$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aaff607-f169-3e59-8ca8-9363f9e94a90.roa File: 3aaff607-f169-3e59-8ca8-9363f9e94a90.roa (raw, json) Hash identifier: nWnrCT+0B1jhkCrzgHfLmGQdjHRzKSCOg8GTfyY+wJM= Subject key identifier: 33:76:66:09:45:30:8F:4D:78:E1:11:6A:A7:5B:1B:5C:F7:9F:9C:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8EF56D5C9757BA2B366C20B0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aaff607-f169-3e59-8ca8-9363f9e94a90.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 397207 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:6d:5c:97:57:ba:2b:36:6c:20:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=72d94910-c34d-49de-b890-4c37ba13172c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a2:29:43:17:b2:4d:0a:6f:55:ef:d2:30:09: 48:41:7b:c4:c7:93:d6:29:ca:e8:1a:e9:42:0f:7b: bf:c2:93:7d:a9:f0:95:6c:35:77:ef:4d:64:e4:ff: 94:df:d6:fa:55:c6:f9:17:4b:da:43:4b:78:d7:ec: bf:8f:ff:4b:20:ed:f3:9e:3c:7b:b3:a7:c6:c6:c5: 10:b2:bd:0d:64:3c:97:58:d0:81:c8:2e:eb:bc:34: 62:71:64:46:d4:54:8a:20:cf:f4:be:25:d9:f2:71: 7b:39:f1:c0:ca:f6:f1:67:52:19:31:30:1e:67:81: 57:2d:84:3d:c4:be:59:01:18:bb:e8:83:3d:15:11: cb:af:99:6d:2d:d4:e1:cc:7c:e9:40:24:0b:aa:bb: 2b:6e:ba:33:15:6f:83:1d:4b:90:ca:f5:05:af:ee: 85:62:6f:41:5b:50:d6:0c:34:cb:05:7c:91:35:47: ae:cf:08:c7:a2:39:fb:6d:4f:e1:f7:44:ae:38:f1: b1:03:94:c5:54:10:c6:b6:d1:77:3f:2e:29:1c:b1: 3c:4f:ee:e3:be:a9:ef:de:ab:db:4d:87:cc:ed:de: f0:a1:69:86:b3:89:d6:50:2f:fd:52:a0:88:ec:01: e6:02:4c:a3:d4:4a:53:a6:ff:38:fa:5a:2e:a1:13: aa:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:76:66:09:45:30:8F:4D:78:E1:11:6A:A7:5B:1B:5C:F7:9F:9C:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3aaff607-f169-3e59-8ca8-9363f9e94a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:c2:b1:ea:6d:29:e5:a2:34:52:fb:14:9d:35:70:20:bd:e6: da:68:b4:13:6f:7f:b3:94:2f:02:64:78:97:ec:c9:b5:2f:9b: 78:43:26:09:ea:78:c0:26:00:40:e0:09:a1:a8:f8:24:94:42: 6b:d9:a8:5f:80:f5:5b:69:22:51:3a:07:61:2a:30:78:c6:39: b7:40:1d:c8:a7:45:98:07:00:e1:c5:54:97:6a:ab:e6:f3:fc: 7b:08:15:2c:ef:b2:73:d1:be:37:c1:48:51:c1:59:8f:61:1a: 07:56:aa:86:7c:8e:94:19:4f:45:f6:59:4e:66:60:ce:5c:5e: 6f:c9:82:15:a8:1d:84:aa:e5:5b:ee:89:cf:41:6e:eb:45:80: 6b:bc:72:fe:0a:6a:19:b8:84:35:49:0c:42:23:67:c6:ff:51: e4:d0:f9:63:71:ee:90:80:a3:88:62:09:13:78:83:3c:2a:23: 23:16:dd:57:63:fc:cc:74:56:33:78:e6:3a:34:75:95:16:2b: 7b:d9:cf:d4:ff:32:53:37:8a:b3:65:27:f9:53:98:95:f2:b0: d5:72:a4:95:a0:7b:40:f1:35:e8:a2:fc:6c:50:ab:ab:ac:dd: f8:9b:62:36:4a:c5:30:ef:b8:e1:ab:78:a3:5f:3a:ea:7f:83: dc:16:7f:99 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2O9W1cl1e6KzZsILAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NzJkOTQ5MTAtYzM0ZC00OWRlLWI4OTAtNGMzN2JhMTMxNzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKIpQxeyTQpvVe/SMAlIQXvEx5PWKcroGulC D3u/wpN9qfCVbDV3701k5P+U39b6Vcb5F0vaQ0t41+y/j/9LIO3znjx7s6fGxsUQ sr0NZDyXWNCByC7rvDRicWRG1FSKIM/0viXZ8nF7OfHAyvbxZ1IZMTAeZ4FXLYQ9 xL5ZARi76IM9FRHLr5ltLdThzHzpQCQLqrsrbrozFW+DHUuQyvUFr+6FYm9BW1DW DDTLBXyRNUeuzwjHojn7bU/h90SuOPGxA5TFVBDGttF3Py4pHLE8T+7jvqnv3qvb TYfM7d7woWmGs4nWUC/9UqCI7AHmAkyj1EpTpv84+louoROqtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDN2ZglFMI9NeOERaqdbG1z3n5zhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2FhZmY2MDctZjE2OS0z ZTU5LThjYTgtOTM2M2Y5ZTk0YTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKrCseptKeWiNFL7FJ01cCC95tpotBNvf7OULwJkeJfsybUvm3hD JgnqeMAmAEDgCaGo+CSUQmvZqF+A9VtpIlE6B2EqMHjGObdAHcinRZgHAOHFVJdq q+bz/HsIFSzvsnPRvjfBSFHBWY9hGgdWqoZ8jpQZT0X2WU5mYM5cXm/JghWoHYSq 5Vvuic9BbutFgGu8cv4Kahm4hDVJDEIjZ8b/UeTQ+WNx7pCAo4hiCRN4gzwqIyMW 3Vdj/Mx0VjN45jo0dZUWK3vZz9T/MlM3irNlJ/lTmJXysNVypJWge0DxNeii/GxQ q6us3fibYjZKxTDvuOGreKNfOup/g9wWf5k= -----END CERTIFICATE-----Generated at Wed May 13 13:01:53 2026 by rpki-client