$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d39648fe-791d-3593-96dd-946e533dc570.roa File: d39648fe-791d-3593-96dd-946e533dc570.roa (raw, json) Hash identifier: X1BS/GpvOqMmd7iQzNQkIAeSvSHgbUcAQ6/KTVHYvao= Subject key identifier: 0A:26:31:72:EE:44:A9:B3:06:E5:61:A8:56:9C:57:39:DA:74:E1:B3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D746C79207288E32D8480 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d39648fe-791d-3593-96dd-946e533dc570.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396826 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:74:6c:79:20:72:88:e3:2d:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=ff198a3b-3cd9-480b-b341-93671c1fcda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:26:08:bd:b7:7b:e4:1c:57:c8:9d:0b:83:b1: 81:f4:17:e9:24:ed:1f:83:89:a1:61:3b:b5:3f:53: 08:b0:1b:48:49:8d:c9:33:85:35:8e:48:33:c0:2b: 89:df:32:be:55:40:f3:02:d4:99:73:a8:cd:a6:f6: 03:02:85:fa:36:65:ba:38:09:81:33:e2:03:4c:11: 20:f3:cd:a9:1d:80:f3:44:0a:69:f1:76:41:f9:c3: f0:1e:3b:aa:87:65:d6:8d:c9:ad:25:9f:47:a6:c8: 1d:31:9e:b1:fb:f3:c0:e6:c9:8f:d8:76:b0:94:b9: 4a:5a:6d:3f:18:5e:32:d1:cf:21:88:f0:5e:cd:18: b2:52:ff:c6:86:0a:cb:a0:f2:fe:bb:be:be:c9:10: ce:0a:23:f4:92:4a:3e:f1:7d:12:09:4e:80:e0:28: 3b:0d:23:b5:c4:45:cd:07:0d:23:f1:0b:a9:16:36: 6c:6a:0a:a1:8f:f1:f6:ff:c3:2b:16:d2:08:1b:c3: 19:d9:b4:61:ac:e8:36:24:fd:be:1c:53:12:1a:65: 5a:7b:7c:72:8c:b1:51:68:71:02:a0:ec:81:96:7e: 82:3d:8d:6c:fc:fe:9c:4f:88:00:82:ed:a1:2b:29: 6a:15:98:c3:b0:5a:c5:99:de:96:9b:2f:8b:c6:e6: bb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:26:31:72:EE:44:A9:B3:06:E5:61:A8:56:9C:57:39:DA:74:E1:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d39648fe-791d-3593-96dd-946e533dc570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:5c:54:f8:a0:85:9e:21:49:fd:a8:86:11:e3:27:df:1a:4e: 05:bf:c6:3b:9d:e3:86:42:f6:e2:90:bd:ed:55:33:80:44:a2: c0:25:09:d9:b9:54:c0:b4:29:48:c7:5f:9f:89:23:3f:cd:11: ab:a2:f4:be:fa:4e:b7:55:a7:08:d3:56:8b:8d:c0:f6:b6:7f: 3c:ec:69:fb:2a:55:1d:b2:a6:53:f4:d1:df:71:e6:ac:2d:91: ad:db:07:e8:c9:9d:60:43:65:56:68:a4:33:12:15:5d:e9:43: b6:b6:f1:b4:cf:f7:39:1b:79:b0:22:b3:dd:b4:ae:8c:69:61: 38:73:8b:6d:b5:2b:be:c8:26:dc:0e:83:84:1e:3a:b2:a9:4d: cc:ee:21:bc:1e:19:36:50:c8:53:ca:5c:c1:a6:6b:21:0b:c5: 88:1c:4f:e6:d2:c3:b0:dd:a2:7e:ff:68:7d:24:6b:f1:16:21: 1b:b7:94:3d:af:0e:51:42:99:a9:30:fb:21:80:b2:8a:f5:4b: 6f:6a:b0:11:a3:13:09:e4:d5:94:b4:e7:09:f2:59:50:f6:ef: 7d:06:f5:16:58:87:84:c0:49:22:59:3a:c7:76:63:6b:d5:ad: 93:e2:30:e5:fc:32:ae:e6:af:5b:11:4f:b3:05:83:38:a1:0d: af:67:78:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPXRseSByiOMthIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZmYxOThhM2ItM2NkOS00ODBiLWIzNDEtOTM2NzFjMWZjZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSYIvbd75BxXyJ0Lg7GB9BfpJO0fg4mhYTu1 P1MIsBtISY3JM4U1jkgzwCuJ3zK+VUDzAtSZc6jNpvYDAoX6NmW6OAmBM+IDTBEg 882pHYDzRApp8XZB+cPwHjuqh2XWjcmtJZ9HpsgdMZ6x+/PA5smP2HawlLlKWm0/ GF4y0c8hiPBezRiyUv/GhgrLoPL+u76+yRDOCiP0kko+8X0SCU6A4Cg7DSO1xEXN Bw0j8QupFjZsagqhj/H2/8MrFtIIG8MZ2bRhrOg2JP2+HFMSGmVae3xyjLFRaHEC oOyBln6CPY1s/P6cT4gAgu2hKylqFZjDsFrFmd6Wmy+Lxua7PwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAomMXLuRKmzBuVhqFacVznadOGzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDM5NjQ4ZmUtNzkxZC0z NTkzLTk2ZGQtOTQ2ZTUzM2RjNTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAINcVPighZ4hSf2ohhHjJ98aTgW/xjud44ZC9uKQve1VM4BEosAl Cdm5VMC0KUjHX5+JIz/NEaui9L76TrdVpwjTVouNwPa2fzzsafsqVR2yplP00d9x 5qwtka3bB+jJnWBDZVZopDMSFV3pQ7a28bTP9zkbebAis920roxpYThzi221K77I JtwOg4QeOrKpTczuIbweGTZQyFPKXMGmayELxYgcT+bSw7Ddon7/aH0ka/EWIRu3 lD2vDlFCmakw+yGAsor1S29qsBGjEwnk1ZS05wnyWVD2730G9RZYh4TASSJZOsd2 Y2vVrZPiMOX8Mq7mr1sRT7MFgzihDa9neEI= -----END CERTIFICATE-----Generated at Thu Mar 26 18:49:51 2026 by rpki-client