$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ba03af-3fa1-3181-a93b-a53ab8dc2a9a.roa File: 32ba03af-3fa1-3181-a93b-a53ab8dc2a9a.roa (raw, json) Hash identifier: 3hgwDq+DcEQty/gvlthKKCZr7KbS8ysOUVxU6sRCt3M= Subject key identifier: 38:11:CD:95:6F:70:4D:D5:43:81:15:AF:1E:F9:83:29:A8:B2:46:37 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D5FA867C2C13F899F527AAE00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ba03af-3fa1-3181-a93b-a53ab8dc2a9a.roa Signing time: Thu 02 Apr 2026 14:22:41 +0000 ROA not before: Thu 02 Apr 2026 14:22:41 +0000 ROA not after: Wed 01 Jul 2026 14:22:41 +0000 asID: 20431 IP address blocks: 2001:503:231d::2:30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:a8:67:c2:c1:3f:89:9f:52:7a:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 2 14:22:41 2026 GMT Not After : Jul 1 14:22:41 2026 GMT Subject: CN=fb9610f8-e49b-46bc-931a-7e451768e4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0c:f9:87:a9:80:8e:ec:be:ad:18:79:3a:fd: e9:f5:ba:90:fa:ca:91:dc:03:8d:57:7a:04:d3:cd: 7f:42:24:bb:42:63:38:d6:92:95:72:be:9f:14:c4: af:3a:c1:9f:af:58:29:50:b4:3c:9e:fe:a1:c0:d1: 39:80:7d:b0:c4:76:02:96:b4:05:28:b4:00:0b:f9: fc:6c:3e:6d:f8:99:7e:f0:2c:f0:9e:b7:f8:ab:4e: 88:f6:58:e5:ea:d9:a9:1b:34:27:f8:42:c0:9f:2a: c1:6a:22:15:f8:97:3c:1d:e6:9f:be:2b:b1:5b:fb: ed:8b:2c:0f:1d:79:c5:b4:ff:fd:65:e1:24:ad:0a: 01:fe:dd:4b:55:80:1f:aa:ad:67:a8:a8:20:57:ce: 21:13:8a:ad:18:bc:dd:5d:03:8a:a7:73:cf:44:c0: 65:9d:a1:91:fa:23:c5:c5:bb:46:4d:e4:04:21:10: e1:20:89:b9:d5:b6:f4:aa:c9:cf:32:0c:b7:dd:8a: 20:c0:9c:71:93:b2:fe:83:00:5d:dc:62:4d:be:26: 67:f3:2a:3d:a6:9c:71:25:33:ff:51:c8:73:25:29: 56:e7:58:56:0f:2b:45:5e:ed:78:9b:8b:1e:1c:55: 9f:29:a3:86:be:8f:9f:29:d1:2e:15:bf:f6:f5:3e: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:11:CD:95:6F:70:4D:D5:43:81:15:AF:1E:F9:83:29:A8:B2:46:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/32ba03af-3fa1-3181-a93b-a53ab8dc2a9a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d:0:0:0:2:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:39:8e:37:1e:36:d7:d1:d4:d1:fc:d7:09:0b:ff:f6:a2:0d: ca:c2:ad:f5:cd:69:9d:fc:cf:6c:27:65:80:4c:96:00:5f:f2: f7:b6:f8:fd:1c:78:27:0a:b4:a6:32:d3:8b:90:94:7e:83:3c: 6f:d8:43:9a:3c:aa:7b:62:4d:98:18:bd:42:d2:e4:50:90:be: 0a:f3:f9:13:4b:02:e2:6f:97:6b:fb:9d:52:9f:d1:6e:03:c2: b2:6d:b8:58:dc:b5:5d:59:02:5e:bf:78:81:6e:62:4e:2a:04: ec:f1:9c:ef:c8:83:2b:b3:a6:a4:71:fc:11:5e:7f:a7:6a:62: 04:19:d7:9a:54:cd:34:05:85:67:6a:a3:59:7e:e4:c9:d6:08: eb:e8:d0:cd:a6:0c:ad:37:ef:bd:7d:f8:25:83:b0:50:70:b7: 29:7a:6c:d0:c2:7d:64:24:a5:67:c2:bc:29:a5:c1:44:3b:3c: e5:73:2a:e4:11:a2:23:33:46:c0:a8:68:a8:6c:a4:e4:61:70: 91:a8:51:0e:7b:9c:21:1e:b2:77:38:31:f4:83:4a:b7:25:c7: 43:31:71:b7:de:29:3e:36:c9:57:df:75:f6:99:90:08:81:25: 68:0e:31:86:16:a9:44:00:85:9f:bb:96:e5:78:25:ce:41:81: 34:c7:2b:a1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1fqGfCwT+Jn1J6rgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwMjE0MjI0MVoXDTI2MDcwMTE0MjI0MVowLzEtMCsGA1UEAxMk ZmI5NjEwZjgtZTQ5Yi00NmJjLTkzMWEtN2U0NTE3NjhlNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgz5h6mAjuy+rRh5Ov3p9bqQ+sqR3AONV3oE 081/QiS7QmM41pKVcr6fFMSvOsGfr1gpULQ8nv6hwNE5gH2wxHYClrQFKLQAC/n8 bD5t+Jl+8Czwnrf4q06I9ljl6tmpGzQn+ELAnyrBaiIV+Jc8HeafviuxW/vtiywP HXnFtP/9ZeEkrQoB/t1LVYAfqq1nqKggV84hE4qtGLzdXQOKp3PPRMBlnaGR+iPF xbtGTeQEIRDhIIm51bb0qsnPMgy33YogwJxxk7L+gwBd3GJNviZn8yo9ppxxJTP/ UchzJSlW51hWDytFXu14m4seHFWfKaOGvo+fKdEuFb/29T7vLQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFDgRzZVvcE3VQ4EVrx75gymoskY3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMzJiYTAzYWYtM2ZhMS0z MTgxLWE5M2ItYTUzYWI4ZGMyYTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAyMd AAAAAAAAAAIAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQA/OY43HjbX0dTR/NcJC//2og3Kwq31zWmd/M9s J2WATJYAX/L3tvj9HHgnCrSmMtOLkJR+gzxv2EOaPKp7Yk2YGL1C0uRQkL4K8/kT SwLib5dr+51Sn9FuA8KybbhY3LVdWQJev3iBbmJOKgTs8ZzvyIMrs6akcfwRXn+n amIEGdeaVM00BYVnaqNZfuTJ1gjr6NDNpgytN++9ffglg7BQcLcpemzQwn1kJKVn wrwppcFEOzzlcyrkEaIjM0bAqGiobKTkYXCRqFEOe5whHrJ3ODH0g0q3JcdDMXG3 3ik+NslX33X2mZAIgSVoDjGGFqlEAIWfu5bleCXOQYE0xyuh -----END CERTIFICATE-----Generated at Fri Apr 17 03:17:53 2026 by rpki-client