$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0c2f2c-b6fa-3a96-a6bc-3f4ab4e55800.roa File: 4b0c2f2c-b6fa-3a96-a6bc-3f4ab4e55800.roa (raw, json) Hash identifier: NXpY81wbcX0Wx9tIrHGEz+U9vEfakH2WgyQqH2QLPMY= Subject key identifier: BC:7C:89:33:0E:1E:52:D9:0A:BE:CB:10:4A:62:FA:FB:4C:8C:04:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DAAE04F5FC3405EA938CDBFC0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0c2f2c-b6fa-3a96-a6bc-3f4ab4e55800.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 36623 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:4f:5f:c3:40:5e:a9:38:cd:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=c1d4ed53-02e2-41fb-a980-7ec213fc0e25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:64:cb:ac:e8:f3:e5:d6:cf:13:1f:61:a7:23: 78:b5:b7:54:bf:c5:b3:1a:35:f4:8c:80:71:e4:52: 5f:26:08:b6:5b:f1:9b:62:5d:bb:37:51:00:9b:69: 1d:a9:10:40:13:cb:fe:27:5e:be:14:00:27:0a:2b: 45:5a:6f:c7:e5:51:3f:4f:29:8c:a2:fd:be:80:94: 4f:ab:ef:e4:9b:ad:30:33:b7:99:99:b9:21:df:1e: 75:6f:c3:28:1f:e6:e8:d5:b0:30:e1:14:83:db:99: 8f:7c:2e:6b:ec:c0:ac:21:c6:c0:c9:ea:6f:cb:da: c7:58:d2:27:ac:c3:da:23:94:50:e7:bb:c7:bc:a1: f4:55:79:0e:41:8f:25:5c:84:f5:57:69:55:22:56: b9:46:2a:58:29:d1:41:b8:df:31:96:4d:22:de:5c: 09:5a:d3:6c:21:27:f1:4c:60:5b:ae:63:4a:1e:30: 40:79:36:25:c2:65:2b:17:0c:a7:3a:41:38:10:a9: d1:c2:47:26:e2:80:40:d5:9a:7f:d9:c6:e5:5c:e6: 50:8b:16:26:3a:69:5f:ea:97:a5:6e:ed:d1:a3:b0: 47:7f:79:1c:1e:ca:34:31:ed:f6:2d:cd:c2:20:0a: 19:21:f8:f7:f2:34:55:63:f9:27:4a:0d:fe:a9:dd: 7d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7C:89:33:0E:1E:52:D9:0A:BE:CB:10:4A:62:FA:FB:4C:8C:04:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4b0c2f2c-b6fa-3a96-a6bc-3f4ab4e55800.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:86:8e:82:65:10:d9:8b:b6:fe:a9:c8:0a:2c:41:73:12:04: 86:ec:31:10:03:cd:03:70:99:8f:06:d3:e9:9f:c0:85:a8:3e: 6b:bf:9f:ed:0e:c8:e4:4d:21:9d:71:86:da:33:c2:c1:31:78: cd:cc:8f:3a:35:25:a7:82:3b:ff:cd:34:80:f5:21:7a:da:da: 67:c5:72:6c:d8:12:60:fe:3a:9e:b8:2e:d4:5d:6f:aa:3f:aa: 83:1f:f0:da:ef:94:00:bf:48:fe:f7:b5:4c:b4:2b:55:11:06: fe:9e:fa:de:3f:f4:04:95:f9:9b:7b:1c:f9:44:08:2d:4b:08: 6d:d5:ca:e3:b0:6e:74:ae:af:9d:54:15:e9:34:41:20:fb:44: 85:c2:a9:78:fa:08:ce:e6:81:e4:08:1a:c5:85:74:0c:32:c2: 0e:b3:f9:8e:51:df:b3:89:74:09:ca:48:2c:c9:74:c7:79:dd: 07:97:7a:13:c4:c9:cc:7b:9c:8f:0e:8c:ae:60:9b:3d:b7:2e: ad:43:1b:66:ae:22:d1:f6:01:61:8c:ad:4e:f8:28:73:f7:d9: d0:e3:13:ba:7d:c6:42:a7:b6:75:90:c2:11:c7:7f:c2:19:8c: 91:ab:4b:6f:27:58:a7:4d:0b:30:08:2d:10:6a:24:c9:0e:f5: ec:84:bf:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4E9fw0BeqTjNv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk YzFkNGVkNTMtMDJlMi00MWZiLWE5ODAtN2VjMjEzZmMwZTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWTLrOjz5dbPEx9hpyN4tbdUv8WzGjX0jIBx 5FJfJgi2W/GbYl27N1EAm2kdqRBAE8v+J16+FAAnCitFWm/H5VE/TymMov2+gJRP q+/km60wM7eZmbkh3x51b8MoH+bo1bAw4RSD25mPfC5r7MCsIcbAyepvy9rHWNIn rMPaI5RQ57vHvKH0VXkOQY8lXIT1V2lVIla5RipYKdFBuN8xlk0i3lwJWtNsISfx TGBbrmNKHjBAeTYlwmUrFwynOkE4EKnRwkcm4oBA1Zp/2cblXOZQixYmOmlf6pel bu3Ro7BHf3kcHso0Me32Lc3CIAoZIfj38jRVY/knSg3+qd198QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLx8iTMOHlLZCr7LEEpi+vtMjARgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNGIwYzJmMmMtYjZmYS0z YTk2LWE2YmMtM2Y0YWI0ZTU1ODAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIuGjoJlENmLtv6pyAosQXMSBIbsMRADzQNwmY8G0+mfwIWoPmu/ n+0OyORNIZ1xhtozwsExeM3Mjzo1JaeCO//NNID1IXra2mfFcmzYEmD+Op64LtRd b6o/qoMf8NrvlAC/SP73tUy0K1URBv6e+t4/9ASV+Zt7HPlECC1LCG3VyuOwbnSu r51UFek0QSD7RIXCqXj6CM7mgeQIGsWFdAwywg6z+Y5R37OJdAnKSCzJdMd53QeX ehPEycx7nI8OjK5gmz23Lq1DG2auItH2AWGMrU74KHP32dDjE7p9xkKntnWQwhHH f8IZjJGrS28nWKdNCzAILRBqJMkO9eyEv4I= -----END CERTIFICATE-----Generated at Wed May 13 04:13:14 2026 by rpki-client