$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa File: ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa (raw, json) Hash identifier: qQ0CS2tKizPis+dspMCwDKdO0V0e+3XxxSLGHP8bar4= Subject key identifier: C0:5E:A1:68:10:AC:B4:C4:82:1E:34:A3:37:9B:20:78:15:87:03:BE Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D386A2D7916A7C6402A3EC780 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 396606 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:2d:79:16:a7:c6:40:2a:3e:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=8a48ca7c-c7fe-444e-8d85-31632eafc1de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:75:2d:09:45:81:3a:a9:14:f9:d6:3c:6f:32: c5:9c:1a:af:9e:22:23:bb:74:8c:07:f5:de:a9:f7: f6:85:f8:5e:b8:36:ae:ec:c4:3d:cf:94:38:2c:58: a5:0f:d8:16:3b:3e:cf:43:33:d1:ed:c1:3d:81:61: d7:95:3a:c5:37:5e:b4:ae:9f:76:54:3b:4e:f1:3c: e1:61:f8:c6:4b:0b:68:d7:55:d8:c7:48:8b:54:d0: 26:19:04:5d:eb:88:5d:9c:bc:0a:0e:d0:6f:72:53: 84:f1:d0:6d:4b:b9:11:71:4a:02:e6:c6:39:45:d9: 64:66:fc:a7:f6:09:aa:7c:4c:7e:a6:28:f8:fe:4a: e9:32:12:f5:aa:75:a4:eb:67:93:89:9b:2e:fd:f7: 8b:16:11:d4:99:a2:89:07:69:76:2d:e3:1c:2b:5f: 28:69:c3:5f:ee:15:ba:d5:e9:0d:b7:4d:31:f5:c8: 87:75:6c:b5:b4:22:db:4f:a3:fc:c6:35:16:91:80: 46:35:09:e3:d1:36:9a:ae:9b:92:5a:8d:e7:ab:74: f3:db:51:52:3f:9b:85:c7:64:4a:e0:a6:5d:9e:e7: cb:08:69:85:a9:50:8a:38:74:5f:d1:66:19:c5:fb: d1:31:48:08:24:21:2a:b2:41:0b:23:d6:b8:3a:2c: 72:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5E:A1:68:10:AC:B4:C4:82:1E:34:A3:37:9B:20:78:15:87:03:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ea7db87d-b1d2-3be8-b5ed-24ce0eac7b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:fa:42:40:b1:86:f0:58:46:5d:23:2e:48:b4:cf:e5:6b:a4: 6c:a2:7d:91:93:1d:d5:07:5c:48:f9:22:38:5f:4f:88:f3:48: 30:d7:d5:fa:73:54:3f:34:2e:1e:a6:03:57:ab:72:da:5c:22: 82:2e:c6:e4:ed:4c:a0:c2:75:22:f5:cf:b0:c6:4e:03:7c:0d: a5:1b:1b:14:f4:92:93:84:36:e4:f8:cd:b6:e8:2a:23:ec:7b: 7c:07:39:15:db:ee:0d:8f:f5:c5:13:64:b1:cb:8a:b9:60:62: 39:86:53:dc:a1:0f:6f:b9:93:57:82:86:53:4a:80:76:6a:39: 78:e1:ea:25:16:14:7f:47:82:de:9b:9e:9e:57:c5:6c:bf:a7: 96:fa:73:6f:e3:15:c7:16:90:e6:8d:67:7a:f7:4c:1c:e6:b6: 47:05:73:61:9c:b8:f5:09:ad:6a:94:e5:ab:82:e0:1f:94:b6: 3f:7f:af:a2:ad:4a:c1:4d:e9:7a:b7:b5:34:d0:17:c4:1e:93: 5f:4d:19:a0:51:8d:21:70:d1:e0:83:0b:b8:47:cf:98:57:7e: 23:06:e6:61:1e:26:d5:b1:f0:01:a8:37:c7:72:dd:37:c9:cb: 97:01:51:c9:06:a5:69:0d:8e:e3:53:0a:26:39:a4:0b:f0:52: b2:b4:43:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE04ai15FqfGQCo+x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk OGE0OGNhN2MtYzdmZS00NDRlLThkODUtMzE2MzJlYWZjMWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXUtCUWBOqkU+dY8bzLFnBqvniIju3SMB/Xe qff2hfheuDau7MQ9z5Q4LFilD9gWOz7PQzPR7cE9gWHXlTrFN160rp92VDtO8Tzh YfjGSwto11XYx0iLVNAmGQRd64hdnLwKDtBvclOE8dBtS7kRcUoC5sY5RdlkZvyn 9gmqfEx+pij4/krpMhL1qnWk62eTiZsu/feLFhHUmaKJB2l2LeMcK18oacNf7hW6 1ekNt00x9ciHdWy1tCLbT6P8xjUWkYBGNQnj0TaarpuSWo3nq3Tz21FSP5uFx2RK 4KZdnufLCGmFqVCKOHRf0WYZxfvRMUgIJCEqskELI9a4OixyuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMBeoWgQrLTEgh40ozebIHgVhwO+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWE3ZGI4N2QtYjFkMi0z YmU4LWI1ZWQtMjRjZTBlYWM3YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABf6QkCxhvBYRl0jLki0z+VrpGyifZGTHdUHXEj5IjhfT4jzSDDX 1fpzVD80Lh6mA1erctpcIoIuxuTtTKDCdSL1z7DGTgN8DaUbGxT0kpOENuT4zbbo KiPse3wHORXb7g2P9cUTZLHLirlgYjmGU9yhD2+5k1eChlNKgHZqOXjh6iUWFH9H gt6bnp5XxWy/p5b6c2/jFccWkOaNZ3r3TBzmtkcFc2GcuPUJrWqU5auC4B+Utj9/ r6KtSsFN6Xq3tTTQF8Qek19NGaBRjSFw0eCDC7hHz5hXfiMG5mEeJtWx8AGoN8dy 3TfJy5cBUckGpWkNjuNTCiY5pAvwUrK0Q0Y= -----END CERTIFICATE-----Generated at Thu Mar 26 08:42:37 2026 by rpki-client