$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f20f7c09-af10-3817-917d-de587331fc66.roa File: f20f7c09-af10-3817-917d-de587331fc66.roa (raw, json) Hash identifier: ueR+VQPFpn2pihFW9ZWDBzH9AyNxnk+SFlXuFbbz2ac= Subject key identifier: 2B:3C:71:D9:D4:F2:93:D0:D1:AE:E6:27:BF:60:EE:34:C1:6F:2B:64 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D143D434CD14A2C9D52942C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f20f7c09-af10-3817-917d-de587331fc66.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 397205 IP address blocks: 2001:503:ba3e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:43:4c:d1:4a:2c:9d:52:94:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=a27d6fbc-85c6-4c66-ab03-3c8fcaeb8255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e8:9d:73:04:c2:6b:12:0e:13:92:b9:a4:64: 24:ce:be:11:15:48:85:cf:a9:b2:a1:b1:b2:3c:04: 47:5d:d9:d0:9d:c4:d8:69:e3:38:dc:21:37:ba:ff: 49:2e:02:65:15:d2:57:06:4a:7c:c9:da:1d:e3:d8: 83:07:da:98:9c:5e:c0:79:fd:73:e5:6f:58:89:b1: ee:e3:a4:04:47:71:04:67:6b:c8:df:78:5e:a9:c2: ba:94:fe:0b:40:12:81:c6:a4:9a:96:40:ed:c4:43: bc:bf:b2:4f:81:ec:4c:8e:3d:d1:c9:59:ba:52:b3: 6f:da:e5:0f:c0:cc:0a:28:6c:2b:02:7c:6e:20:7b: b4:29:26:5b:88:36:61:5c:73:7c:70:d6:74:40:21: bd:d6:a3:3a:ab:df:8a:a8:af:8f:24:b7:8f:8a:d4: a0:f3:3c:59:57:c1:62:c7:61:5e:40:56:b4:92:e6: 18:eb:a1:80:cf:de:07:d3:42:33:d9:53:57:68:a9: c7:74:25:a8:89:f8:92:8b:55:54:ab:98:95:54:82: 9a:6e:a1:05:ad:49:2a:c4:ba:bb:bc:52:90:da:a5: 09:da:4c:53:c1:cc:b5:46:1a:43:f2:b0:2e:74:88: be:ed:8a:ce:4a:80:41:ae:20:8e:6b:38:92:da:15: 34:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3C:71:D9:D4:F2:93:D0:D1:AE:E6:27:BF:60:EE:34:C1:6F:2B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/f20f7c09-af10-3817-917d-de587331fc66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:ba3e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:2e:f6:f1:33:ee:9d:63:80:12:d3:7f:4f:8b:0c:05:bb:73: 92:4c:49:33:4b:b6:9c:93:02:8e:0d:cf:0e:09:5a:bf:8a:1d: 8e:86:e4:68:38:90:bc:fd:0f:a2:6f:3b:79:10:5d:32:a0:d3: 4d:e9:80:82:72:cf:95:32:a9:f4:39:6b:af:01:33:58:c1:20: 7e:4c:3d:f6:fe:18:71:c4:84:c2:fa:b7:97:66:68:9c:87:16: 8c:60:5a:af:33:c8:73:a8:8a:0a:d7:67:38:17:31:ca:2b:fd: 03:a3:f6:e4:ee:1c:8a:12:d6:cd:00:79:b4:04:93:ef:50:35: 5c:06:66:18:c5:ea:27:07:18:94:09:36:43:d1:c2:33:ce:48: 00:b8:35:4b:e2:ee:78:81:d2:25:21:c2:69:e5:6e:e9:f3:f5: 7b:9c:65:75:b5:26:87:f8:9a:bf:ef:41:4e:e8:ea:79:e2:a3: 31:6e:74:0d:a0:75:b6:24:f3:9c:8d:16:47:81:92:64:0e:c9: 05:80:2c:c3:df:7a:63:ff:37:5f:4a:fc:c7:76:20:e4:4b:48: a6:b9:ef:e2:75:a1:01:a1:e5:57:ba:2b:59:7f:b0:d5:15:3a: 93:5f:2a:8a:0a:14:8f:9e:a1:cf:29:8b:76:42:3f:d3:2d:f1: 8f:9f:94:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UPUNM0UosnVKULAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YTI3ZDZmYmMtODVjNi00YzY2LWFiMDMtM2M4ZmNhZWI4MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uidcwTCaxIOE5K5pGQkzr4RFUiFz6myobGy PARHXdnQncTYaeM43CE3uv9JLgJlFdJXBkp8ydod49iDB9qYnF7Aef1z5W9YibHu 46QER3EEZ2vI33heqcK6lP4LQBKBxqSalkDtxEO8v7JPgexMjj3RyVm6UrNv2uUP wMwKKGwrAnxuIHu0KSZbiDZhXHN8cNZ0QCG91qM6q9+KqK+PJLePitSg8zxZV8Fi x2FeQFa0kuYY66GAz94H00Iz2VNXaKnHdCWoifiSi1VUq5iVVIKabqEFrUkqxLq7 vFKQ2qUJ2kxTwcy1RhpD8rAudIi+7YrOSoBBriCOaziS2hU0HQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCs8cdnU8pPQ0a7mJ79g7jTBbytkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZjIwZjdjMDktYWYxMC0z ODE3LTkxN2QtZGU1ODczMzFmYzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA7o+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABEu9vEz7p1jgBLTf0+LDAW7c5JMSTNLtpyTAo4Nzw4JWr+KHY6G 5Gg4kLz9D6JvO3kQXTKg003pgIJyz5UyqfQ5a68BM1jBIH5MPfb+GHHEhML6t5dm aJyHFoxgWq8zyHOoigrXZzgXMcor/QOj9uTuHIoS1s0AebQEk+9QNVwGZhjF6icH GJQJNkPRwjPOSAC4NUvi7niB0iUhwmnlbunz9XucZXW1Jof4mr/vQU7o6nniozFu dA2gdbYk85yNFkeBkmQOyQWALMPfemP/N19K/Md2IORLSKa57+J1oQGh5Ve6K1l/ sNUVOpNfKooKFI+eoc8pi3ZCP9Mt8Y+flP0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:46 2026 by rpki-client