1:98:68:93:7c:d0:da:bb:2f:48:3b: 92:70:73:bb:d5:eb:67:60:e7:d3:69:3e:00:cd:43:12:21:49: 3d:08:7d:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0mRKpA1AszMh9YkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk OWM5ZDc5MmUtZTU4Yy00NWFhLWFhZDQtMjk0Nzk2NDBlY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsClUhp52v2EbI9hDh6h6mvcVKb+ROlZPv6X vx4XxJMMeuv31iTfkOGOyea2pV+9eFgooN+2vnDYrGFirOMU7KMknZ2eSLW5KZLG ktQ/H6kYjRpUuk4KjSH8iRs6f9M7aNvKV4UBN1nOTRlOay2PjMwx5HTpOHrJAIpv 97UFnilrc4WdffV0fFD6xE7wrn1hjXk1pLADUhlQKKMbv2dkKUofoNe/Y7tRGjD8 RLPYdV1ShSlpnRHOGgnxmodJDtZwcYmAugo3AvZP7ZH3r4i01i990SQpAVuegw3X e7YRA5e7lhBWg2KZPm06a0xBbg6aCeaYhH+ZBPDx1H+3FDvJZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCtw+BbgG2GSLAymxkeEikNEYDL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2FmZDBhMGYtYzU5Zi0z YzM3LTkzYWEtODhhMzE0NmEyMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGgZHrRQYol/AjtpP93de0ABCquK3JUgYimQriKDDGYvZ2Ra9uC1 EvwgJkJuTF955PKYTQvwQ/9SvKzohH0fXDg5W+OL+L+RtxWJAW3+SSB5cXH7Qo62 5+Fj4C/mgZCoRSQypRWWjP3ew1GSRKP/RuSxusqpdKThJ0k6egLeIUgP3lIw5S64 6YJT//BuK7UDlZLeVP3/WB3FrKVsEw6IpJGBM5oaEQCJLJuGoAFXopq7RAPc3LZV UR9bxJPStDD0H3BpBeE65nRHZaGXqHSWmAjQo44txYjup0qIvcp9UwrRmGiTfNDa uy9IO5Jwc7vV62dg59NpPgDNQxIhST0IfXk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:45 2026 by rpki-client