$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de7b2e78-9b51-3143-90a9-7ce80ef88e40.roa File: de7b2e78-9b51-3143-90a9-7ce80ef88e40.roa (raw, json) Hash identifier: hcW5dYgWglS0Ka2cpB9pO+0txO5R4RRPKHkF36oOetc= Subject key identifier: A6:63:D7:BB:99:00:56:7F:FA:7F:A6:51:EE:1A:AD:95:C7:DF:36:0D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D32F5A5B84DBCA3D9C6391F00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de7b2e78-9b51-3143-90a9-7ce80ef88e40.roa Signing time: Tue 17 Mar 2026 14:06:56 +0000 ROA not before: Tue 17 Mar 2026 14:06:56 +0000 ROA not after: Mon 15 Jun 2026 14:06:56 +0000 asID: 396827 IP address blocks: 2001:500:856e::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:a5:b8:4d:bc:a3:d9:c6:39:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 17 14:06:56 2026 GMT Not After : Jun 15 14:06:56 2026 GMT Subject: CN=c343f67f-aa53-4b27-af0e-0985744e0443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c3:63:86:32:61:8e:51:ae:2c:c5:fb:1f:e0: 1f:79:0c:12:19:b3:50:af:0a:5d:f8:ff:cf:ef:e3: 6b:19:3e:b7:04:0b:69:4e:ea:6a:83:39:ac:eb:1e: 0a:c5:86:f2:f2:d6:80:41:f7:4a:5e:57:99:1e:aa: 29:9e:71:2e:a5:fa:7c:3c:17:a4:8c:09:00:78:be: ab:8a:7d:cb:d8:10:9b:b9:61:3f:b5:2d:0d:15:2c: c4:8d:f3:99:eb:71:b2:51:8d:19:cf:0d:ae:4d:01: 1d:07:c7:ff:98:c8:b3:d3:5b:83:4d:5d:e7:89:4c: e4:fc:82:6b:2a:5d:0b:73:cf:cb:03:4b:9c:1c:3d: 80:89:41:7d:fe:9d:f3:38:ad:ec:a8:b3:83:67:8f: 74:e8:76:65:b4:91:32:3a:c0:7e:61:6e:f4:d8:1c: ae:03:f3:e6:2d:0b:0b:69:37:51:70:e3:2a:bd:74: c1:33:10:0b:2c:5b:e6:47:ba:d4:b9:7c:20:49:36: 2f:90:be:eb:50:f6:bb:70:e3:a7:87:ec:6b:88:a5: 85:ca:02:3e:12:d8:e0:58:68:e8:b9:85:13:59:1d: f0:b0:3a:8d:47:48:3f:a8:41:72:4f:5c:1d:33:be: 9c:e9:80:c1:78:85:a5:04:18:d6:58:05:26:20:2a: 50:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:63:D7:BB:99:00:56:7F:FA:7F:A6:51:EE:1A:AD:95:C7:DF:36:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/de7b2e78-9b51-3143-90a9-7ce80ef88e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:f5:3c:09:ad:a9:f9:72:9e:c1:d0:40:c2:86:a9:89:71:99: 6f:da:d6:19:cc:a8:14:78:e6:03:aa:46:4a:33:45:18:1c:74: 36:a9:e9:6e:94:49:92:4b:0e:1d:70:c8:5e:e5:55:d0:08:0a: 36:bd:40:c3:fc:c0:39:39:00:65:7d:20:68:4b:da:fa:a2:a1: f5:fd:3f:cc:3e:04:8a:cc:e7:cb:b2:06:28:f0:20:1f:6c:61: 25:95:41:cb:55:3d:6d:41:78:65:17:d7:1f:fe:8e:4a:7a:2e: e5:3b:fd:8b:1b:dd:0a:33:99:11:e8:e1:86:64:cf:0b:03:22: b5:68:60:ac:a9:9b:23:df:8c:6c:6d:e1:86:94:78:f0:c0:cc: c5:5e:55:3a:81:eb:57:35:22:ad:65:d2:75:24:6f:6c:94:b0: 38:9f:70:00:e8:9e:ed:c2:b5:0a:71:a4:a4:3c:a0:30:aa:e0: c5:6a:67:b6:17:bb:8e:45:29:89:93:0c:58:d8:6c:36:63:a1: bf:2d:32:ed:72:69:9b:7a:b7:6f:72:a2:79:58:62:72:81:1c: 68:f8:37:27:9e:4b:d8:ab:6c:f8:46:a1:51:8e:7e:82:d6:a8: dd:ba:cf:fe:2a:ce:45:bf:38:68:73:9b:58:b5:c6:52:1f:c5: d5:44:1d:24 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0y9aW4Tbyj2cY5HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNzE0MDY1NloXDTI2MDYxNTE0MDY1NlowLzEtMCsGA1UEAxMk YzM0M2Y2N2YtYWE1My00YjI3LWFmMGUtMDk4NTc0NGUwNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sNjhjJhjlGuLMX7H+AfeQwSGbNQrwpd+P/P 7+NrGT63BAtpTupqgzms6x4KxYby8taAQfdKXleZHqopnnEupfp8PBekjAkAeL6r in3L2BCbuWE/tS0NFSzEjfOZ63GyUY0Zzw2uTQEdB8f/mMiz01uDTV3niUzk/IJr Kl0Lc8/LA0ucHD2AiUF9/p3zOK3sqLODZ4906HZltJEyOsB+YW702ByuA/PmLQsL aTdRcOMqvXTBMxALLFvmR7rUuXwgSTYvkL7rUPa7cOOnh+xriKWFygI+EtjgWGjo uYUTWR3wsDqNR0g/qEFyT1wdM76c6YDBeIWlBBjWWAUmICpQTQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKZj17uZAFZ/+n+mUe4arZXH3zYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGU3YjJlNzgtOWI1MS0z MTQzLTkwYTktN2NlODBlZjg4ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC49TwJran5cp7B0EDChqmJcZlv2tYZzKgUeOYD qkZKM0UYHHQ2qelulEmSSw4dcMhe5VXQCAo2vUDD/MA5OQBlfSBoS9r6oqH1/T/M PgSKzOfLsgYo8CAfbGEllUHLVT1tQXhlF9cf/o5Kei7lO/2LG90KM5kR6OGGZM8L AyK1aGCsqZsj34xsbeGGlHjwwMzFXlU6getXNSKtZdJ1JG9slLA4n3AA6J7twrUK caSkPKAwquDFame2F7uORSmJkwxY2Gw2Y6G/LTLtcmmberdvcqJ5WGJygRxo+Dcn nkvYq2z4RqFRjn6C1qjdus/+Ks5Fvzhoc5tYtcZSH8XVRB0k -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:12 2026 by rpki-client