$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa File: 209ae32f-e634-38d0-ae30-cca37a438043.roa (raw, json) Hash identifier: pIsYF8XFoEWfZU/xlF1Jb5b51K8OD5JZZQKEXY6S4rA= Subject key identifier: 99:F4:D9:A0:AC:BC:1E:8B:36:EF:4E:03:9A:0C:85:98:9F:F3:52:9D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DA11AE3B3D4BBBB5D371C0680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 396567 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:e3:b3:d4:bb:bb:5d:37:1c:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=30cee58d-5801-4104-9745-d5d20334dc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:8d:ba:4e:ec:c6:b2:b9:fb:6c:ed:c1:9a: eb:11:6a:1a:0f:4d:0b:da:83:37:8d:95:f3:eb:ae: 24:9f:99:8a:79:03:93:ab:bf:dd:43:94:ae:c5:b5: 78:98:c1:27:62:6b:c1:e9:91:a7:23:68:46:86:8f: 57:31:69:b0:b8:db:95:06:ea:ba:9f:a5:03:57:b7: 90:83:30:26:94:c1:77:0a:85:61:ba:7b:3d:4c:15: 3a:51:ea:07:49:27:17:2a:e3:8f:3f:71:44:d9:c9: 0a:16:74:ed:5e:ff:c8:4b:4e:4e:0b:f0:9f:de:99: b5:a3:a7:bc:11:b2:f4:4c:36:53:70:27:4e:46:98: 6d:1a:38:59:1a:00:dc:4b:4c:45:a5:8c:05:75:3a: 9e:eb:69:f3:db:2d:5d:a8:e2:e3:a6:2b:d8:16:8f: 83:5c:24:48:16:a3:61:56:4d:86:fa:23:91:b9:2b: 33:ec:20:d5:3b:ff:47:fb:5b:46:b6:8b:1a:9c:34: 0e:44:4f:67:a6:30:b4:a1:6b:c8:c3:a9:af:c9:5b: 4b:61:15:37:1f:75:f0:01:35:c2:da:4e:2d:37:a4: 17:85:bc:0d:c0:b7:b0:96:47:18:4a:01:0a:db:af: 7b:c3:e1:68:8f:1e:7e:ca:eb:ea:0e:12:c0:d8:46: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F4:D9:A0:AC:BC:1E:8B:36:EF:4E:03:9A:0C:85:98:9F:F3:52:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/209ae32f-e634-38d0-ae30-cca37a438043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2d:4c:96:70:0d:be:74:86:eb:39:40:7a:96:1c:2c:0f:f1: 45:25:b4:e6:1e:1d:5c:b6:36:80:f6:1e:b7:92:2d:eb:8c:82: 33:34:1a:1f:a3:76:56:e5:19:26:a7:8d:1a:3b:5e:ce:77:02: 86:90:c0:3b:30:74:67:d7:b4:c3:5f:a3:de:21:9d:6d:3c:30: d1:48:a9:a2:9c:bc:5c:d3:78:0c:af:2d:c4:ed:5b:95:97:b3: 81:60:d5:01:6b:27:01:34:68:8a:7b:9e:e0:25:aa:dd:d5:29: 91:0b:59:45:cf:d2:e1:49:fa:d3:d0:22:be:89:6d:d1:8e:fe: f3:96:c1:52:ba:c5:fc:31:26:a6:d8:b5:88:88:bf:46:61:8e: 7a:b3:5e:51:d2:e4:54:2c:19:7b:42:89:e6:20:a0:85:37:fb: 27:7c:7a:16:3f:1b:56:72:7a:ee:1c:c1:5e:78:3e:3d:c6:9e: 5d:7f:04:ee:4d:5b:42:2e:18:85:ed:52:c8:09:0c:6e:50:43: 51:b0:f5:f6:da:e4:b3:21:09:a3:5a:7c:cd:84:26:7d:b2:67: a2:8b:64:1f:f0:98:ab:b6:a9:a5:48:fe:49:0a:67:68:2f:9b: 9f:5d:5b:2c:8d:1c:a1:9c:c9:e2:15:72:5b:64:27:4e:a9:fd: 0b:07:65:77 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2hGuOz1Lu7XTccBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MzBjZWU1OGQtNTgwMS00MTA0LTk3NDUtZDVkMjAzMzRkYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4KNuk7sxrK5+2ztwZrrEWoaD00L2oM3jZXz 664kn5mKeQOTq7/dQ5SuxbV4mMEnYmvB6ZGnI2hGho9XMWmwuNuVBuq6n6UDV7eQ gzAmlMF3CoVhuns9TBU6UeoHSScXKuOPP3FE2ckKFnTtXv/IS05OC/Cf3pm1o6e8 EbL0TDZTcCdORphtGjhZGgDcS0xFpYwFdTqe62nz2y1dqOLjpivYFo+DXCRIFqNh Vk2G+iORuSsz7CDVO/9H+1tGtosanDQORE9npjC0oWvIw6mvyVtLYRU3H3XwATXC 2k4tN6QXhbwNwLewlkcYSgEK2697w+Fojx5+yuvqDhLA2EY0VwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFJn02aCsvB6LNu9OA5oMhZif81KdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjA5YWUzMmYtZTYzNC0z OGQwLWFlMzAtY2NhMzdhNDM4MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCCLUyWcA2+dIbrOUB6lhwsD/FFJbTmHh1ctjaA 9h63ki3rjIIzNBofo3ZW5Rkmp40aO17OdwKGkMA7MHRn17TDX6PeIZ1tPDDRSKmi nLxc03gMry3E7VuVl7OBYNUBaycBNGiKe57gJard1SmRC1lFz9LhSfrT0CK+iW3R jv7zlsFSusX8MSam2LWIiL9GYY56s15R0uRULBl7QonmIKCFN/snfHoWPxtWcnru HMFeeD49xp5dfwTuTVtCLhiF7VLICQxuUENRsPX22uSzIQmjWnzNhCZ9smeii2Qf 8JirtqmlSP5JCmdoL5ufXVssjRyhnMniFXJbZCdOqf0LB2V3 -----END CERTIFICATE-----Generated at Wed May 13 05:45:05 2026 by rpki-client