$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f571db2-8bbf-32cf-bf07-d0b16992b020.roa File: 3f571db2-8bbf-32cf-bf07-d0b16992b020.roa (raw, json) Hash identifier: yYnbYYhyUqqgdfFO7bZdKaj3CZSwgp08j90aaF8qG9c= Subject key identifier: F2:B2:05:E1:50:04:AF:5E:E0:05:4A:F0:E2:BE:2C:32:1B:84:36:44 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DAAE02E18A84D9D2BA9D53400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f571db2-8bbf-32cf-bf07-d0b16992b020.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 397199 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:2e:18:a8:4d:9d:2b:a9:d5:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=e6615745-354a-47ca-90f9-0461f88db762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:33:f5:85:59:5c:5a:1e:b7:f6:1c:3c:9d:51: c6:ca:93:59:23:a3:fb:2b:0d:76:63:4f:dd:f0:b8: 1d:37:cb:89:23:52:15:11:16:82:b8:ba:d1:01:83: d6:6f:a4:d6:5f:5d:3a:5d:f0:e3:2c:6c:79:d5:36: 18:79:6c:52:f7:a3:67:d1:a9:e9:2c:4f:05:29:89: c4:0d:00:40:6c:ee:a2:a9:12:a8:36:f3:f9:4c:71: 82:8c:b8:b3:d0:16:ea:75:c9:53:ee:e6:1e:7e:43: 15:7e:f2:4e:ec:9a:91:5b:88:0f:85:64:c1:54:14: ef:86:f7:39:54:31:d9:89:73:5f:2a:6a:7a:c7:a6: 17:46:49:d9:e6:14:9a:fc:06:94:6a:bb:6a:51:f7: e1:c8:da:84:5d:6f:60:54:23:fb:c8:98:2a:0d:1c: 9a:c8:db:af:55:d7:5c:6d:ab:d7:27:09:0c:c6:95: f6:59:1a:75:d9:ed:32:08:ec:64:86:3e:2c:37:d2: 07:13:80:12:29:54:0a:a4:5c:31:d3:4d:fe:c6:f1: fb:dd:a3:1b:ee:93:08:94:d6:93:d3:05:6d:f9:7e: e1:c2:6f:c6:2e:b1:97:bc:f9:21:f9:ee:88:44:ce: 10:eb:83:cc:24:82:8a:c4:53:9d:f3:60:d2:50:28: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:05:E1:50:04:AF:5E:E0:05:4A:F0:E2:BE:2C:32:1B:84:36:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3f571db2-8bbf-32cf-bf07-d0b16992b020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:70:e4:47:fe:b4:a5:22:94:c0:01:cc:c1:2a:f2:c9:a0:7c: 4a:db:43:0a:bb:c0:f3:fc:4f:df:46:06:cb:c1:19:e7:d7:55: 14:33:9b:90:38:e0:03:b0:93:06:03:b1:74:cc:94:93:74:b6: 11:0e:3a:94:ab:c3:28:b5:3f:69:bb:59:4c:4d:1c:85:1b:20: fa:88:72:6b:68:ab:8c:a8:5b:36:cd:a3:c0:64:96:e4:6e:e8: b3:dc:8c:f9:21:07:47:89:21:71:48:b4:bd:04:17:b3:f1:ba: 04:5f:70:83:bd:00:df:ba:1f:e7:ab:cf:dd:c4:51:03:2b:25: 3a:17:1d:3e:13:65:52:85:a8:0b:cc:12:b0:76:59:3f:d1:f0: d9:61:da:1d:ff:a1:fd:df:88:36:7b:23:80:3d:61:40:5b:62: fd:e5:80:8f:d6:8d:94:8b:4c:6e:80:8f:a5:cc:6f:3a:b1:0f: e2:cb:44:77:e8:08:c8:86:aa:dc:78:1f:72:db:66:8a:97:f0: 98:9a:b3:b7:20:76:eb:17:d9:90:7c:54:c3:32:c8:4c:b3:d8: 46:3d:34:fb:d1:40:75:ba:84:a3:2e:04:ee:eb:98:c4:b5:c1: b6:84:be:72:fd:98:d6:c9:7c:ea:ee:5d:e3:f1:05:24:d8:9c: 33:67:27:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4C4YqE2dK6nVNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk ZTY2MTU3NDUtMzU0YS00N2NhLTkwZjktMDQ2MWY4OGRiNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDP1hVlcWh639hw8nVHGypNZI6P7Kw12Y0/d 8LgdN8uJI1IVERaCuLrRAYPWb6TWX106XfDjLGx51TYYeWxS96Nn0anpLE8FKYnE DQBAbO6iqRKoNvP5THGCjLiz0BbqdclT7uYefkMVfvJO7JqRW4gPhWTBVBTvhvc5 VDHZiXNfKmp6x6YXRknZ5hSa/AaUartqUffhyNqEXW9gVCP7yJgqDRyayNuvVddc bavXJwkMxpX2WRp12e0yCOxkhj4sN9IHE4ASKVQKpFwx003+xvH73aMb7pMIlNaT 0wVt+X7hwm/GLrGXvPkh+e6IRM4Q64PMJIKKxFOd82DSUChdgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPKyBeFQBK9e4AVK8OK+LDIbhDZEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2Y1NzFkYjItOGJiZi0z MmNmLWJmMDctZDBiMTY5OTJiMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJdw5Ef+tKUilMABzMEq8smgfErbQwq7wPP8T99GBsvBGefXVRQz m5A44AOwkwYDsXTMlJN0thEOOpSrwyi1P2m7WUxNHIUbIPqIcmtoq4yoWzbNo8Bk luRu6LPcjPkhB0eJIXFItL0EF7PxugRfcIO9AN+6H+erz93EUQMrJToXHT4TZVKF qAvMErB2WT/R8Nlh2h3/of3fiDZ7I4A9YUBbYv3lgI/WjZSLTG6Aj6XMbzqxD+LL RHfoCMiGqtx4H3LbZoqX8Jias7cgdusX2ZB8VMMyyEyz2EY9NPvRQHW6hKMuBO7r mMS1wbaEvnL9mNbJfOruXePxBSTYnDNnJxo= -----END CERTIFICATE-----Generated at Wed May 13 06:54:03 2026 by rpki-client