$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8d7bda-f571-33b3-b62a-add4f027eca3.roa File: dc8d7bda-f571-33b3-b62a-add4f027eca3.roa (raw, json) Hash identifier: rfdLgDp0kqgksh3MK6+flP8eGdeMPNJVb6NocXaUd18= Subject key identifier: D2:8C:0C:56:45:7D:45:32:A9:04:09:01:E6:47:B4:74:35:97:4A:A2 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D32F5A769F551C1B18C443000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8d7bda-f571-33b3-b62a-add4f027eca3.roa Signing time: Tue 17 Mar 2026 14:06:57 +0000 ROA not before: Tue 17 Mar 2026 14:06:57 +0000 ROA not after: Mon 15 Jun 2026 14:06:57 +0000 asID: 396550 IP address blocks: 2001:500:856e::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:a7:69:f5:51:c1:b1:8c:44:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 17 14:06:57 2026 GMT Not After : Jun 15 14:06:57 2026 GMT Subject: CN=30dc008b-82f6-4dfa-b0d7-340de48b3c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:b3:dc:94:aa:92:59:78:2c:7b:7f:0f:6d: b1:b1:a8:39:0c:9c:bc:fb:a1:6d:d4:80:d0:9a:06: 2d:ce:ec:39:4d:a7:0f:2c:b9:53:48:21:bc:09:fa: af:7b:ca:f2:a8:e8:57:1d:1b:94:57:cb:13:d9:54: 31:fa:bb:f6:5c:99:18:86:65:f4:13:91:2d:87:fe: ae:18:2a:f1:f8:3f:1f:e7:2c:91:f1:35:41:c7:d9: 0c:92:9a:ad:07:3a:c4:24:93:f1:14:00:8f:6e:f2: c8:73:6b:ab:31:cc:61:85:74:18:7a:ed:8f:89:32: d8:e9:3a:a1:45:ff:56:25:81:e0:b9:9e:10:ad:3f: 04:5a:24:62:28:d9:a9:62:1d:9d:0b:fd:7a:62:53: 06:35:db:28:87:41:ab:e0:2c:1b:8c:c7:0a:b9:96: b3:e3:8e:23:ef:79:d1:9f:97:b8:d4:80:ed:b6:41: 08:6e:e4:c6:24:32:aa:d6:51:af:1d:71:f1:19:82: 7b:07:38:7c:6e:84:02:22:81:6e:ca:02:5a:e1:18: 00:04:74:9c:00:04:83:8b:fd:23:a6:c5:79:88:f2: 82:6f:1c:b0:c6:47:77:4c:0f:63:34:07:7b:46:f8: 98:79:93:5e:0a:93:a2:b0:ee:7d:eb:e1:25:da:72: 9d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8C:0C:56:45:7D:45:32:A9:04:09:01:E6:47:B4:74:35:97:4A:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc8d7bda-f571-33b3-b62a-add4f027eca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1b:6f:09:01:98:f9:ee:19:eb:ad:f9:19:2a:6e:36:a9:12: e3:25:cf:24:9f:b9:21:8f:b7:49:c3:50:1e:0b:64:a7:c4:09: 02:7e:68:b8:db:e9:50:b5:cd:d5:6c:b8:60:01:f4:f6:64:8c: c3:c4:45:27:44:ec:62:89:12:00:f8:f8:c4:94:f9:dd:d5:8a: a7:84:31:0a:06:3f:71:66:7c:47:ca:34:25:37:d6:b7:b0:84: 27:d2:d9:e1:a0:c9:77:1d:8e:b4:6e:31:a8:f8:f8:90:88:73: aa:0e:e5:57:86:7a:10:cb:2e:1b:cd:c8:ab:b8:04:8c:c7:2b: 28:4f:8c:3c:95:3c:64:70:9e:a5:f7:85:95:87:e4:43:bc:6b: 2f:a4:24:23:d8:56:29:57:6e:bd:04:b5:9a:6a:d0:a9:71:0d: 21:a8:da:14:5a:11:0c:84:67:c1:cd:9d:6c:f5:eb:08:3a:62: 70:eb:a9:81:21:24:8a:f6:10:94:16:8c:59:4a:36:a6:ae:4b: b7:a9:89:19:e0:3e:d9:91:5e:dc:71:d0:33:35:a0:f9:cc:4d: bf:9a:2d:12:9a:02:ab:18:77:5a:53:bb:da:f8:1a:85:c7:86: 12:61:e7:6f:bb:2e:ec:c3:ec:23:6a:42:6b:f3:eb:20:72:3a: e3:92:f0:dc -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0y9adp9VHBsYxEMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNzE0MDY1N1oXDTI2MDYxNTE0MDY1N1owLzEtMCsGA1UEAxMk MzBkYzAwOGItODJmNi00ZGZhLWIwZDctMzQwZGU0OGIzYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/yz3JSqkll4LHt/D22xsag5DJy8+6Ft1IDQ mgYtzuw5TacPLLlTSCG8Cfqve8ryqOhXHRuUV8sT2VQx+rv2XJkYhmX0E5Eth/6u GCrx+D8f5yyR8TVBx9kMkpqtBzrEJJPxFACPbvLIc2urMcxhhXQYeu2PiTLY6Tqh Rf9WJYHguZ4QrT8EWiRiKNmpYh2dC/16YlMGNdsoh0Gr4CwbjMcKuZaz444j73nR n5e41IDttkEIbuTGJDKq1lGvHXHxGYJ7Bzh8boQCIoFuygJa4RgABHScAASDi/0j psV5iPKCbxywxkd3TA9jNAd7RviYeZNeCpOisO596+El2nKdnwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFNKMDFZFfUUyqQQJAeZHtHQ1l0qiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGM4ZDdiZGEtZjU3MS0z M2IzLWI2MmEtYWRkNGYwMjdlY2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAuG28JAZj57hnrrfkZKm42qRLjJc8kn7khj7dJ w1AeC2SnxAkCfmi42+lQtc3VbLhgAfT2ZIzDxEUnROxiiRIA+PjElPnd1YqnhDEK Bj9xZnxHyjQlN9a3sIQn0tnhoMl3HY60bjGo+PiQiHOqDuVXhnoQyy4bzciruASM xysoT4w8lTxkcJ6l94WVh+RDvGsvpCQj2FYpV269BLWaatCpcQ0hqNoUWhEMhGfB zZ1s9esIOmJw66mBISSK9hCUFoxZSjamrku3qYkZ4D7ZkV7ccdAzNaD5zE2/mi0S mgKrGHdaU7va+BqFx4YSYedvuy7sw+wjakJr8+sgcjrjkvDc -----END CERTIFICATE-----Generated at Thu Mar 26 20:08:45 2026 by rpki-client