$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8d289d-b9f6-3abb-b768-6e693f38acf4.roa File: dc8d289d-b9f6-3abb-b768-6e693f38acf4.roa (raw, json) Hash identifier: 2c81B/KoHx2ExjU1WYp4L5zD0l7JLeHsWXgLxxhL2Sk= Subject key identifier: 60:64:5F:AA:7E:FB:4C:C5:F3:94:BC:91:4F:AE:0C:A2:41:03:33:8B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D422F827BF9291EF53C33B1C4 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8d289d-b9f6-3abb-b768-6e693f38acf4.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 211369 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:82:7b:f9:29:1e:f5:3c:33:b1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=1e21e4c8-f2e3-43dd-8ae9-ebe4d3121010 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:01:b4:98:ab:71:ff:4a:12:66:29:cd:c2:30: 2e:02:d8:fb:c7:fb:cb:09:a3:55:e5:eb:12:e7:29: e4:e1:e0:f9:db:a7:f6:61:c5:fd:ac:72:38:a3:4e: e0:bd:e5:fc:c6:d3:67:0f:8a:9a:5e:2b:fe:ec:6e: 5f:b2:7f:4b:d5:5f:49:b9:46:11:d0:67:b5:e3:1c: 40:72:d5:67:50:3c:8c:e0:75:c8:17:13:41:45:63: 04:21:79:d8:22:ff:2e:36:a6:02:e6:34:ca:23:58: 8c:0d:e1:d1:fe:1b:52:ea:ad:a3:e7:d6:ed:83:4e: 8f:dd:a0:4a:f2:d6:e8:8d:99:b6:b3:4f:11:f5:0f: 05:ac:06:35:52:4e:03:33:79:90:30:a0:e1:29:61: 89:78:e1:88:ba:2d:a1:76:cd:0e:d5:3c:e2:60:e3: 0b:ef:5f:1a:ed:91:99:02:6e:37:67:0c:26:8f:13: 69:30:7e:ad:42:6c:63:3c:f2:ce:4b:e8:1b:e3:5a: dd:3c:02:40:b2:44:7f:f2:0f:52:bd:3d:7f:a8:5e: be:d8:42:51:b8:a3:ca:03:06:1a:93:91:a9:56:c2: a3:f9:3a:d3:1d:00:26:65:fc:31:fd:8d:7e:cf:78: 53:41:ac:66:58:33:25:b1:e7:dd:00:ac:00:8a:99: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:64:5F:AA:7E:FB:4C:C5:F3:94:BC:91:4F:AE:0C:A2:41:03:33:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8d289d-b9f6-3abb-b768-6e693f38acf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6d:f9:a6:11:b1:5b:59:fd:05:1b:aa:25:64:8d:5b:a8:e8: 46:a2:60:30:54:9e:a5:7c:20:e8:4b:79:0b:31:42:96:d7:62: da:33:d5:00:1d:7e:84:45:71:94:bf:64:41:f8:61:3d:4a:25: 04:40:bf:3a:7a:66:34:04:f3:2f:ca:a4:ee:dd:73:e5:b9:3d: 6e:d0:45:bc:8a:a4:72:89:b5:3f:7b:79:79:d3:ae:ca:88:63: c2:17:2e:4d:9f:39:5e:64:d4:51:4d:7b:e8:1d:c5:5a:57:65: 1d:e7:32:11:c2:85:e2:47:c2:71:14:fe:47:21:8e:57:bc:ee: 6f:00:6e:45:56:97:9f:6f:08:48:49:64:04:90:b3:67:96:59: b9:df:ad:53:0e:0f:69:fd:23:16:1f:95:09:69:7a:86:87:e9: 96:66:5e:90:2d:51:3e:9f:83:cf:67:7c:69:5a:a2:c9:41:b6: 9b:2b:d5:91:68:4e:f1:d9:8f:3d:b1:08:cd:ad:e2:9d:94:ee: 24:81:5a:54:ca:9c:fd:c8:90:d8:1a:75:76:c1:28:c4:f1:18: 18:8a:67:0f:8e:22:52:d5:29:f1:47:f5:01:f0:c7:4c:68:bf: 3d:4d:c6:31:18:61:ce:df:26:8e:70:7c:5d:1f:0f:db:ea:08: 92:26:c4:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL4J7+Ske9TwzscQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk MWUyMWU0YzgtZjJlMy00M2RkLThhZTktZWJlNGQzMTIxMDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgG0mKtx/0oSZinNwjAuAtj7x/vLCaNV5esS 5ynk4eD526f2YcX9rHI4o07gveX8xtNnD4qaXiv+7G5fsn9L1V9JuUYR0Ge14xxA ctVnUDyM4HXIFxNBRWMEIXnYIv8uNqYC5jTKI1iMDeHR/htS6q2j59btg06P3aBK 8tbojZm2s08R9Q8FrAY1Uk4DM3mQMKDhKWGJeOGIui2hds0O1TziYOML718a7ZGZ Am43ZwwmjxNpMH6tQmxjPPLOS+gb41rdPAJAskR/8g9SvT1/qF6+2EJRuKPKAwYa k5GpVsKj+TrTHQAmZfwx/Y1+z3hTQaxmWDMlsefdAKwAipk60wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGBkX6p++0zF85S8kU+uDKJBAzOLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGM4ZDI4OWQtYjlmNi0z YWJiLWI3NjgtNmU2OTNmMzhhY2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIVt+aYRsVtZ/QUbqiVkjVuo6EaiYDBUnqV8IOhLeQsxQpbXYtoz 1QAdfoRFcZS/ZEH4YT1KJQRAvzp6ZjQE8y/KpO7dc+W5PW7QRbyKpHKJtT97eXnT rsqIY8IXLk2fOV5k1FFNe+gdxVpXZR3nMhHCheJHwnEU/kchjle87m8AbkVWl59v CEhJZASQs2eWWbnfrVMOD2n9IxYflQlpeoaH6ZZmXpAtUT6fg89nfGlaoslBtpsr 1ZFoTvHZjz2xCM2t4p2U7iSBWlTKnP3IkNgadXbBKMTxGBiKZw+OIlLVKfFH9QHw x0xovz1NxjEYYc7fJo5wfF0fD9vqCJImxIw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:31:28 2026 by rpki-client