$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/147bc60c-1c4b-3a38-b0f0-882cedeb1c8d.roa File: 147bc60c-1c4b-3a38-b0f0-882cedeb1c8d.roa (raw, json) Hash identifier: 4mEp7fiNnRZz5IhwmLqo3oD9iH/HnTjn8WyX9n4SfHc= Subject key identifier: 9A:9F:30:64:E2:E0:1C:F2:9F:B8:4F:C5:53:DA:3A:11:A1:8C:02:03 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DA84F44545CB5B52B45744D80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/147bc60c-1c4b-3a38-b0f0-882cedeb1c8d.roa Signing time: Tue 28 Apr 2026 14:57:05 +0000 ROA not before: Tue 28 Apr 2026 14:57:05 +0000 ROA not after: Mon 27 Jul 2026 14:57:05 +0000 asID: 396551 IP address blocks: 2001:503:eea3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:4f:44:54:5c:b5:b5:2b:45:74:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 28 14:57:05 2026 GMT Not After : Jul 27 14:57:05 2026 GMT Subject: CN=a9f4429f-dc94-44ae-bbb3-2962bd378a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1b:cc:16:20:78:16:67:7f:18:74:80:eb:6f: 51:3c:01:45:8a:eb:55:9f:aa:0a:56:d4:97:5c:4c: 61:3f:64:30:1b:3a:10:bb:ba:cb:2c:a8:c1:4d:b1: e3:1a:1a:20:4f:48:b1:72:29:ce:b2:37:e4:ae:48: bc:69:63:31:aa:c7:9f:33:73:e5:a5:d3:62:3b:05: 90:7c:36:80:fa:14:92:80:d0:ea:cc:a8:03:e0:35: 2c:37:92:13:6a:28:ac:95:80:94:85:1e:4f:d0:4b: 91:18:f6:09:df:c9:1b:75:e0:ce:2c:62:ed:40:44: 37:a6:64:67:13:71:78:91:11:1b:69:18:1c:b4:9e: 8f:e3:0e:68:13:41:80:89:b8:78:99:ff:36:6c:8f: 54:d6:08:f8:8f:86:ce:1c:ec:a9:50:a0:4d:4e:bd: d1:bf:df:07:d6:b5:c9:9d:6f:00:81:4d:9e:b7:92: 55:31:2b:84:58:05:94:7e:91:2d:c2:ce:6e:0e:9f: 8b:71:a9:66:69:2c:cf:4e:b9:77:c9:58:79:50:9f: dd:7d:b5:a7:11:d2:01:ff:c5:f7:d4:76:21:fc:64: 4c:fd:83:25:dc:b8:94:b4:4a:1c:e4:ab:31:b4:73: a0:23:a1:6e:65:d9:58:4f:93:2a:8f:ef:93:21:ca: 13:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:9F:30:64:E2:E0:1C:F2:9F:B8:4F:C5:53:DA:3A:11:A1:8C:02:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/147bc60c-1c4b-3a38-b0f0-882cedeb1c8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:eea3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:e0:3e:aa:f9:00:f0:21:60:5c:31:a7:4b:25:00:e3:20:64: 87:96:e5:e6:91:54:0c:c7:f8:c4:4d:8d:e0:cd:60:a6:89:fe: e4:4e:6d:a9:dd:d4:87:1b:3a:78:81:30:0e:c1:78:73:c1:7b: ec:8d:29:70:fe:ad:37:5f:1f:a6:b5:9c:b1:ba:1c:01:50:6d: 51:78:73:70:f7:6c:7f:38:91:b1:62:83:5b:31:93:c7:e9:fe: 40:e8:38:9f:4e:41:56:da:e5:a4:de:92:a2:71:c3:dd:b4:e5: 29:05:91:b9:ef:2e:2a:bb:ba:e2:e5:17:59:df:3b:bc:b3:44: 47:83:57:09:2d:fb:40:e1:93:14:d0:39:06:8d:df:cb:62:50: 75:e7:9c:f3:ee:1b:dd:80:e7:7d:c3:ac:00:5d:17:b8:30:c8: e6:a7:03:c9:e3:1e:89:8f:25:72:7f:3d:86:37:d2:be:76:28: 24:1b:ce:af:7e:f3:fe:86:dc:89:31:b7:f5:2e:44:3a:59:ed: bf:8d:b2:d7:ed:bf:b8:17:f8:95:aa:59:b6:6d:ed:c9:a4:99: 1f:ed:f7:be:bd:61:ad:a1:a6:94:9d:8d:c1:af:b2:ce:46:8f: 53:e7:8a:1d:c0:da:b2:d9:8e:d0:85:f9:9e:a6:b2:e3:b2:2f: 9b:2a:bd:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oT0RUXLW1K0V0TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyODE0NTcwNVoXDTI2MDcyNzE0NTcwNVowLzEtMCsGA1UEAxMk YTlmNDQyOWYtZGM5NC00NGFlLWJiYjMtMjk2MmJkMzc4YTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhvMFiB4Fmd/GHSA629RPAFFiutVn6oKVtSX XExhP2QwGzoQu7rLLKjBTbHjGhogT0ixcinOsjfkrki8aWMxqsefM3PlpdNiOwWQ fDaA+hSSgNDqzKgD4DUsN5ITaiislYCUhR5P0EuRGPYJ38kbdeDOLGLtQEQ3pmRn E3F4kREbaRgctJ6P4w5oE0GAibh4mf82bI9U1gj4j4bOHOypUKBNTr3Rv98H1rXJ nW8AgU2et5JVMSuEWAWUfpEtws5uDp+LcalmaSzPTrl3yVh5UJ/dfbWnEdIB/8X3 1HYh/GRM/YMl3LiUtEoc5KsxtHOgI6FuZdlYT5Mqj++TIcoTyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJqfMGTi4Bzyn7hPxVPaOhGhjAIDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMTQ3YmM2MGMtMWM0Yi0z YTM4LWIwZjAtODgyY2VkZWIxYzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEbgPqr5APAhYFwxp0slAOMgZIeW5eaRVAzH+MRNjeDNYKaJ/uRO band1IcbOniBMA7BeHPBe+yNKXD+rTdfH6a1nLG6HAFQbVF4c3D3bH84kbFig1sx k8fp/kDoOJ9OQVba5aTekqJxw9205SkFkbnvLiq7uuLlF1nfO7yzREeDVwkt+0Dh kxTQOQaN38tiUHXnnPPuG92A533DrABdF7gwyOanA8njHomPJXJ/PYY30r52KCQb zq9+8/6G3Ikxt/UuRDpZ7b+Nstftv7gX+JWqWbZt7cmkmR/t9769Ya2hppSdjcGv ss5Gj1Pnih3A2rLZjtCF+Z6msuOyL5sqvQ8= -----END CERTIFICATE-----Generated at Wed May 13 05:43:27 2026 by rpki-client