$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95fed36-8502-3fa9-b78d-7b5b7c9ccbd2.roa File: d95fed36-8502-3fa9-b78d-7b5b7c9ccbd2.roa (raw, json) Hash identifier: BAC/Tcjpz94+55wQE5ngGvEzuYuE2ulHKoN73AzQ/Zk= Subject key identifier: 95:44:41:DB:A1:BA:9A:D7:2F:30:05:E0:92:90:FC:FE:41:3F:C4:29 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D42CCDD5E10CD3ECC93C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95fed36-8502-3fa9-b78d-7b5b7c9ccbd2.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396589 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:42:cc:dd:5e:10:cd:3e:cc:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=1f26c0e8-9e6e-4a7c-b248-0e61be8a09c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f5:56:f6:ad:88:e9:9c:a8:25:bb:1c:88:f6: 35:3d:7e:16:44:7a:3d:f6:cb:25:a8:b6:f0:8a:9c: bb:23:66:b8:0e:50:70:96:3d:94:45:97:d0:5f:3e: 04:a2:b1:0b:8b:13:df:34:8c:d5:20:ff:b9:56:16: 21:8b:8e:f0:6e:37:27:a7:03:94:a8:23:5d:60:95: 4e:23:e1:77:f6:0e:a1:c9:c7:97:79:d9:1d:cd:77: cf:90:11:b6:5c:05:40:b6:ba:84:d0:78:c6:d7:c1: 96:94:ff:2b:8b:69:d1:97:17:fe:63:48:7c:dd:95: 37:b9:a2:07:2a:f8:0f:e6:32:77:92:62:67:5a:90: c0:7c:4e:e9:d7:46:ad:d7:e1:a3:e6:02:e4:08:6e: 27:09:c4:ce:15:c3:83:e4:1c:41:58:e3:7a:64:81: 82:2a:4a:27:46:4a:63:d1:c5:13:1e:21:32:ea:c2: b5:a0:52:9d:04:11:0a:ce:8f:ed:30:24:72:b3:ba: 51:31:92:e2:16:56:c8:31:5e:26:a7:e7:91:d7:a7: 43:48:01:f4:8b:d9:46:b2:93:c1:0c:58:bb:ea:22: 5b:81:55:61:9f:31:bc:f4:32:82:0b:f4:61:05:09: 68:1e:6e:1b:c4:67:c8:0c:40:aa:13:33:75:a8:52: 07:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:44:41:DB:A1:BA:9A:D7:2F:30:05:E0:92:90:FC:FE:41:3F:C4:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d95fed36-8502-3fa9-b78d-7b5b7c9ccbd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:81:3d:35:b9:b5:fc:56:98:86:95:90:78:39:72:21:a6:98: 34:47:08:45:cb:64:ad:c6:fe:0a:e7:51:f8:b9:55:72:51:df: ff:28:ec:26:b4:f4:09:7e:69:9b:f4:2b:e1:79:43:b3:88:31: 2e:cb:7b:f4:03:94:6a:6f:49:5a:c8:2c:df:e2:6a:0c:7b:74: d5:74:87:9d:45:39:43:a3:be:da:25:91:cb:29:e8:69:ed:58: 6f:60:b6:09:0e:2c:98:ab:f5:49:0f:3a:cc:a9:ba:2a:4a:b7: 73:77:ac:d8:13:d3:38:58:dc:27:6f:7e:4d:51:a6:af:41:10: 72:d0:48:50:69:79:fb:e5:46:f7:c9:d6:46:e6:d6:cc:ef:90: 5f:d1:bd:57:73:b9:7a:f8:a5:7d:dc:76:b6:26:a8:fe:d7:68: 66:07:25:86:71:df:0a:62:29:fa:d5:14:d6:f1:b1:2d:81:20: 48:01:a3:5c:14:a1:84:9c:7d:b8:36:0e:64:35:a3:2f:78:a3: 29:14:d6:3b:ea:80:5f:12:ae:19:f8:20:ee:b6:91:ab:33:6e: e3:ba:66:e2:64:6a:e6:74:83:b2:2c:bf:9b:f8:b7:43:68:df: 9c:59:23:3e:05:fe:cf:71:1c:d8:a0:0f:05:11:04:22:08:93: c0:92:5d:c1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPULM3V4QzT7Mk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk MWYyNmMwZTgtOWU2ZS00YTdjLWIyNDgtMGU2MWJlOGEwOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/VW9q2I6ZyoJbsciPY1PX4WRHo99sslqLbw ipy7I2a4DlBwlj2URZfQXz4EorELixPfNIzVIP+5VhYhi47wbjcnpwOUqCNdYJVO I+F39g6hyceXedkdzXfPkBG2XAVAtrqE0HjG18GWlP8ri2nRlxf+Y0h83ZU3uaIH KvgP5jJ3kmJnWpDAfE7p10at1+Gj5gLkCG4nCcTOFcOD5BxBWON6ZIGCKkonRkpj 0cUTHiEy6sK1oFKdBBEKzo/tMCRys7pRMZLiFlbIMV4mp+eR16dDSAH0i9lGspPB DFi76iJbgVVhnzG89DKCC/RhBQloHm4bxGfIDECqEzN1qFIHKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJVEQduhuprXLzAF4JKQ/P5BP8QpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDk1ZmVkMzYtODUwMi0z ZmE5LWI3OGQtN2I1YjdjOWNjYmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE+BPTW5tfxWmIaVkHg5ciGmmDRHCEXLZK3G/grnUfi5VXJR3/8o 7Ca09Al+aZv0K+F5Q7OIMS7Le/QDlGpvSVrILN/iagx7dNV0h51FOUOjvtolkcsp 6GntWG9gtgkOLJir9UkPOsypuipKt3N3rNgT0zhY3Cdvfk1Rpq9BEHLQSFBpefvl RvfJ1kbm1szvkF/RvVdzuXr4pX3cdrYmqP7XaGYHJYZx3wpiKfrVFNbxsS2BIEgB o1wUoYScfbg2DmQ1oy94oykU1jvqgF8Srhn4IO62kaszbuO6ZuJkauZ0g7Isv5v4 t0No35xZIz4F/s9xHNigDwURBCIIk8CSXcE= -----END CERTIFICATE-----Generated at Thu Mar 26 10:38:00 2026 by rpki-client