$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8d9c341-8328-3529-833d-a6509e96c904.roa File: e8d9c341-8328-3529-833d-a6509e96c904.roa (raw, json) Hash identifier: XOpOlwostXdNd4hH1peolFulzBsL5mcdT9vt+bmQb8E= Subject key identifier: A2:35:85:F2:50:52:81:00:6C:74:CE:3D:17:E3:C2:6B:B1:7A:9A:71 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D32F5A49EECFF6FEAEAA8FE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8d9c341-8328-3529-833d-a6509e96c904.roa Signing time: Tue 17 Mar 2026 14:06:56 +0000 ROA not before: Tue 17 Mar 2026 14:06:56 +0000 ROA not after: Mon 15 Jun 2026 14:06:56 +0000 asID: 36631 IP address blocks: 2001:500:856e::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:f5:a4:9e:ec:ff:6f:ea:ea:a8:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 17 14:06:56 2026 GMT Not After : Jun 15 14:06:56 2026 GMT Subject: CN=bfddfad9-60b0-42cf-845f-649e818097dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:ad:cb:d7:0f:2e:54:d9:d6:1f:1d:fd:47: 8b:51:e5:e7:4a:71:f9:45:ee:26:af:9b:94:7b:4e: b8:eb:2d:ca:3d:fa:eb:20:a6:42:7c:35:1e:df:58: 22:88:48:e7:4d:df:25:e0:4f:98:3e:b2:3e:7c:45: 19:fe:82:42:b9:47:b8:f9:a2:56:49:f0:4d:84:20: 7a:84:84:19:03:80:1c:7b:c9:15:cb:ca:b0:16:f2: a7:ee:ef:64:e3:3e:4b:1d:70:75:ea:d5:f0:e9:37: bd:fc:86:81:3b:c0:68:5f:9a:cd:7c:ba:10:02:cc: c3:26:97:54:5c:e8:dc:02:96:16:b6:7a:5e:b3:b0: a6:33:29:8b:34:e6:ed:e6:94:46:d0:20:1c:85:10: 21:27:55:38:8b:bd:12:65:2e:97:b4:39:58:1e:8c: 2b:d8:86:a8:36:4b:86:73:67:07:de:bd:a9:99:27: cd:26:bc:6a:37:a4:e1:32:46:cd:02:ba:83:10:b9: 93:18:5f:f7:29:26:d9:10:5a:7e:5b:8b:e8:5d:7f: ab:fe:02:5c:04:52:da:42:83:53:02:a9:39:98:78: 1d:b5:77:e0:b2:85:55:6a:00:9c:5b:1e:30:80:68: 83:15:23:ee:0e:be:df:34:87:d1:04:ea:ac:f1:b0: 7a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:35:85:F2:50:52:81:00:6C:74:CE:3D:17:E3:C2:6B:B1:7A:9A:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/e8d9c341-8328-3529-833d-a6509e96c904.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:856e:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:24:b7:51:4c:09:48:62:ee:c0:ee:d7:4d:02:2f:d9:8d:59: e4:93:51:65:7d:84:9c:ce:36:48:c0:94:40:26:08:4a:de:0e: cf:5f:42:06:fc:89:0f:e2:4d:a4:9c:eb:97:27:2c:c4:8f:51: 60:4a:c9:6a:92:73:ab:1c:b9:c2:57:ab:07:b6:a0:a0:de:23: 68:ed:8a:3a:b8:87:d9:97:83:40:b7:b0:5a:99:87:b6:00:4d: e1:39:ff:03:e0:4e:12:1e:d9:d3:56:07:22:77:4f:80:72:9f: 99:c7:c9:8b:26:c4:12:cc:c2:b9:69:2b:b6:6c:9e:1a:fc:0d: 6e:3d:a4:c7:12:9b:22:b5:79:5f:67:6e:94:82:57:ca:bf:87: 67:e3:ff:5a:b4:82:ad:3a:6e:ff:6a:60:d2:14:e4:02:70:e8: 19:90:03:62:7b:83:7f:39:96:61:58:0d:18:ee:80:99:a2:57: f3:d1:76:7c:9a:d4:81:7c:46:ee:8b:3e:05:76:92:d5:45:1e: 76:75:26:1f:33:ee:48:a2:b5:0d:eb:70:88:f9:52:34:41:57: 00:a8:d5:07:9e:3c:16:3d:73:08:d3:36:78:ac:c2:a5:e0:72: be:d0:7d:21:ae:d3:3e:76:f6:bd:6e:a9:ad:e5:33:e5:80:42: b9:71:f4:26 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0y9aSe7P9v6uqo/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxNzE0MDY1NloXDTI2MDYxNTE0MDY1NlowLzEtMCsGA1UEAxMk YmZkZGZhZDktNjBiMC00MmNmLTg0NWYtNjQ5ZTgxODA5N2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA+ty9cPLlTZ1h8d/UeLUeXnSnH5Re4mr5uU e0646y3KPfrrIKZCfDUe31giiEjnTd8l4E+YPrI+fEUZ/oJCuUe4+aJWSfBNhCB6 hIQZA4Ace8kVy8qwFvKn7u9k4z5LHXB16tXw6Te9/IaBO8BoX5rNfLoQAszDJpdU XOjcApYWtnpes7CmMymLNObt5pRG0CAchRAhJ1U4i70SZS6XtDlYHowr2IaoNkuG c2cH3r2pmSfNJrxqN6ThMkbNArqDELmTGF/3KSbZEFp+W4voXX+r/gJcBFLaQoNT Aqk5mHgdtXfgsoVVagCcWx4wgGiDFSPuDr7fNIfRBOqs8bB6RwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKI1hfJQUoEAbHTOPRfjwmuxeppxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZThkOWMzNDEtODMyOC0z NTI5LTgzM2QtYTY1MDllOTZjOTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAIVu AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAXJLdRTAlIYu7A7tdNAi/ZjVnkk1FlfYSczjZI wJRAJghK3g7PX0IG/IkP4k2knOuXJyzEj1FgSslqknOrHLnCV6sHtqCg3iNo7Yo6 uIfZl4NAt7BamYe2AE3hOf8D4E4SHtnTVgcid0+Acp+Zx8mLJsQSzMK5aSu2bJ4a /A1uPaTHEpsitXlfZ26UglfKv4dn4/9atIKtOm7/amDSFOQCcOgZkANie4N/OZZh WA0Y7oCZolfz0XZ8mtSBfEbuiz4FdpLVRR52dSYfM+5IorUN63CI+VI0QVcAqNUH njwWPXMI0zZ4rMKl4HK+0H0hrtM+dva9bqmt5TPlgEK5cfQm -----END CERTIFICATE-----Generated at Thu Mar 26 08:39:31 2026 by rpki-client