$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df508011-eb15-31af-b641-443ac29b820c.roa File: df508011-eb15-31af-b641-443ac29b820c.roa (raw, json) Hash identifier: Z4hoJ8JPKTexuzVMINcrW3lD71zZTcS3EAIoWRLNR5w= Subject key identifier: D4:10:17:1C:1A:69:9D:8A:50:97:58:3F:3C:44:0F:84:B9:4B:92:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D422F8EC28EE2D7485E5FCFC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df508011-eb15-31af-b641-443ac29b820c.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 396576 IP address blocks: 2001:502:cbe4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8e:c2:8e:e2:d7:48:5e:5f:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=33378685-51ca-4b2b-87bb-03549238b6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:00:22:f6:d7:c6:41:c2:f7:b0:d6:52:1d:cc: bf:7d:49:04:fb:83:52:66:8d:20:ed:a3:1c:6d:e9: ed:ec:15:7b:6a:c2:a3:28:e2:36:34:28:90:0d:b6: 42:8f:65:ee:82:31:71:27:cd:30:45:1a:f4:e8:98: f9:d5:0a:ba:1d:17:21:bc:1a:b4:f0:33:d4:ed:92: cc:17:4e:56:01:03:e2:d2:f0:ac:b0:9b:7d:3a:30: 47:64:37:43:a1:2c:c7:a7:7f:57:26:42:4a:9a:68: e3:44:27:99:3b:22:9c:c8:bb:77:c7:1f:df:96:2f: 95:4a:75:cb:56:03:4c:79:8d:ff:42:f3:d2:11:dc: 50:d3:be:58:24:de:98:e1:0c:12:c0:e9:a3:c3:d2: 78:0b:93:15:0f:98:1f:e4:15:47:39:05:55:3d:65: b7:e9:5b:c3:46:ea:2d:2c:86:b4:97:ea:d9:86:5b: bc:0a:50:92:10:80:f4:ab:f3:d7:00:52:62:9e:42: 07:c7:fd:13:17:1a:7a:65:9f:5a:6e:9c:ca:fd:2c: ba:3d:af:ce:be:71:2a:26:dc:fd:e2:56:8d:55:fe: 8a:fa:a3:9a:a0:f5:d1:fb:a0:ce:46:48:21:f3:29: 8e:e0:98:84:c3:d6:c4:bf:a9:c7:10:65:a1:d9:38: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:10:17:1C:1A:69:9D:8A:50:97:58:3F:3C:44:0F:84:B9:4B:92:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df508011-eb15-31af-b641-443ac29b820c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:cbe4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:8d:b8:6a:46:82:af:7b:3f:0f:ce:48:8a:de:f5:e0:c4:7d: ba:cb:b6:ce:a2:b8:24:d9:56:7d:15:0b:2f:44:df:9b:79:5b: d9:e1:63:06:17:a7:73:80:c5:93:99:c1:7e:de:a8:80:9e:77: 55:ab:0c:09:71:d7:05:25:8f:7c:9c:cd:a8:bb:0d:7a:41:be: 79:22:00:90:5c:b5:59:46:b9:d4:d0:bb:1f:27:04:a6:9a:16: 69:d9:fe:f9:37:5d:be:05:f3:ab:79:f7:9c:5e:f5:02:73:e1: 20:80:2d:d6:54:87:27:95:71:ae:99:b0:b0:81:74:9a:2a:f9: bf:9c:ae:60:0a:b0:81:06:7d:03:4e:a7:f5:64:8e:f1:03:9b: 2d:6b:97:cf:bc:71:53:0f:63:8c:95:9f:9a:ff:d4:4a:0c:25: 2c:bf:20:cc:ee:fd:2e:e0:64:39:2b:b9:0b:b0:42:ed:97:be: d3:f4:8b:b4:e2:14:37:e3:fe:5b:30:7e:ec:f2:55:70:0e:ba: b1:ed:c1:26:b4:b8:ed:f8:b9:fa:0e:6d:a4:e5:48:b3:ad:34: e4:fd:be:c4:c2:96:cd:b6:dc:b1:d4:b4:8a:e6:be:30:21:38: d2:30:c9:d4:b6:08:42:a4:a5:f7:68:23:c5:d1:d0:0e:24:18: 46:d1:4f:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1CL47CjuLXSF5fz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk MzMzNzg2ODUtNTFjYS00YjJiLTg3YmItMDM1NDkyMzhiNmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQAi9tfGQcL3sNZSHcy/fUkE+4NSZo0g7aMc bent7BV7asKjKOI2NCiQDbZCj2XugjFxJ80wRRr06Jj51Qq6HRchvBq08DPU7ZLM F05WAQPi0vCssJt9OjBHZDdDoSzHp39XJkJKmmjjRCeZOyKcyLt3xx/fli+VSnXL VgNMeY3/QvPSEdxQ075YJN6Y4QwSwOmjw9J4C5MVD5gf5BVHOQVVPWW36VvDRuot LIa0l+rZhlu8ClCSEID0q/PXAFJinkIHx/0TFxp6ZZ9abpzK/Sy6Pa/OvnEqJtz9 4laNVf6K+qOaoPXR+6DORkgh8ymO4JiEw9bEv6nHEGWh2TjZoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNQQFxwaaZ2KUJdYPzxED4S5S5IrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGY1MDgwMTEtZWIxNS0z MWFmLWI2NDEtNDQzYWMyOWI4MjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAsvk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJCNuGpGgq97Pw/OSIre9eDEfbrLts6iuCTZVn0VCy9E35t5W9nh YwYXp3OAxZOZwX7eqICed1WrDAlx1wUlj3yczai7DXpBvnkiAJBctVlGudTQux8n BKaaFmnZ/vk3Xb4F86t595xe9QJz4SCALdZUhyeVca6ZsLCBdJoq+b+crmAKsIEG fQNOp/VkjvEDmy1rl8+8cVMPY4yVn5r/1EoMJSy/IMzu/S7gZDkruQuwQu2XvtP0 i7TiFDfj/lswfuzyVXAOurHtwSa0uO34ufoObaTlSLOtNOT9vsTCls223LHUtIrm vjAhONIwydS2CEKkpfdoI8XR0A4kGEbRTzA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:32:08 2026 by rpki-client