$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa File: 4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa (raw, json) Hash identifier: j+vDkLD7sweB5xXQR4Ggz4Xl/WW9L7HyPykfu+5HKZ8= Subject key identifier: 89:E0:53:12:A2:01:16:30:3C:BA:6E:41:C8:95:CF:E3:51:58:BE:EA Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DA11AE184E2D7B84B7CBC5970 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 396563 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:e1:84:e2:d7:b8:4b:7c:bc:59:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=bc146cc6-0788-4ae0-b8df-afa501f38c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:00:20:0d:6c:ec:96:fd:64:8f:4e:f7:b8:a2: 71:e5:0b:63:81:61:38:d5:ac:3e:ad:b3:ec:1c:ba: 1e:d1:86:18:7e:b6:82:0c:a7:99:61:92:e2:ec:bf: e2:91:f4:14:16:be:31:b5:97:15:06:2c:1c:97:7f: 91:3b:9b:35:da:c0:82:06:76:c9:71:0f:18:ca:42: ee:5b:cd:04:d0:d4:eb:90:02:35:4a:2b:04:89:8f: 57:b5:18:c7:e7:1f:2c:0f:48:36:7b:69:87:0f:65: 48:d2:e0:2d:84:46:ab:0d:84:54:04:79:d4:82:80: 4a:ff:20:4b:07:06:66:5d:dd:9b:d3:0d:67:5d:d5: bb:61:5a:13:d5:31:ec:46:e7:65:2d:0a:c0:69:e5: 16:9e:a6:74:7d:c7:68:14:af:63:47:77:8d:74:26: 31:8e:94:4a:1c:4c:1d:a6:5d:e0:20:91:a9:d0:6a: f1:08:25:ec:ba:88:8c:c4:be:fa:cd:25:e6:70:06: f2:d4:b0:13:3e:1c:6c:11:17:b7:97:41:fe:d8:a1: 93:2a:39:e6:4f:22:26:19:ac:9f:98:f3:ce:a9:9e: 06:23:46:a2:16:22:b1:e4:6b:b9:ee:fe:8e:33:fc: e3:be:75:85:4b:2f:39:a3:28:a4:10:f1:b7:34:43: 05:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E0:53:12:A2:01:16:30:3C:BA:6E:41:C8:95:CF:E3:51:58:BE:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4a5d04a8-7efe-3540-9c1b-eb517953d2e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:0c:11:b2:0a:b2:3e:57:dd:24:5c:a3:10:65:5f:dc:88:c9: e3:7a:36:d7:0d:f8:c5:51:a5:b6:81:4c:7a:bf:eb:f3:6f:4a: 4f:a4:28:1e:70:5a:a9:09:97:df:2b:d0:55:25:d8:59:8e:d0: 02:22:d2:aa:c6:4c:20:37:f7:64:ba:0f:e0:29:4b:5b:18:17: ea:84:f5:d1:a0:6c:6d:ca:cf:bb:e3:a4:4d:e8:57:f0:75:6a: 0c:7e:b1:91:ee:d0:5d:25:ff:dd:7d:15:03:50:ca:9b:68:79: ca:5a:87:ed:7c:63:72:da:13:42:b5:8a:75:92:ca:1b:86:3a: d9:47:c0:b5:20:f6:a1:00:b3:e8:10:66:0d:ba:af:00:a5:af: a3:a7:d1:21:b7:dc:03:83:a5:83:8b:64:43:8f:2d:39:7d:cf: 8b:3e:20:1f:e5:86:ff:60:52:d9:8f:12:67:65:b3:cc:9b:6a: d0:be:9c:b5:60:c5:b9:a2:22:37:37:1f:a6:7b:1d:d8:3c:cc: ad:51:35:9a:8a:f8:33:0f:7d:74:b8:ca:f8:76:79:64:41:af: a4:8e:ec:39:4f:6e:24:b4:1c:e5:fe:d5:76:12:35:4d:86:b2: 01:86:81:9d:10:d5:b9:ee:80:de:a9:01:45:1d:bd:bb:13:61: 74:77:71:87 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2hGuGE4te4S3y8WXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk YmMxNDZjYzYtMDc4OC00YWUwLWI4ZGYtYWZhNTAxZjM4YzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwAgDWzslv1kj073uKJx5QtjgWE41aw+rbPs HLoe0YYYfraCDKeZYZLi7L/ikfQUFr4xtZcVBiwcl3+RO5s12sCCBnbJcQ8YykLu W80E0NTrkAI1SisEiY9XtRjH5x8sD0g2e2mHD2VI0uAthEarDYRUBHnUgoBK/yBL BwZmXd2b0w1nXdW7YVoT1THsRudlLQrAaeUWnqZ0fcdoFK9jR3eNdCYxjpRKHEwd pl3gIJGp0GrxCCXsuoiMxL76zSXmcAby1LATPhxsERe3l0H+2KGTKjnmTyImGayf mPPOqZ4GI0aiFiKx5Gu57v6OM/zjvnWFSy85oyikEPG3NEMFiwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIngUxKiARYwPLpuQciVz+NRWL7qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGE1ZDA0YTgtN2VmZS0z NTQwLTljMWItZWI1MTc5NTNkMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAXDBGyCrI+V90kXKMQZV/ciMnjejbXDfjFUaW2 gUx6v+vzb0pPpCgecFqpCZffK9BVJdhZjtACItKqxkwgN/dkug/gKUtbGBfqhPXR oGxtys+746RN6FfwdWoMfrGR7tBdJf/dfRUDUMqbaHnKWoftfGNy2hNCtYp1ksob hjrZR8C1IPahALPoEGYNuq8Apa+jp9Eht9wDg6WDi2RDjy05fc+LPiAf5Yb/YFLZ jxJnZbPMm2rQvpy1YMW5oiI3Nx+mex3YPMytUTWaivgzD310uMr4dnlkQa+kjuw5 T24ktBzl/tV2EjVNhrIBhoGdENW57oDeqQFFHb27E2F0d3GH -----END CERTIFICATE-----Generated at Wed May 13 10:33:48 2026 by rpki-client