$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24592885-f95e-3279-bc28-3476a4e992d2.roa File: 24592885-f95e-3279-bc28-3476a4e992d2.roa (raw, json) Hash identifier: 7HQ4PACLn2rL9zndfVQStOhM61winvAB5NXo20yCWEQ= Subject key identifier: 1B:DE:2D:BB:05:24:A9:96:2F:7B:86:FC:2E:03:9F:C2:48:58:9B:77 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D97556162A96F3F309B405300 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24592885-f95e-3279-bc28-3476a4e992d2.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 396606 IP address blocks: 2001:500:7967::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:61:62:a9:6f:3f:30:9b:40:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=55eea81f-b215-4d36-a0ec-257946b23eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a3:5a:3f:56:45:d3:4f:dd:dd:78:6b:6e:52: 9d:af:0c:dd:2c:e7:d1:b1:66:1d:15:72:b0:7c:8d: 99:92:2d:89:53:cf:5f:37:70:8b:0e:5a:3c:d3:7b: ce:0d:45:ee:70:86:fd:b0:d5:b6:3c:53:ac:0a:51: 3f:66:89:f8:46:95:38:95:bf:44:7b:4c:6b:ea:65: 35:17:83:69:bd:55:3a:9c:10:3c:0c:a6:e9:9f:f8: 65:3f:59:92:4c:42:ce:ce:57:c5:40:4b:c2:33:44: e8:04:79:0c:20:8d:a4:1b:16:cd:dc:6b:64:b0:ea: 4e:0d:58:30:4f:93:2a:de:a1:ce:0a:ef:25:c4:51: 44:e3:d1:1b:d7:42:0a:ea:95:e2:f4:06:4d:ff:26: 17:e3:72:a0:09:37:05:47:ee:3f:56:66:eb:39:2d: 5c:c7:1c:be:0f:13:b3:70:51:77:60:6a:dc:5b:eb: 54:00:6e:33:3e:5f:1a:d4:ed:61:eb:1a:b9:61:45: 87:b3:4e:02:12:4b:24:49:dd:60:bd:9d:8e:c1:7e: 88:25:60:2a:45:2d:ff:dd:71:af:9a:bd:f1:02:60: 90:6b:07:97:73:5e:d2:8c:d7:af:52:ea:91:e7:bb: 75:ec:23:7a:59:ac:22:29:e6:15:7d:b2:0e:9e:57: 54:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DE:2D:BB:05:24:A9:96:2F:7B:86:FC:2E:03:9F:C2:48:58:9B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/24592885-f95e-3279-bc28-3476a4e992d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:7967::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ca:b0:77:f1:43:14:5a:ef:2e:57:a9:5e:0f:61:f5:ac:6b: d5:e8:c0:de:52:2e:49:9e:ca:de:7e:58:ca:40:78:ba:52:b1: 1f:9a:ff:0d:bb:c1:89:6c:79:e8:e7:1b:68:16:ec:29:0e:57: 70:c1:92:0e:bc:0d:c9:e6:1c:b6:8a:d9:68:36:d1:f8:81:33: 5a:bd:14:a0:8b:53:89:35:92:44:3f:b4:82:82:97:fd:0c:7b: 06:ce:bf:a3:31:8e:09:e5:a4:d4:83:2b:e3:e6:15:c3:01:fa: 22:d5:85:68:90:39:c1:2d:06:07:95:54:68:25:32:72:f7:51: cd:39:17:75:e3:4e:46:46:e1:e9:a8:62:cd:b7:6c:af:3d:d3: 26:8d:78:b5:5f:ac:9f:c5:7e:1d:93:29:97:27:0a:22:4b:6a: d8:51:e2:25:eb:01:97:d9:33:31:04:9b:a5:27:ba:0f:4f:f8: fa:18:f8:85:df:ca:e0:82:0d:40:83:54:c5:8c:66:79:f5:79: 1b:bd:fa:b5:ae:6d:b1:23:6c:f5:e7:68:b9:88:6c:63:de:34: 3c:49:40:7b:92:17:4a:17:cf:63:99:62:59:ca:6c:ef:2b:f6: dd:8c:60:71:0a:98:c7:82:95:a5:83:d2:8e:71:ff:ce:60:4b: d9:d5:f1:d7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2XVWFiqW8/MJtAUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk NTVlZWE4MWYtYjIxNS00ZDM2LWEwZWMtMjU3OTQ2YjIzZWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KNaP1ZF00/d3XhrblKdrwzdLOfRsWYdFXKw fI2Zki2JU89fN3CLDlo803vODUXucIb9sNW2PFOsClE/Zon4RpU4lb9Ee0xr6mU1 F4NpvVU6nBA8DKbpn/hlP1mSTELOzlfFQEvCM0ToBHkMII2kGxbN3GtksOpODVgw T5Mq3qHOCu8lxFFE49Eb10IK6pXi9AZN/yYX43KgCTcFR+4/VmbrOS1cxxy+DxOz cFF3YGrcW+tUAG4zPl8a1O1h6xq5YUWHs04CEkskSd1gvZ2OwX6IJWAqRS3/3XGv mr3xAmCQaweXc17SjNevUuqR57t17CN6WawiKeYVfbIOnldUDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBveLbsFJKmWL3uG/C4Dn8JIWJt3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjQ1OTI4ODUtZjk1ZS0z Mjc5LWJjMjgtMzQ3NmE0ZTk5MmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAHln MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADDKsHfxQxRa7y5XqV4PYfWsa9XowN5SLkmeyt5+WMpAeLpSsR+a /w27wYlseejnG2gW7CkOV3DBkg68DcnmHLaK2Wg20fiBM1q9FKCLU4k1kkQ/tIKC l/0MewbOv6MxjgnlpNSDK+PmFcMB+iLVhWiQOcEtBgeVVGglMnL3Uc05F3XjTkZG 4emoYs23bK890yaNeLVfrJ/Ffh2TKZcnCiJLathR4iXrAZfZMzEEm6Unug9P+PoY +IXfyuCCDUCDVMWMZnn1eRu9+rWubbEjbPXnaLmIbGPeNDxJQHuSF0oXz2OZYlnK bO8r9t2MYHEKmMeClaWD0o5x/85gS9nV8dc= -----END CERTIFICATE-----Generated at Wed May 13 11:36:04 2026 by rpki-client