$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dd425b8-f2c4-3ec8-9033-83e1b506434b.roa File: 3dd425b8-f2c4-3ec8-9033-83e1b506434b.roa (raw, json) Hash identifier: E8rUDvAST9ZNzwTzJEiv4gKmahmYFdvlwPXc4qTWjOk= Subject key identifier: 74:00:CD:D4:01:56:6D:29:F2:B5:82:B7:C4:8A:18:6B:C8:3F:09:31 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D9B854DBDA945011049DCA500 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dd425b8-f2c4-3ec8-9033-83e1b506434b.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 397202 IP address blocks: 2001:502:7094::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:4d:bd:a9:45:01:10:49:dc:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=daeead46-6cd3-4f33-a436-bf575c45bee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:91:c6:f0:0d:90:ae:4d:42:47:25:42:a4:27: da:bb:a6:25:6f:8f:ce:92:4f:5c:a9:0c:5e:d3:7b: a8:6a:b5:24:5c:be:11:03:0c:d9:12:74:da:3f:4f: 8a:a0:df:8d:61:be:f9:c9:d2:c1:23:f8:8a:18:95: fe:c3:b7:da:68:cc:2e:09:a3:80:9d:1e:06:aa:06: 4e:b3:c2:6d:07:5b:be:68:f1:4c:9c:c4:0e:c1:99: 67:f8:4f:1f:48:c4:5c:d0:b4:8e:72:8f:ab:10:d1: 34:1a:7f:39:83:e1:a8:20:df:48:ab:de:d4:48:b3: 8e:20:05:7d:bb:0e:8e:d1:1e:c8:13:03:96:07:d6: f6:b3:88:87:3a:db:1a:4d:db:ae:65:00:fd:98:37: ac:db:67:a2:df:c3:c5:56:d1:a1:5c:6a:0a:ee:f2: 6b:ea:a5:09:92:32:35:e9:1b:69:82:b2:ce:8b:19: 89:4b:94:08:6d:b3:02:a8:03:51:18:58:b2:2b:2f: 46:b5:38:3a:bd:d9:b6:df:9c:55:0b:26:47:cc:7d: 73:5d:15:77:9d:ba:50:d2:2c:12:04:72:c8:75:6b: c0:39:18:87:3d:e9:81:d1:db:4e:49:37:6d:48:45: c6:81:33:5d:d4:e8:85:1d:d8:08:10:87:05:00:78: 26:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:00:CD:D4:01:56:6D:29:F2:B5:82:B7:C4:8A:18:6B:C8:3F:09:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3dd425b8-f2c4-3ec8-9033-83e1b506434b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:7094::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:9a:cd:cb:2f:02:1c:20:49:37:59:3a:52:c4:3a:1b:82:38: 35:9b:7e:76:bf:29:ae:a4:89:d1:6d:c7:31:bf:4d:af:e1:03: e5:88:4f:29:d9:f4:e4:05:c3:10:7a:f6:d0:63:59:18:5a:cc: 25:ec:2a:72:4e:da:6a:53:6f:ba:f0:5a:76:07:cf:a3:72:6a: bc:c7:ea:d3:5b:58:fc:a4:e1:ed:f9:da:7c:87:77:8a:a2:5a: 7b:31:57:98:5b:d3:af:ec:d9:c5:ff:bb:2a:7a:49:a8:b6:85: 43:f9:09:d9:03:2a:e9:1d:38:84:04:04:08:25:a1:04:e1:30: ed:a0:39:ab:58:21:1f:ec:cb:28:ff:98:f3:72:74:11:1f:0b: e8:6b:ef:2d:19:fc:3f:6c:d2:25:c6:25:1c:af:0f:02:3d:21: 10:d6:13:5f:b7:d1:b5:92:51:2b:a9:e7:ed:77:58:96:87:0e: 23:ca:18:7d:d3:5a:66:53:f2:0a:3b:45:67:85:f3:0c:42:4b: 17:43:6c:1d:14:cc:ef:62:d1:26:1f:16:5f:94:90:57:31:1d: 0d:19:a1:ce:d7:3a:ea:b6:b0:f4:8e:b8:c3:14:70:1d:5c:4a: 4b:5c:6c:8e:97:2b:50:3c:ee:4b:05:9e:94:14:ad:4a:f3:80: 75:f4:46:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2bhU29qUUBEEncpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk ZGFlZWFkNDYtNmNkMy00ZjMzLWE0MzYtYmY1NzVjNDViZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpHG8A2Qrk1CRyVCpCfau6Ylb4/Okk9cqQxe 03uoarUkXL4RAwzZEnTaP0+KoN+NYb75ydLBI/iKGJX+w7faaMwuCaOAnR4GqgZO s8JtB1u+aPFMnMQOwZln+E8fSMRc0LSOco+rENE0Gn85g+GoIN9Iq97USLOOIAV9 uw6O0R7IEwOWB9b2s4iHOtsaTduuZQD9mDes22ei38PFVtGhXGoK7vJr6qUJkjI1 6RtpgrLOixmJS5QIbbMCqANRGFiyKy9GtTg6vdm235xVCyZHzH1zXRV3nbpQ0iwS BHLIdWvAORiHPemB0dtOSTdtSEXGgTNd1OiFHdgIEIcFAHgmEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHQAzdQBVm0p8rWCt8SKGGvIPwkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2RkNDI1YjgtZjJjNC0z ZWM4LTkwMzMtODNlMWI1MDY0MzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAnCU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABuazcsvAhwgSTdZOlLEOhuCODWbfna/Ka6kidFtxzG/Ta/hA+WI TynZ9OQFwxB69tBjWRhazCXsKnJO2mpTb7rwWnYHz6NyarzH6tNbWPyk4e352nyH d4qiWnsxV5hb06/s2cX/uyp6Sai2hUP5CdkDKukdOIQEBAgloQThMO2gOatYIR/s yyj/mPNydBEfC+hr7y0Z/D9s0iXGJRyvDwI9IRDWE1+30bWSUSup5+13WJaHDiPK GH3TWmZT8go7RWeF8wxCSxdDbB0UzO9i0SYfFl+UkFcxHQ0Zoc7XOuq2sPSOuMMU cB1cSktcbI6XK1A87ksFnpQUrUrzgHX0RmQ= -----END CERTIFICATE-----Generated at Wed May 13 16:17:43 2026 by rpki-client