$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da9901ef-8a00-3a3f-b44b-7a2f19a0e136.roa File: da9901ef-8a00-3a3f-b44b-7a2f19a0e136.roa (raw, json) Hash identifier: sxKxhdHV1oPLXLywymXxDB+76JmU4Er9FAMYOl8gNOc= Subject key identifier: C5:12:5F:36:ED:20:6B:5E:FE:EA:02:0B:6E:2A:7B:B7:5A:11:75:B9 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D250C3B02E87FBECD39010DA0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da9901ef-8a00-3a3f-b44b-7a2f19a0e136.roa Signing time: Thu 12 Mar 2026 14:31:08 +0000 ROA not before: Thu 12 Mar 2026 14:31:08 +0000 ROA not after: Wed 10 Jun 2026 14:31:08 +0000 asID: 36622 IP address blocks: 2001:500:134::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:0c:3b:02:e8:7f:be:cd:39:01:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 12 14:31:08 2026 GMT Not After : Jun 10 14:31:08 2026 GMT Subject: CN=bce4df63-332c-4f69-99b2-40a3bbdd00f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:dc:8d:94:10:eb:2e:04:6c:06:8e:59:05:79: 2b:d4:5d:43:8d:65:d1:39:57:f9:d2:7e:4c:7b:9f: 5a:f1:94:49:3c:1b:d1:0f:f3:7d:5f:14:a4:bb:84: 98:31:36:30:82:39:20:08:ae:26:05:2a:34:cc:ca: 78:68:f0:04:48:6c:5b:34:00:fd:40:ea:65:3a:e4: 91:68:90:13:5f:a3:67:9f:7c:df:29:3c:a2:08:9f: d7:0a:79:ee:36:77:0b:e4:32:9a:85:a5:c4:e6:fe: 36:bc:a9:9a:ee:35:13:c1:ce:ff:d9:dc:68:6f:e6: cb:3d:0a:d1:bb:19:f7:a3:15:61:66:0c:6b:51:b7: 38:73:97:3e:d6:e9:f4:e7:f0:12:88:2f:9e:f3:1c: a8:3e:70:56:a7:7f:e0:d9:94:c8:6e:de:00:d6:1f: fa:dc:15:c8:06:24:39:65:df:d5:3e:c7:74:bf:f3: 8a:db:cf:f6:b0:e5:eb:68:8c:54:a1:2b:f3:ea:4b: fe:93:15:d4:d6:ed:bd:21:5d:d5:44:7f:c1:0b:71: 95:bf:62:5c:be:ef:13:93:10:f9:1f:56:a6:67:40: c1:51:17:98:51:a6:07:6a:74:e9:05:24:ea:c8:75: f5:aa:25:8c:20:b5:78:f9:14:c5:80:79:5f:db:42: ed:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:12:5F:36:ED:20:6B:5E:FE:EA:02:0B:6E:2A:7B:B7:5A:11:75:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da9901ef-8a00-3a3f-b44b-7a2f19a0e136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:134::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:db:58:b8:d0:6a:94:c4:81:22:1d:6f:e4:bb:28:42:22:f8: 85:46:cf:a7:58:9e:a3:d8:27:8a:e7:9b:7e:75:0b:ff:c2:64: e3:28:c7:45:46:75:02:cb:9d:8b:d9:46:f0:6b:05:08:f2:b8: b4:8b:e2:4a:d8:68:63:98:50:99:2c:3d:a6:2f:28:e4:2c:dd: 88:09:34:52:fd:8f:94:65:67:c4:8f:64:a3:1a:ab:53:f5:f2: bf:e7:81:81:39:c5:2d:27:d9:30:f2:0f:33:a8:46:56:21:fb: a5:fe:73:02:7f:f0:c5:f7:0f:01:57:44:24:f2:77:5d:d5:fc: 0b:ca:2a:5c:46:9a:d8:95:6f:43:7c:4d:1e:2a:9f:04:44:30: 52:1b:e7:02:8d:1d:f0:5d:ae:e0:6d:bb:9f:24:30:ee:e0:c6: a2:a7:ee:ee:2f:d9:9f:9f:40:75:2a:78:94:be:fd:79:99:5f: 91:98:c9:58:0a:e6:43:04:dd:4f:e9:f9:26:57:be:00:81:f9: d1:37:df:05:dd:16:a5:2b:9e:cb:bb:a2:f2:be:16:06:fb:e2: 34:25:79:74:db:22:d2:b7:56:e7:10:68:ec:9c:3b:81:c6:fd: 29:2d:e4:0c:6e:01:1c:5b:5c:f2:e3:0b:2f:6c:1c:e2:c3:36: ae:49:3c:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0lDDsC6H++zTkBDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxMjE0MzEwOFoXDTI2MDYxMDE0MzEwOFowLzEtMCsGA1UEAxMk YmNlNGRmNjMtMzMyYy00ZjY5LTk5YjItNDBhM2JiZGQwMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NyNlBDrLgRsBo5ZBXkr1F1DjWXROVf50n5M e59a8ZRJPBvRD/N9XxSku4SYMTYwgjkgCK4mBSo0zMp4aPAESGxbNAD9QOplOuSR aJATX6Nnn3zfKTyiCJ/XCnnuNncL5DKahaXE5v42vKma7jUTwc7/2dxob+bLPQrR uxn3oxVhZgxrUbc4c5c+1un05/ASiC+e8xyoPnBWp3/g2ZTIbt4A1h/63BXIBiQ5 Zd/VPsd0v/OK28/2sOXraIxUoSvz6kv+kxXU1u29IV3VRH/BC3GVv2Jcvu8TkxD5 H1amZ0DBUReYUaYHanTpBSTqyHX1qiWMILV4+RTFgHlf20LtRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMUSXzbtIGte/uoCC24qe7daEXW5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGE5OTAxZWYtOGEwMC0z YTNmLWI0NGItN2EyZjE5YTBlMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADXbWLjQapTEgSIdb+S7KEIi+IVGz6dYnqPYJ4rnm351C//CZOMo x0VGdQLLnYvZRvBrBQjyuLSL4krYaGOYUJksPaYvKOQs3YgJNFL9j5RlZ8SPZKMa q1P18r/ngYE5xS0n2TDyDzOoRlYh+6X+cwJ/8MX3DwFXRCTyd13V/AvKKlxGmtiV b0N8TR4qnwREMFIb5wKNHfBdruBtu58kMO7gxqKn7u4v2Z+fQHUqeJS+/XmZX5GY yVgK5kME3U/p+SZXvgCB+dE33wXdFqUrnsu7ovK+Fgb74jQleXTbItK3VucQaOyc O4HG/Skt5AxuARxbXPLjCy9sHOLDNq5JPGc= -----END CERTIFICATE-----Generated at Thu Mar 26 08:36:33 2026 by rpki-client