$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc99feb8-fbde-3cd4-a596-79941e5ab67a.roa File: dc99feb8-fbde-3cd4-a596-79941e5ab67a.roa (raw, json) Hash identifier: g8KyuZb3c6dacB5C7VumF5glAo1vfw8I6vvKKQX+7Zw= Subject key identifier: C9:6F:CD:7A:C2:00:A6:87:0A:CF:CF:E9:C9:DC:F7:7A:7F:DA:C2:41 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D0BDD192F5BD7397266161F80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc99feb8-fbde-3cd4-a596-79941e5ab67a.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 396609 IP address blocks: 2001:500:135::53/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dd:19:2f:5b:d7:39:72:66:16:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=6042db8b-1a5f-4157-b698-596bc8fbb3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:39:d9:d7:98:8a:a9:f6:56:55:6d:cc:0a:8b: cd:30:d8:63:78:82:18:3c:73:96:ce:9e:a1:cb:63: ba:91:ce:51:d4:8c:85:c7:30:21:61:30:db:ab:dc: 7a:5f:8c:75:f0:dc:fe:7d:ff:42:8d:49:f2:63:c4: 25:8c:0a:50:d7:33:72:9a:c0:ba:db:99:12:88:f3: f5:e1:f9:d5:10:ba:2a:08:00:29:29:b0:d4:86:de: 2f:c0:04:39:e5:37:fa:2b:36:19:47:88:32:21:76: 74:a5:26:72:1f:6f:34:d7:75:3d:79:10:5a:3f:3a: b7:73:2b:f1:b0:10:53:e8:c7:b7:61:dd:16:e5:2e: 12:f8:08:9a:34:c5:cf:cf:b6:bc:9f:16:c7:03:da: 9b:39:48:ed:02:ae:ed:90:26:f1:20:98:68:41:7b: 3b:ab:52:8d:16:33:2c:f3:eb:a6:cb:41:a0:e8:5d: f0:72:80:c6:73:39:71:a3:73:26:bb:6b:aa:16:81: 52:06:04:15:a5:55:1e:a8:6d:a7:ba:56:a3:99:b6: b1:b4:18:24:27:be:20:9e:34:e4:3b:ca:03:9e:1a: 71:35:54:83:95:99:f5:8b:fa:d1:8a:18:2e:d7:fd: 4b:21:09:88:47:07:73:5e:91:88:ff:20:d2:39:4a: d9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6F:CD:7A:C2:00:A6:87:0A:CF:CF:E9:C9:DC:F7:7A:7F:DA:C2:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/dc99feb8-fbde-3cd4-a596-79941e5ab67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:135:0:0:0:0:53/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:42:94:90:1c:9b:26:a9:da:51:87:ec:92:42:20:4f:1b:a1: 89:a3:6a:58:13:3a:83:eb:e5:04:99:a6:6e:67:5d:63:9b:18: 76:ac:90:6e:32:77:89:39:40:a2:09:0c:f6:b6:2c:31:e4:ad: 82:6e:7f:ef:d2:bb:6e:f7:b8:a8:eb:f7:54:a6:02:70:5a:85: 8b:9f:37:d1:20:d5:98:50:aa:c1:9c:d6:4c:26:20:06:19:27: 78:99:a2:13:d7:e9:81:1c:4b:03:0c:ef:e0:63:10:a6:c7:d8: 76:8d:0b:cc:6a:e5:ac:26:7c:0c:a4:ba:93:0a:cd:af:bf:61: ff:68:db:21:a9:c8:94:c1:a0:39:35:a8:c2:8b:12:82:18:14: af:1d:c3:3d:fa:57:78:0a:e0:34:01:0f:ef:e2:06:9c:53:ef: 91:96:0b:d7:46:00:72:0d:8d:51:93:2f:aa:46:62:ed:0a:82: e7:1a:e8:bc:84:35:87:32:99:05:01:9a:e9:71:ae:91:0e:ed: 02:19:94:2e:38:b8:09:d6:2a:84:b6:c1:da:88:67:5c:e8:e2: 9f:6b:6c:d3:f3:b1:13:f3:6d:29:ee:d7:76:a5:0a:7e:0b:8a: 68:cd:35:78:4b:49:17:6e:fc:75:76:75:4b:6c:ef:47:27:71: f5:ad:34:50 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0L3RkvW9c5cmYWH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk NjA0MmRiOGItMWE1Zi00MTU3LWI2OTgtNTk2YmM4ZmJiM2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTnZ15iKqfZWVW3MCovNMNhjeIIYPHOWzp6h y2O6kc5R1IyFxzAhYTDbq9x6X4x18Nz+ff9CjUnyY8QljApQ1zNymsC625kSiPP1 4fnVELoqCAApKbDUht4vwAQ55Tf6KzYZR4gyIXZ0pSZyH28013U9eRBaPzq3cyvx sBBT6Me3Yd0W5S4S+AiaNMXPz7a8nxbHA9qbOUjtAq7tkCbxIJhoQXs7q1KNFjMs 8+umy0Gg6F3wcoDGczlxo3Mmu2uqFoFSBgQVpVUeqG2nulajmbaxtBgkJ74gnjTk O8oDnhpxNVSDlZn1i/rRihgu1/1LIQmIRwdzXpGI/yDSOUrZHwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFMlvzXrCAKaHCs/P6cnc93p/2sJBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGM5OWZlYjgtZmJkZS0z Y2Q0LWE1OTYtNzk5NDFlNWFiNjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAAE1 AAAAAAAAAAAAUzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQB3QpSQHJsmqdpRh+ySQiBPG6GJo2pYEzqD6+UE maZuZ11jmxh2rJBuMneJOUCiCQz2tiwx5K2Cbn/v0rtu97io6/dUpgJwWoWLnzfR INWYUKrBnNZMJiAGGSd4maIT1+mBHEsDDO/gYxCmx9h2jQvMauWsJnwMpLqTCs2v v2H/aNshqciUwaA5NajCixKCGBSvHcM9+ld4CuA0AQ/v4gacU++RlgvXRgByDY1R ky+qRmLtCoLnGui8hDWHMpkFAZrpca6RDu0CGZQuOLgJ1iqEtsHaiGdc6OKfa2zT 87ET820p7td2pQp+C4pozTV4S0kXbvx1dnVLbO9HJ3H1rTRQ -----END CERTIFICATE-----Generated at Thu Mar 26 08:57:46 2026 by rpki-client