$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce17b75c-6efc-3eb4-8476-443a0750a72a.roa File: ce17b75c-6efc-3eb4-8476-443a0750a72a.roa (raw, json) Hash identifier: q5zmJLr9OSfpKn21IPM54pMvRkSS3k6nOTO4yPT1I50= Subject key identifier: 3B:B4:00:21:93:72:CE:DE:F8:0C:4E:07:4E:1D:FC:98:96:0F:47:F3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D24E12E75E5D6C135CEC5FB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce17b75c-6efc-3eb4-8476-443a0750a72a.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396616 IP address blocks: 2001:503:c27::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:2e:75:e5:d6:c1:35:ce:c5:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=c1d77f83-ebee-463a-8ec8-72c4a28bcf55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b3:37:fd:92:68:d2:5a:75:ba:5a:5f:d5:7d: ae:69:8c:67:ed:f2:e3:95:e5:37:ad:c1:4d:ca:e5: c2:65:72:94:76:57:22:0d:8f:42:c3:f0:0e:72:a6: 01:60:5a:67:32:1a:1b:0d:91:8e:9d:5c:c7:26:c1: 8c:74:6b:5f:13:bf:5f:8e:74:bc:db:55:35:a2:8f: fc:6b:58:6a:4a:a4:14:39:2a:51:51:82:10:72:40: 16:de:2b:1e:7c:a4:69:3e:42:0e:27:b4:86:89:21: 18:e1:63:77:b5:6e:62:e6:5f:18:8b:84:0d:69:1b: 4c:4e:f5:6c:ae:05:af:3e:1e:9c:e3:23:5e:ee:26: 0a:48:b3:90:86:47:c4:8f:48:31:72:f5:61:79:fb: 4e:07:b6:06:2f:ee:5f:b5:36:7a:93:28:51:7f:4f: 36:3e:73:b6:8e:9f:47:fa:4d:d9:dd:8a:61:d9:4d: 09:00:bf:95:30:e0:d3:43:e1:3c:4b:39:30:06:14: ee:a6:db:15:67:99:c3:90:90:e5:32:c0:a7:ed:45: 5c:f3:c0:9d:85:eb:41:71:0f:8f:27:78:60:bc:83: 6b:e1:e7:3a:b5:ad:a9:c2:8c:f2:9b:10:71:c6:e2: 9b:10:f7:52:0b:af:90:d3:35:c3:26:16:67:ea:b1: 30:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B4:00:21:93:72:CE:DE:F8:0C:4E:07:4E:1D:FC:98:96:0F:47:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ce17b75c-6efc-3eb4-8476-443a0750a72a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:09:7a:33:aa:97:65:f3:65:7c:55:50:48:81:d1:96:d3:0f: e4:3e:59:a8:cc:48:d4:9a:3a:c2:e8:6a:aa:fb:c1:08:a6:df: 6f:90:00:55:38:25:61:ab:a2:07:43:41:b8:a6:46:dd:c3:7a: c3:11:80:9d:9d:75:10:dc:88:77:95:eb:15:3d:59:20:90:8f: c4:60:ad:8a:fa:99:60:0f:f2:a7:46:e6:98:f9:bc:57:3b:eb: 29:cf:1d:ba:19:1a:41:02:c5:91:f5:c2:8f:16:c8:8b:a0:42: e1:9c:b4:31:6d:ff:83:0f:7f:52:96:cc:96:22:82:7a:a0:9a: b2:e6:3c:65:22:7a:72:de:81:14:2d:a5:da:6c:75:95:65:7b: 11:c3:43:e2:9d:c1:a4:d9:b0:13:91:33:66:15:eb:55:7c:dd: 21:f0:aa:8f:66:28:c6:e3:15:06:c6:8b:fc:95:c0:d8:ad:30: b3:c5:d2:7d:31:9f:9d:02:c0:a2:6e:bf:a4:ab:23:72:ea:1c: c1:f7:65:cc:b3:df:d9:22:62:59:f7:1b:07:96:42:74:6f:d3: f8:dc:09:ca:10:1e:cc:30:37:f0:f1:48:32:b7:ad:34:e6:8e: f3:0d:18:c4:70:d7:ed:52:d5:7f:e4:86:3f:ce:17:ee:29:7f: ef:7e:8a:ca -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0k4S515dbBNc7F+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YzFkNzdmODMtZWJlZS00NjNhLThlYzgtNzJjNGEyOGJjZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbM3/ZJo0lp1ulpf1X2uaYxn7fLjleU3rcFN yuXCZXKUdlciDY9Cw/AOcqYBYFpnMhobDZGOnVzHJsGMdGtfE79fjnS821U1oo/8 a1hqSqQUOSpRUYIQckAW3isefKRpPkIOJ7SGiSEY4WN3tW5i5l8Yi4QNaRtMTvVs rgWvPh6c4yNe7iYKSLOQhkfEj0gxcvVheftOB7YGL+5ftTZ6kyhRf082PnO2jp9H +k3Z3Yph2U0JAL+VMODTQ+E8SzkwBhTuptsVZ5nDkJDlMsCn7UVc88CdhetBcQ+P J3hgvINr4ec6ta2pwozymxBxxuKbEPdSC6+Q0zXDJhZn6rEw/wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDu0ACGTcs7e+AxOB04d/JiWD0fzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2UxN2I3NWMtNmVmYy0z ZWI0LTg0NzYtNDQzYTA3NTBhNzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAwwn AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAnCXozqpdl82V8VVBIgdGW0w/kPlmozEjUmjrC 6Gqq+8EIpt9vkABVOCVhq6IHQ0G4pkbdw3rDEYCdnXUQ3Ih3lesVPVkgkI/EYK2K +plgD/KnRuaY+bxXO+spzx26GRpBAsWR9cKPFsiLoELhnLQxbf+DD39SlsyWIoJ6 oJqy5jxlInpy3oEULaXabHWVZXsRw0PincGk2bATkTNmFetVfN0h8KqPZijG4xUG xov8lcDYrTCzxdJ9MZ+dAsCibr+kqyNy6hzB92XMs9/ZImJZ9xsHlkJ0b9P43AnK EB7MMDfw8Ugyt6005o7zDRjEcNftUtV/5IY/zhfuKX/vforK -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:01 2026 by rpki-client