$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f3487ac-1935-3cd6-a797-448cfbfd2c17.roa File: 3f3487ac-1935-3cd6-a797-448cfbfd2c17.roa (raw, json) Hash identifier: RGL+zNxcnI+jNw5/CjOXCDFtmB6Jmx4YZqlgQ21Mta4= Subject key identifier: CC:29:61:66:AD:A6:FB:3C:F5:AF:F6:2A:0C:A9:7C:A7:8A:FA:C4:5F Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E09F253D8CC812DFF0FFA55C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f3487ac-1935-3cd6-a797-448cfbfd2c17.roa Signing time: Tue 02 Jun 2026 14:19:03 +0000 ROA not before: Tue 02 Jun 2026 14:19:03 +0000 ROA not after: Mon 31 Aug 2026 14:19:03 +0000 asID: 397195 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:09:f2:53:d8:cc:81:2d:ff:0f:fa:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 2 14:19:03 2026 GMT Not After : Aug 31 14:19:03 2026 GMT Subject: CN=670f5226-0b2e-4b32-9a23-c01f26bd0845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d9:ea:76:84:52:d7:bb:51:02:78:78:73:a5: 74:f8:9e:55:2d:67:13:53:5b:81:7c:7d:50:a4:d8: cf:bd:2a:a5:90:77:07:e7:1d:6c:e4:b2:98:7a:44: 66:29:58:61:7a:f7:c8:54:36:bb:1f:b7:5e:86:4d: 61:7f:3a:75:eb:7e:3d:cd:39:aa:23:21:f2:63:e6: 6e:26:55:a9:1c:09:64:7c:8b:e4:52:41:f2:e5:d1: 80:4c:c1:0d:da:fb:ed:05:f7:61:88:af:96:0f:18: bc:8b:76:23:7b:3d:6f:80:42:69:dd:e6:aa:49:b1: db:9c:e1:75:cd:a0:c1:37:6d:5e:a8:da:4b:8f:00: 2a:ea:35:ce:68:62:b4:bd:e0:c2:62:5e:da:20:9c: a1:a0:0d:60:e8:bc:a4:e4:a0:e5:f6:be:f5:5d:c6: 0d:24:d0:92:5c:bb:b5:49:81:cb:2b:7e:e3:ea:56: ae:b6:89:2b:1b:54:d3:d6:9d:d9:d4:04:a7:02:bd: c1:0d:0a:cc:8c:fe:56:0f:3c:78:2d:fc:0a:37:fe: ac:83:f7:35:ca:65:3c:b9:5d:16:2e:78:a0:3c:0c: ca:86:c2:87:09:98:b4:ae:23:ec:dd:40:61:c0:c9: 58:50:f2:b1:d7:ae:c8:f6:9f:22:bf:6a:36:7b:7d: e8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:29:61:66:AD:A6:FB:3C:F5:AF:F6:2A:0C:A9:7C:A7:8A:FA:C4:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f3487ac-1935-3cd6-a797-448cfbfd2c17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e9:89:9d:4a:df:6e:cb:06:b3:26:4e:70:b4:f4:9f:84:8f: 79:1a:ac:c4:0d:81:42:be:13:fa:43:dc:96:a7:5d:98:0c:03: 2f:d5:59:a7:af:14:28:14:62:d3:4c:3f:5b:1a:86:1b:e4:12: 82:45:89:49:e5:df:35:0a:1c:1a:8d:b0:4e:ec:00:ed:80:72: aa:6e:a8:c4:2f:a5:b5:8d:45:34:c5:c4:c3:4f:8f:98:fa:17: 95:a4:b0:fb:bc:0e:9a:99:df:fa:26:9b:a7:a0:9a:c0:1c:06: 09:5f:92:65:7d:a7:09:49:3d:41:72:41:33:eb:8b:17:af:de: cc:9b:4f:b9:b4:48:7f:46:4b:6f:a9:9f:96:2d:46:d4:0d:9e: a8:f0:b0:b6:f5:17:3c:f4:91:a0:78:3f:9b:c5:80:e4:42:e7: bb:cb:6d:db:6b:1b:fa:e2:bb:d9:ca:3f:e3:a0:25:4b:0b:fd: 65:da:e3:07:06:4f:84:41:16:ea:36:69:49:e8:01:fe:a8:45: b9:27:32:4c:6f:fc:f5:d5:4d:9c:3e:14:b7:7c:88:b0:97:2d: 8d:0a:f0:35:09:ad:4c:bf:0f:a7:9a:b0:e5:83:02:06:aa:5b: 30:9f:86:13:ee:c3:40:32:fc:86:16:7b:73:0d:87:dc:9e:cf: 7a:8d:86:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4J8lPYzIEt/w/6VcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwMjE0MTkwM1oXDTI2MDgzMTE0MTkwM1owLzEtMCsGA1UEAxMk NjcwZjUyMjYtMGIyZS00YjMyLTlhMjMtYzAxZjI2YmQwODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNnqdoRS17tRAnh4c6V0+J5VLWcTU1uBfH1Q pNjPvSqlkHcH5x1s5LKYekRmKVhhevfIVDa7H7dehk1hfzp16349zTmqIyHyY+Zu JlWpHAlkfIvkUkHy5dGATMEN2vvtBfdhiK+WDxi8i3Yjez1vgEJp3eaqSbHbnOF1 zaDBN21eqNpLjwAq6jXOaGK0veDCYl7aIJyhoA1g6Lyk5KDl9r71XcYNJNCSXLu1 SYHLK37j6lautokrG1TT1p3Z1ASnAr3BDQrMjP5WDzx4LfwKN/6sg/c1ymU8uV0W LnigPAzKhsKHCZi0riPs3UBhwMlYUPKx167I9p8iv2o2e33o0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMwpYWatpvs89a/2KgypfKeK+sRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2YzNDg3YWMtMTkzNS0z Y2Q2LWE3OTctNDQ4Y2ZiZmQyYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAzpiZ1K327LBrMmTnC09J+Ej3karMQNgUK+E/pD3JanXZgMAy/V WaevFCgUYtNMP1sahhvkEoJFiUnl3zUKHBqNsE7sAO2AcqpuqMQvpbWNRTTFxMNP j5j6F5WksPu8DpqZ3/omm6egmsAcBglfkmV9pwlJPUFyQTPrixev3sybT7m0SH9G S2+pn5YtRtQNnqjwsLb1Fzz0kaB4P5vFgORC57vLbdtrG/riu9nKP+OgJUsL/WXa 4wcGT4RBFuo2aUnoAf6oRbknMkxv/PXVTZw+FLd8iLCXLY0K8DUJrUy/D6easOWD AgaqWzCfhhPuw0Ay/IYWe3MNh9yez3qNhoc= -----END CERTIFICATE-----Generated at Sat Jun 13 17:16:46 2026 by rpki-client