$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aff7d74-1c44-3440-96bb-1f154581fadd.roa File: 1aff7d74-1c44-3440-96bb-1f154581fadd.roa (raw, json) Hash identifier: Aa+yO6W/ZHZIDMbMceIhKB6jx9Ui2auVXdJdQpgVDSo= Subject key identifier: 48:EE:6A:0A:37:43:20:05:8B:08:BB:05:99:04:1E:9B:73:60:0A:C3 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8EF9914C745A53A6FF504380 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aff7d74-1c44-3440-96bb-1f154581fadd.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 396592 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:91:4c:74:5a:53:a6:ff:50:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=82054c17-38f4-41c9-9782-9b89289999bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3b:0a:b1:69:28:46:37:38:8b:55:27:8d:a6: 12:43:e1:21:42:2a:a1:3b:9b:d1:6c:3a:9a:77:58: b9:6c:67:03:f8:0d:82:16:87:ac:dd:9e:af:6c:c3: 33:2f:29:62:d9:fc:02:78:4e:4c:1c:8c:11:6d:1f: 1d:a2:e0:e7:6a:97:9b:4b:30:55:ab:ad:e2:ba:fd: f9:e1:d1:80:56:32:4d:a1:3f:dc:87:8a:d3:a4:7b: d0:6a:26:cc:9f:5d:d0:f1:e2:0a:34:6d:dc:99:44: e9:45:a7:0f:0c:8b:80:a7:95:83:a0:60:0d:48:17: f3:8f:f0:40:6f:cc:8d:3e:69:cb:91:e3:40:f8:80: 47:1e:bb:eb:25:19:be:df:99:4b:e3:8a:96:da:09: 19:7f:d2:bf:d9:fc:81:c7:39:ae:24:35:87:53:80: 11:ff:b2:67:64:df:53:eb:10:59:b0:ba:53:46:ea: 48:9c:d9:03:e6:a8:c0:28:bc:c9:4a:7e:5c:58:4f: ba:ee:e1:57:e0:d5:fd:a9:d1:b8:ba:2d:c2:69:b7: 73:30:26:88:fa:a3:2a:61:36:23:b0:89:d5:e6:bc: 6d:78:54:a6:78:99:46:b3:a6:94:47:8c:69:85:41: 2f:26:f9:a9:93:fc:fd:6f:30:90:26:51:6e:ea:78: 54:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EE:6A:0A:37:43:20:05:8B:08:BB:05:99:04:1E:9B:73:60:0A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/1aff7d74-1c44-3440-96bb-1f154581fadd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:8c:f7:f6:66:3c:cb:b6:30:cf:b6:ba:3f:20:3e:f5:36:47: 12:4d:27:64:12:35:5b:1c:d8:1d:0e:d8:c4:cf:66:27:49:58: 98:f1:d7:a5:52:c4:10:a5:95:d7:67:2d:ba:c9:fe:9b:4d:fd: c2:ac:50:9c:41:0f:c9:b1:10:73:e0:b7:f3:19:28:63:bd:ed: 53:57:da:93:f8:ac:c0:ff:00:6b:b0:4e:e0:73:9c:69:22:48: 53:6f:4e:7d:98:06:14:de:61:e7:1b:02:74:d9:a3:51:6e:1f: 0d:3a:00:b5:de:ab:8f:db:91:13:6d:6d:41:66:75:14:df:33: 17:30:cf:cd:94:19:22:d4:db:16:ed:d0:23:d6:a4:bc:7f:59: f3:a5:b5:b9:87:b9:10:9b:0f:dd:f3:86:d2:da:7c:cf:5f:2f: c1:5a:91:d5:b3:c2:e3:4c:db:3b:48:80:23:ff:10:51:ed:4d: d0:c1:e7:78:54:2c:b1:99:05:e7:e3:83:93:0f:ae:b8:63:ed: 64:2d:ea:6e:6d:d9:bb:a9:be:29:4f:48:b3:01:00:7a:c1:75: 41:0f:9a:59:9a:3c:03:a2:ac:3b:84:15:33:fc:ac:8f:44:f2: 6d:95:68:e9:c1:fc:49:77:2b:28:48:c1:85:b8:9e:5d:15:a8: cf:ec:b6:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2O+ZFMdFpTpv9QQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ODIwNTRjMTctMzhmNC00MWM5LTk3ODItOWI4OTI4OTk5OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzsKsWkoRjc4i1UnjaYSQ+EhQiqhO5vRbDqa d1i5bGcD+A2CFoes3Z6vbMMzLyli2fwCeE5MHIwRbR8douDnapebSzBVq63iuv35 4dGAVjJNoT/ch4rTpHvQaibMn13Q8eIKNG3cmUTpRacPDIuAp5WDoGANSBfzj/BA b8yNPmnLkeNA+IBHHrvrJRm+35lL44qW2gkZf9K/2fyBxzmuJDWHU4AR/7JnZN9T 6xBZsLpTRupInNkD5qjAKLzJSn5cWE+67uFX4NX9qdG4ui3CabdzMCaI+qMqYTYj sInV5rxteFSmeJlGs6aUR4xphUEvJvmpk/z9bzCQJlFu6nhUdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEjuago3QyAFiwi7BZkEHptzYArDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMWFmZjdkNzQtMWM0NC0z NDQwLTk2YmItMWYxNTQ1ODFmYWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAqM9/ZmPMu2MM+2uj8gPvU2RxJNJ2QSNVsc2B0O2MTPZidJWJjx 16VSxBCllddnLbrJ/ptN/cKsUJxBD8mxEHPgt/MZKGO97VNX2pP4rMD/AGuwTuBz nGkiSFNvTn2YBhTeYecbAnTZo1FuHw06ALXeq4/bkRNtbUFmdRTfMxcwz82UGSLU 2xbt0CPWpLx/WfOltbmHuRCbD93zhtLafM9fL8FakdWzwuNM2ztIgCP/EFHtTdDB 53hULLGZBefjg5MPrrhj7WQt6m5t2bupvilPSLMBAHrBdUEPmlmaPAOirDuEFTP8 rI9E8m2VaOnB/El3KyhIwYW4nl0VqM/stoM= -----END CERTIFICATE-----Generated at Wed May 13 12:07:04 2026 by rpki-client