$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb7655d-0666-33c2-beb1-14e987aadfde.roa File: ebb7655d-0666-33c2-beb1-14e987aadfde.roa (raw, json) Hash identifier: rn4BmrR1QNIFLHHr9Uy0gmXWpsz651ndM8egzbqeDGs= Subject key identifier: 07:22:99:04:49:8B:B4:AC:2D:F8:7F:C9:3B:C7:1E:30:41:BE:3F:DF Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D665F1570F03D2EE29AC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb7655d-0666-33c2-beb1-14e987aadfde.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 396614 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:66:5f:15:70:f0:3d:2e:e2:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=297d0e58-9bab-4182-a563-2936f57207e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:4a:7e:68:86:29:50:67:a3:43:7c:5c:d0:1d: 68:f8:2b:ec:9d:fe:6e:a2:40:31:36:19:5e:84:ed: 74:e1:47:78:e6:86:77:08:6b:eb:87:76:c0:54:a1: cc:32:fc:06:00:b6:fa:05:bc:69:9c:28:c2:75:33: d3:ec:e5:e8:6d:de:49:11:be:1e:7a:2f:d1:ed:b6: e2:51:77:a8:e6:aa:59:51:28:d5:f4:99:60:22:3b: 59:36:46:f5:6e:c6:5b:a3:82:74:ef:4a:72:2b:75: 94:06:e3:81:c3:fd:64:a4:ad:de:07:c4:7c:c5:5f: f1:04:5f:55:f6:e1:99:44:d2:d5:f9:87:ba:04:cb: 30:ba:a4:38:c5:24:71:3d:fa:95:ce:49:08:a4:c4: dc:ae:33:23:46:a0:72:cd:b5:66:09:85:d2:50:48: 3d:3b:95:37:73:53:51:e7:c9:5d:4c:00:50:71:85: 9f:1e:5d:db:6f:5b:3e:55:a7:f7:e0:78:35:47:dd: 35:8a:6f:f1:7b:b6:43:b6:22:41:56:fe:c9:06:69: c9:1f:aa:73:a1:70:8f:97:6c:7b:0d:da:f5:0c:13: e4:cf:08:07:1c:d6:52:0f:89:2c:02:c3:d3:13:70: da:eb:b7:20:5e:1d:fd:d7:ae:73:29:0d:5a:3e:8f: 39:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:22:99:04:49:8B:B4:AC:2D:F8:7F:C9:3B:C7:1E:30:41:BE:3F:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ebb7655d-0666-33c2-beb1-14e987aadfde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ea:8a:99:94:31:4c:41:79:70:e5:2c:f9:91:04:9a:1e:06: 5b:1c:d6:5b:e3:fe:ee:34:b5:73:e6:cd:b4:f9:c0:ce:5a:c0: 45:79:73:e3:ca:66:67:ce:ab:4d:47:ab:9c:72:8d:33:3a:52: e7:42:6f:a8:d4:1e:d8:ba:db:2c:b3:c2:7d:5e:f4:e8:56:27: ce:ed:7a:e2:61:69:d8:7f:07:92:a3:72:89:5d:f3:b7:ac:6f: f9:66:af:9e:61:a0:c2:ff:64:08:40:30:63:28:40:e6:08:bd: be:05:8e:36:0d:72:f3:e3:3c:ed:c2:df:c6:bb:c4:c9:22:14: ac:eb:3e:68:7a:e3:9c:67:8d:00:cd:4f:3c:2b:9b:9b:21:b0: ae:17:08:92:c8:79:03:d7:52:ad:88:c6:1d:9d:c3:29:67:d7: 65:23:bb:ca:7e:3f:a1:91:eb:78:57:b4:99:ae:0d:f7:2a:74: f5:ec:ab:48:28:bc:7d:9e:a6:bf:0f:23:8f:4f:f6:40:33:8d: 36:95:4a:4e:c6:dc:17:3d:6f:91:4f:39:1a:a7:3c:b9:27:a8: 15:dd:bc:c6:25:f8:2d:80:0b:cd:2a:4a:fb:b2:46:99:1f:75: 20:ac:5d:87:02:e4:2a:69:77:2c:25:79:3f:5c:7c:dc:15:da: e9:84:ff:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPWZfFXDwPS7imsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk Mjk3ZDBlNTgtOWJhYi00MTgyLWE1NjMtMjkzNmY1NzIwN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUp+aIYpUGejQ3xc0B1o+Cvsnf5uokAxNhle hO104Ud45oZ3CGvrh3bAVKHMMvwGALb6BbxpnCjCdTPT7OXobd5JEb4eei/R7bbi UXeo5qpZUSjV9JlgIjtZNkb1bsZbo4J070pyK3WUBuOBw/1kpK3eB8R8xV/xBF9V 9uGZRNLV+Ye6BMswuqQ4xSRxPfqVzkkIpMTcrjMjRqByzbVmCYXSUEg9O5U3c1NR 58ldTABQcYWfHl3bb1s+Vaf34Hg1R901im/xe7ZDtiJBVv7JBmnJH6pzoXCPl2x7 Ddr1DBPkzwgHHNZSD4ksAsPTE3Da67cgXh39165zKQ1aPo85NwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAcimQRJi7SsLfh/yTvHHjBBvj/fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZWJiNzY1NWQtMDY2Ni0z M2MyLWJlYjEtMTRlOTg3YWFkZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfqipmUMUxBeXDlLPmRBJoeBlsc1lvj/u40tXPmzbT5wM5awEV5 c+PKZmfOq01Hq5xyjTM6UudCb6jUHti62yyzwn1e9OhWJ87teuJhadh/B5Kjcold 87esb/lmr55hoML/ZAhAMGMoQOYIvb4FjjYNcvPjPO3C38a7xMkiFKzrPmh645xn jQDNTzwrm5shsK4XCJLIeQPXUq2Ixh2dwyln12Uju8p+P6GR63hXtJmuDfcqdPXs q0govH2epr8PI49P9kAzjTaVSk7G3Bc9b5FPORqnPLknqBXdvMYl+C2AC80qSvuy RpkfdSCsXYcC5CppdywleT9cfNwV2umE/+g= -----END CERTIFICATE-----Generated at Thu Mar 26 10:51:46 2026 by rpki-client