$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5dfc796-70f7-3b38-9a59-acb5b756d2c7.roa File: d5dfc796-70f7-3b38-9a59-acb5b756d2c7.roa (raw, json) Hash identifier: SmdXq8utAVHt2G9Bmj/LIn1UnPeFoSSVHQPdH/Uh9Ok= Subject key identifier: 71:6D:3A:77:A4:7D:A5:6C:2F:0C:F5:AE:C1:51:93:0A:3A:28:A3:68 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C30B73EB9759EE51B8680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5dfc796-70f7-3b38-9a59-acb5b756d2c7.roa Signing time: Thu 12 Mar 2026 14:31:03 +0000 ROA not before: Thu 12 Mar 2026 14:31:03 +0000 ROA not after: Wed 10 Jun 2026 14:31:03 +0000 asID: 397193 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:30:b7:3e:b9:75:9e:e5:1b:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:03 2026 GMT Not After : Jun 10 14:31:03 2026 GMT Subject: CN=53f2dfa2-dfbc-4685-bc5c-0bc83cdb68ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:39:ed:3c:bb:6a:f0:69:20:ff:53:fa:5f:88: c2:22:d0:34:0f:47:25:4e:18:b2:02:f6:ef:24:b7: 0e:9f:d7:92:1c:5a:d8:43:e1:31:74:fb:a7:3a:8c: 94:53:f3:44:fd:fc:c1:41:8e:f4:40:d2:bf:23:f9: e1:99:9a:9e:f1:ee:56:f8:ab:81:f8:1f:43:b4:4a: 73:8d:55:40:d3:7f:98:71:65:16:3c:ff:6d:58:27: 60:19:83:69:9a:9c:f1:0c:4c:26:75:03:1d:41:06: f3:a2:ea:4a:33:39:6c:c2:2c:ba:fb:fd:c4:d1:04: a3:2b:81:2b:1c:65:de:0a:77:ac:9f:0b:ac:49:4c: ee:5c:78:7d:1c:07:6c:d1:0e:ad:1a:e2:8e:93:a8: 7b:67:82:83:d2:55:03:8d:16:06:04:35:25:5c:5d: 2a:ba:7f:d3:53:a9:9d:9a:20:da:5e:41:45:5e:1d: a2:2e:b9:28:5a:87:5d:04:c1:59:a6:52:fd:09:29: c2:62:c5:17:12:a3:40:20:d6:27:a7:4f:14:c3:cd: b3:80:39:49:e1:23:65:d8:b1:1a:39:0a:c7:3c:8d: a9:d8:6e:5f:29:c9:dc:3a:90:d1:fb:90:76:90:df: de:2b:48:99:98:10:02:92:a5:d5:cc:59:ed:2c:52: b2:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6D:3A:77:A4:7D:A5:6C:2F:0C:F5:AE:C1:51:93:0A:3A:28:A3:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d5dfc796-70f7-3b38-9a59-acb5b756d2c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:74:45:b6:1b:0b:14:ec:25:7c:e3:93:73:96:0b:66:d2:47: 3e:7b:53:b1:9a:6e:a0:f8:6a:64:1e:90:59:05:a4:d6:a1:08: 7c:ce:1a:23:bb:cc:57:ff:70:04:26:57:fd:eb:16:b6:b1:99: 17:87:31:16:53:7f:b4:d5:7b:6c:0d:96:a6:f6:98:a0:5f:05: 05:14:81:53:04:2e:0b:e7:ca:b6:a4:8c:ab:a2:f3:1f:21:3f: 30:81:69:59:e5:38:18:df:14:9f:fb:8b:47:16:eb:0d:85:f5: 29:04:12:17:6a:b1:4e:f1:c9:61:62:35:d0:9a:dd:1f:b1:42: 18:52:15:af:8f:bb:08:3e:c7:77:81:30:71:6b:ff:b1:f7:e7: 22:eb:8c:47:53:4a:ed:97:4f:96:aa:97:a4:58:c0:dc:d0:e1: 3e:84:c3:44:8e:ed:66:c9:1e:d9:a7:46:c0:49:34:a9:6f:b9: f2:71:e2:7e:01:43:99:ef:cc:1b:b0:38:00:74:97:a8:35:29: d0:34:ee:7c:b3:55:05:d2:b8:47:62:3a:33:5f:62:d3:10:f4: 70:78:b8:98:3c:14:bf:25:5d:96:53:b0:67:81:91:04:cb:73: c5:f1:ae:75:fc:2f:b1:cb:75:e8:a4:ed:79:18:5a:5e:74:c3: 6a:ab:8b:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDDC3Prl1nuUbhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwM1oXDTI2MDYxMDE0MzEwM1owLzEtMCsGA1UEAxMk NTNmMmRmYTItZGZiYy00Njg1LWJjNWMtMGJjODNjZGI2OGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzntPLtq8Gkg/1P6X4jCItA0D0clThiyAvbv JLcOn9eSHFrYQ+ExdPunOoyUU/NE/fzBQY70QNK/I/nhmZqe8e5W+KuB+B9DtEpz jVVA03+YcWUWPP9tWCdgGYNpmpzxDEwmdQMdQQbzoupKMzlswiy6+/3E0QSjK4Er HGXeCnesnwusSUzuXHh9HAds0Q6tGuKOk6h7Z4KD0lUDjRYGBDUlXF0qun/TU6md miDaXkFFXh2iLrkoWoddBMFZplL9CSnCYsUXEqNAINYnp08Uw82zgDlJ4SNl2LEa OQrHPI2p2G5fKcncOpDR+5B2kN/eK0iZmBACkqXVzFntLFKycwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHFtOnekfaVsLwz1rsFRkwo6KKNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDVkZmM3OTYtNzBmNy0z YjM4LTlhNTktYWNiNWI3NTZkMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADh0RbYbCxTsJXzjk3OWC2bSRz57U7GabqD4amQekFkFpNahCHzO GiO7zFf/cAQmV/3rFraxmReHMRZTf7TVe2wNlqb2mKBfBQUUgVMELgvnyrakjKui 8x8hPzCBaVnlOBjfFJ/7i0cW6w2F9SkEEhdqsU7xyWFiNdCa3R+xQhhSFa+Puwg+ x3eBMHFr/7H35yLrjEdTSu2XT5aql6RYwNzQ4T6Ew0SO7WbJHtmnRsBJNKlvufJx 4n4BQ5nvzBuwOAB0l6g1KdA07nyzVQXSuEdiOjNfYtMQ9HB4uJg8FL8lXZZTsGeB kQTLc8XxrnX8L7HLdeik7XkYWl50w2qrizY= -----END CERTIFICATE-----Generated at Thu Mar 26 11:07:26 2026 by rpki-client