$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c345a91-11e1-3f90-88c3-8c5a0afb00f0.roa File: 1c345a91-11e1-3f90-88c3-8c5a0afb00f0.roa (raw, json) Hash identifier: 21dPBRoiCK3ernrLT7PgExJjK1YcwG5mUEPI6fLMbeA= Subject key identifier: FA:C8:3E:1F:17:1B:37:D1:1F:07:C4:6D:F9:12:A5:6F:45:47:1F:33 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E18AEFAE8B7F1181886BE3B80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c345a91-11e1-3f90-88c3-8c5a0afb00f0.roa Signing time: Sun 07 Jun 2026 21:00:12 +0000 ROA not before: Sun 07 Jun 2026 21:00:12 +0000 ROA not after: Sat 05 Sep 2026 21:00:12 +0000 asID: 396733 IP address blocks: 2001:503:c27::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:18:ae:fa:e8:b7:f1:18:18:86:be:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 7 21:00:12 2026 GMT Not After : Sep 5 21:00:12 2026 GMT Subject: CN=99ef3e77-96b9-4f8c-ae69-9cbfac26c1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:32:b9:30:9f:5e:57:8e:95:c8:70:45:a5: 73:c7:6b:78:f2:00:8d:e0:57:04:e4:f5:9b:f1:43: 3e:36:83:a8:0b:b8:b4:83:d3:98:12:64:43:5d:b7: a7:d2:0b:8e:fe:56:4a:e0:ac:c5:49:17:21:72:24: d2:02:be:cc:c3:27:84:d8:43:41:13:0c:a0:2f:e2: b2:5e:83:61:e3:97:9d:6c:50:49:80:8a:4a:85:e1: c1:38:ee:57:96:23:f6:0c:86:be:0e:47:32:bb:72: 56:4f:80:ae:ea:8d:eb:f7:76:fc:5c:bf:2e:85:22: 1d:cd:3a:b3:86:73:5a:0a:c9:db:73:59:e8:9f:fc: ae:57:66:b8:4c:ee:be:3f:38:b3:67:84:3a:d1:23: 51:20:c4:7b:53:c6:7c:11:25:40:2f:f3:b6:a2:7c: 03:c2:a8:c4:ac:71:c2:95:68:30:4b:25:86:08:d7: 8b:d6:34:86:fe:b1:8f:5c:28:e1:2c:45:35:8c:dc: fb:e6:ff:28:c9:0d:8d:51:2d:a4:0a:30:8a:7c:25: d3:43:67:3c:1a:6d:48:a9:cf:97:81:98:d7:b0:b1: 5c:fb:4b:b4:02:da:e5:19:b0:30:c7:ca:ca:49:70: 0e:e8:d9:f3:af:a4:79:ac:51:c1:98:2a:71:94:c0: b8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C8:3E:1F:17:1B:37:D1:1F:07:C4:6D:F9:12:A5:6F:45:47:1F:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1c345a91-11e1-3f90-88c3-8c5a0afb00f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:c27::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:aa:a1:9e:d8:fa:5a:13:de:2c:74:26:2f:81:ec:88:71:9b: 0b:4f:d4:64:91:cf:bf:2d:3f:3b:78:07:fe:e9:57:a0:6c:85: 73:da:25:8c:a3:e8:97:82:46:b5:9a:8c:38:73:af:d6:ec:f6: e8:a1:61:f8:b9:a6:33:62:9a:f7:75:9f:aa:98:ff:86:61:9f: 03:09:34:a1:74:71:4e:a8:a0:93:a2:fb:65:26:b5:80:be:62: 40:4d:7f:82:9f:b8:d7:99:8d:d3:f6:ba:73:dd:c9:f5:f2:70: de:f0:55:8f:55:27:b4:d0:0a:28:51:cc:1f:2c:4c:fd:2e:4c: ab:c7:7c:7c:ab:fb:53:73:5e:0d:26:20:56:09:24:eb:80:19: 9d:2d:15:51:a1:5a:4e:ac:6e:74:97:19:27:e2:e0:14:0d:ad: c4:d3:40:e5:f0:e1:50:6a:ca:64:b2:0b:40:17:da:bd:d7:72: 0c:ea:3b:62:9f:e1:1c:c7:66:7f:4c:b2:f2:a7:e7:d3:04:c0: 59:73:84:cc:8b:34:7d:4b:d0:b6:16:2e:c0:dd:bf:08:86:a8: 98:02:80:59:63:73:38:c2:3d:99:dd:7b:6b:45:7a:bf:62:dd: 43:de:35:c1:be:98:45:9c:da:57:dc:bb:64:34:6a:18:f7:2e: 43:b5:7f:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Yrvrot/EYGIa+O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwNzIxMDAxMloXDTI2MDkwNTIxMDAxMlowLzEtMCsGA1UEAxMk OTllZjNlNzctOTZiOS00ZjhjLWFlNjktOWNiZmFjMjZjMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW0yuTCfXleOlchwRaVzx2t48gCN4FcE5PWb 8UM+NoOoC7i0g9OYEmRDXben0guO/lZK4KzFSRchciTSAr7MwyeE2ENBEwygL+Ky XoNh45edbFBJgIpKheHBOO5XliP2DIa+Dkcyu3JWT4Cu6o3r93b8XL8uhSIdzTqz hnNaCsnbc1non/yuV2a4TO6+PzizZ4Q60SNRIMR7U8Z8ESVAL/O2onwDwqjErHHC lWgwSyWGCNeL1jSG/rGPXCjhLEU1jNz75v8oyQ2NUS2kCjCKfCXTQ2c8Gm1Iqc+X gZjXsLFc+0u0AtrlGbAwx8rKSXAO6Nnzr6R5rFHBmCpxlMC4pwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPrIPh8XGzfRHwfEbfkSpW9FRx8zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWMzNDVhOTEtMTFlMS0z ZjkwLTg4YzMtOGM1YTBhZmIwMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAwwn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEmqoZ7Y+loT3ix0Ji+B7IhxmwtP1GSRz78tPzt4B/7pV6BshXPa JYyj6JeCRrWajDhzr9bs9uihYfi5pjNimvd1n6qY/4ZhnwMJNKF0cU6ooJOi+2Um tYC+YkBNf4KfuNeZjdP2unPdyfXycN7wVY9VJ7TQCihRzB8sTP0uTKvHfHyr+1Nz Xg0mIFYJJOuAGZ0tFVGhWk6sbnSXGSfi4BQNrcTTQOXw4VBqymSyC0AX2r3Xcgzq O2Kf4RzHZn9MsvKn59MEwFlzhMyLNH1L0LYWLsDdvwiGqJgCgFljczjCPZnde2tF er9i3UPeNcG+mEWc2lfcu2Q0ahj3LkO1f4M= -----END CERTIFICATE-----Generated at Sat Jun 13 21:37:05 2026 by rpki-client