$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4010130a-48f2-36c6-9707-927bba9ecc78.roa File: 4010130a-48f2-36c6-9707-927bba9ecc78.roa (raw, json) Hash identifier: 1uWppHUSXxZYSeormbaGTrLOK0CLz6GOFAKwDdO1meE= Subject key identifier: C5:55:70:4C:4D:17:C7:56:65:EC:20:71:E8:25:AE:7B:4E:B6:58:9E Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D9A4B8BE4B12A7F81B08A69E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4010130a-48f2-36c6-9707-927bba9ecc78.roa Signing time: Thu 23 Apr 2026 14:28:17 +0000 ROA not before: Thu 23 Apr 2026 14:28:17 +0000 ROA not after: Wed 22 Jul 2026 14:28:17 +0000 asID: 396600 IP address blocks: 2001:503:a83e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:4b:8b:e4:b1:2a:7f:81:b0:8a:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 14:28:17 2026 GMT Not After : Jul 22 14:28:17 2026 GMT Subject: CN=2740e25f-3af1-4013-a44a-c7fa1797b821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:76:a3:ef:71:33:ef:ba:2a:b6:f3:c0:1b:95: e0:e8:56:29:11:1f:6d:bb:82:c1:66:f5:15:d0:6a: d5:11:32:df:06:2b:92:db:0a:56:f5:98:63:a6:38: 03:b8:0a:84:50:39:b7:8b:a3:5a:d3:01:6c:ab:7a: 10:22:a9:7d:62:17:77:ec:40:12:d8:af:f6:6a:b2: 13:5c:c6:5b:34:b9:13:64:44:1e:d7:ec:09:06:14: 74:66:a3:27:37:1b:2c:ef:22:00:93:8f:4d:cd:d4: 9b:d2:ee:d4:24:a2:e3:86:50:bd:f8:11:cd:a7:7e: d9:08:91:60:b5:14:e6:80:83:1f:5d:e7:1e:1a:30: 83:66:be:f7:0c:8f:37:4b:0d:82:0c:f5:17:b9:66: 94:78:c9:19:c5:97:b4:98:45:85:2c:10:74:a9:1c: a7:88:e2:35:a0:d8:47:68:01:d5:0e:80:4f:ca:cc: d2:34:05:df:5a:fc:6f:20:af:f1:9c:2c:12:00:24: c4:92:7b:61:73:b2:a0:e1:a9:01:86:92:e0:41:c3: 09:99:94:22:3f:40:21:59:f7:79:d5:0f:c2:dd:e6: 0d:a0:fb:42:2c:2b:80:eb:ca:d6:a0:96:39:bb:86: 90:8a:c6:a8:e2:59:6b:a0:48:a9:de:9b:70:23:d8: 3d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:55:70:4C:4D:17:C7:56:65:EC:20:71:E8:25:AE:7B:4E:B6:58:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4010130a-48f2-36c6-9707-927bba9ecc78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:a83e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:b9:3b:c0:9e:d8:13:ba:97:13:cd:cf:2b:1e:14:58:34:91: 82:e9:b3:88:44:43:e6:7d:18:17:aa:7e:f2:a4:fa:30:1b:f5: 1d:9f:6b:cd:40:b0:04:fb:a9:5c:57:50:df:1f:fe:9f:64:fd: 53:44:15:71:75:46:c1:26:60:30:05:f0:f4:65:d6:e5:9e:1f: 51:8f:5a:38:13:47:69:8f:14:8d:c3:fd:c3:a4:80:33:ff:02: 3e:72:a9:ab:24:de:2a:70:60:f7:d7:55:dc:d9:fe:18:a3:a0: 89:bd:4f:19:13:0b:fe:7e:62:da:fd:7a:60:71:52:79:11:61: b8:16:cf:0f:8c:f7:04:32:3e:7d:71:99:f6:2f:81:42:7a:07: bd:8d:3e:9a:42:44:df:48:03:24:00:e2:4b:5d:d2:3e:4e:7b: 44:34:fd:81:ef:9e:df:93:77:60:28:09:88:7d:a8:f0:63:5d: 70:e6:55:c6:e9:da:2e:79:84:9d:ab:3f:1e:ac:22:35:94:df: 26:62:0b:ad:2f:16:65:26:1b:6a:e8:59:11:a9:c1:9f:3e:4a: 20:16:ac:29:a8:47:7d:c8:23:2b:b2:19:6c:7f:54:4b:ca:d4: e1:8b:fb:33:91:95:d3:4c:91:e3:41:23:09:df:2e:d5:69:e9: a2:df:0b:ae -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2aS4vksSp/gbCKaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMzE0MjgxN1oXDTI2MDcyMjE0MjgxN1owLzEtMCsGA1UEAxMk Mjc0MGUyNWYtM2FmMS00MDEzLWE0NGEtYzdmYTE3OTdiODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXaj73Ez77oqtvPAG5Xg6FYpER9tu4LBZvUV 0GrVETLfBiuS2wpW9ZhjpjgDuAqEUDm3i6Na0wFsq3oQIql9Yhd37EAS2K/2arIT XMZbNLkTZEQe1+wJBhR0ZqMnNxss7yIAk49NzdSb0u7UJKLjhlC9+BHNp37ZCJFg tRTmgIMfXeceGjCDZr73DI83Sw2CDPUXuWaUeMkZxZe0mEWFLBB0qRyniOI1oNhH aAHVDoBPyszSNAXfWvxvIK/xnCwSACTEknthc7Kg4akBhpLgQcMJmZQiP0AhWfd5 1Q/C3eYNoPtCLCuA68rWoJY5u4aQisao4llroEip3ptwI9g9YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMVVcExNF8dWZewgceglrntOtlieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDAxMDEzMGEtNDhmMi0z NmM2LTk3MDctOTI3YmJhOWVjYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA6g+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALG5O8Ce2BO6lxPNzyseFFg0kYLps4hEQ+Z9GBeqfvKk+jAb9R2f a81AsAT7qVxXUN8f/p9k/VNEFXF1RsEmYDAF8PRl1uWeH1GPWjgTR2mPFI3D/cOk gDP/Aj5yqask3ipwYPfXVdzZ/hijoIm9TxkTC/5+Ytr9emBxUnkRYbgWzw+M9wQy Pn1xmfYvgUJ6B72NPppCRN9IAyQA4ktd0j5Oe0Q0/YHvnt+Td2AoCYh9qPBjXXDm Vcbp2i55hJ2rPx6sIjWU3yZiC60vFmUmG2roWRGpwZ8+SiAWrCmoR33IIyuyGWx/ VEvK1OGL+zORldNMkeNBIwnfLtVp6aLfC64= -----END CERTIFICATE-----Generated at Wed May 13 11:50:06 2026 by rpki-client