$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af834ca-64d1-3d15-898b-7f51e197de29.roa File: 9af834ca-64d1-3d15-898b-7f51e197de29.roa (raw, json) Hash identifier: ZG/u9suhjrKBSsMB1DbN7uvcAQ6mjfCopkR7KQ4KiqM= Subject key identifier: 46:F3:8D:1F:96:36:00:74:D2:AF:A7:4A:31:07:B3:4F:00:46:33:42 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DA84F2D16433067C6EB597200 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af834ca-64d1-3d15-898b-7f51e197de29.roa Signing time: Tue 28 Apr 2026 14:56:54 +0000 ROA not before: Tue 28 Apr 2026 14:56:54 +0000 ROA not after: Mon 27 Jul 2026 14:56:54 +0000 asID: 36622 IP address blocks: 2001:503:eea3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:4f:2d:16:43:30:67:c6:eb:59:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 28 14:56:54 2026 GMT Not After : Jul 27 14:56:54 2026 GMT Subject: CN=403f6897-e8bc-427e-9d9a-fa8df5b5dd0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6b:de:24:78:c5:ad:0a:e9:54:8a:cb:ac:a7: e2:c0:13:e4:9b:a8:40:7e:f7:6f:f2:bf:65:1c:a4: 12:c8:64:92:2e:f6:53:9b:9d:48:27:e5:58:19:d2: e2:46:80:06:dc:50:e3:75:63:e4:65:7d:38:77:0e: 9c:4f:ce:0f:38:68:54:88:41:da:73:28:01:c4:df: b1:43:03:d8:2f:3d:66:c8:4f:35:45:e9:a0:cf:00: a9:78:3a:f0:89:b9:c4:86:d3:9b:94:b3:39:d3:b3: f0:04:ee:cb:84:28:22:4b:3e:90:4b:18:9d:df:40: 88:96:c4:b6:d6:ad:7e:67:58:b8:13:10:de:bb:6c: 27:d2:27:97:45:5b:0b:a8:ac:03:1f:60:fb:23:d5: 55:cf:7f:8f:a9:34:bc:67:3d:38:11:c8:cf:73:5e: be:6e:5b:a3:3b:17:fe:07:bf:96:fd:68:83:68:99: 6f:da:1e:35:65:af:7c:dc:4e:29:39:54:dc:86:87: 5a:22:c7:29:54:ff:a8:a2:a4:03:86:4f:cf:24:5d: 99:28:53:9d:3a:69:ea:37:da:5e:c1:51:51:a2:f5: ac:1e:f7:3e:7a:3d:fd:39:b2:c1:b2:0e:f0:c1:be: 8a:76:bd:48:5e:e4:f9:09:ca:20:f1:54:cd:e7:01: c3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F3:8D:1F:96:36:00:74:D2:AF:A7:4A:31:07:B3:4F:00:46:33:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9af834ca-64d1-3d15-898b-7f51e197de29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:eea3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:a9:d8:3f:4f:f6:bd:97:ec:5a:c2:0b:4d:18:3b:11:b3:44: 5d:46:ad:c8:8b:12:ad:32:8f:69:c6:6d:62:91:df:a8:c8:1f: 4c:71:c3:8f:e7:d0:8b:f7:7e:03:df:ca:7d:bd:09:fd:ad:e0: 65:7e:e2:47:2b:a7:b6:70:45:e9:21:8c:55:fe:69:0f:bc:d1: 25:35:06:e6:5b:24:26:86:42:2e:5d:2f:66:5a:19:ba:40:28: bf:b8:ad:f2:6e:b4:11:3c:cd:df:1d:11:52:91:2c:16:63:55: f2:cf:cc:fd:97:70:e6:94:ae:71:df:31:9c:2e:9d:3e:1d:db: 35:52:c4:1c:4b:31:73:48:90:40:e9:e4:f0:c4:d4:d3:2d:bf: 0a:59:04:ec:2a:62:e5:90:32:fa:46:09:2d:1f:2a:f2:ef:f5: 81:4a:9d:92:1d:0e:c2:e2:37:f7:a0:36:84:02:e1:d3:f4:bd: f7:02:3c:e9:aa:1b:8f:8b:7d:38:3e:84:84:ef:c2:6c:94:25: 8f:08:1e:ca:65:f3:0f:25:e9:c4:6f:01:95:d1:e4:f1:96:00: a6:d9:51:88:2e:6d:ee:fc:8d:30:90:ce:b0:00:dd:56:c2:0f: c2:b9:24:5d:e2:0c:d9:63:d0:ec:b4:24:d1:5b:e2:44:f3:f4: ca:43:c4:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oTy0WQzBnxutZcgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyODE0NTY1NFoXDTI2MDcyNzE0NTY1NFowLzEtMCsGA1UEAxMk NDAzZjY4OTctZThiYy00MjdlLTlkOWEtZmE4ZGY1YjVkZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGveJHjFrQrpVIrLrKfiwBPkm6hAfvdv8r9l HKQSyGSSLvZTm51IJ+VYGdLiRoAG3FDjdWPkZX04dw6cT84POGhUiEHacygBxN+x QwPYLz1myE81RemgzwCpeDrwibnEhtOblLM507PwBO7LhCgiSz6QSxid30CIlsS2 1q1+Z1i4ExDeu2wn0ieXRVsLqKwDH2D7I9VVz3+PqTS8Zz04EcjPc16+blujOxf+ B7+W/WiDaJlv2h41Za983E4pOVTchodaIscpVP+ooqQDhk/PJF2ZKFOdOmnqN9pe wVFRovWsHvc+ej39ObLBsg7wwb6Kdr1IXuT5Ccog8VTN5wHDYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEbzjR+WNgB00q+nSjEHs08ARjNCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWFmODM0Y2EtNjRkMS0z ZDE1LTg5OGItN2Y1MWUxOTdkZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ2p2D9P9r2X7FrCC00YOxGzRF1GrciLEq0yj2nGbWKR36jIH0xx w4/n0Iv3fgPfyn29Cf2t4GV+4kcrp7ZwRekhjFX+aQ+80SU1BuZbJCaGQi5dL2Za GbpAKL+4rfJutBE8zd8dEVKRLBZjVfLPzP2XcOaUrnHfMZwunT4d2zVSxBxLMXNI kEDp5PDE1NMtvwpZBOwqYuWQMvpGCS0fKvLv9YFKnZIdDsLiN/egNoQC4dP0vfcC POmqG4+LfTg+hITvwmyUJY8IHspl8w8l6cRvAZXR5PGWAKbZUYgube78jTCQzrAA 3VbCD8K5JF3iDNlj0Oy0JNFb4kTz9MpDxFg= -----END CERTIFICATE-----Generated at Wed May 13 09:54:38 2026 by rpki-client