$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cf5aee7-218f-34db-9045-d74ae5f39244.roa File: 9cf5aee7-218f-34db-9045-d74ae5f39244.roa (raw, json) Hash identifier: cGdwIEn+X/nfwn+KBZMf5G5FwlH6pcytZWvLMzcFdBE= Subject key identifier: 68:C8:2D:B5:2A:88:95:9F:5C:3A:44:66:5C:51:65:8F:41:AA:2D:60 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D95F0156B26CBD597A92C01E0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cf5aee7-218f-34db-9045-d74ae5f39244.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 7342 IP address blocks: 2001:503:91ef::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:15:6b:26:cb:d5:97:a9:2c:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=9aa4f9af-45de-4641-9eaa-8203eeed2afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:13:eb:77:b7:83:2f:ac:3b:ee:b3:19:09:ef: 60:29:49:85:e5:ea:06:ce:49:17:62:27:b5:f9:96: 13:ae:a1:12:02:c2:34:d8:5c:5a:07:ad:2f:44:53: 80:e9:56:a0:18:b8:d9:7f:91:50:fc:f6:78:da:45: bd:7a:56:b6:e9:f9:78:ce:49:8d:39:01:bc:e8:33: 4d:b3:bc:7a:83:e0:df:a9:d4:41:db:6a:eb:17:b2: 42:2f:9b:3e:27:5e:e0:5f:e0:75:5d:c9:8d:b8:a7: b5:cd:ef:86:bf:fa:f9:59:6f:c3:c1:c1:89:30:d4: ce:18:9f:4f:91:0a:5a:c0:47:db:c7:0c:7b:cc:42: 25:e8:ae:93:9b:79:b5:db:88:9f:26:57:df:fd:b2: 5f:af:28:95:99:4c:87:4b:6d:ae:ba:26:70:1e:1c: 14:b6:f3:2c:bd:b0:08:31:4c:9c:31:a8:86:1b:40: 46:e5:e4:49:80:c2:59:6d:41:f2:5e:c8:c9:37:13: 63:0b:a4:04:b9:73:1c:c8:1c:79:8b:c1:04:58:29: c5:68:b5:58:10:3e:a0:0d:a0:97:cf:24:16:b1:88: 5b:37:0b:92:10:70:3f:d0:d2:87:da:fb:7a:de:6d: 5d:b8:4f:9a:77:bc:82:07:e5:11:8b:22:a6:6d:72: c6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C8:2D:B5:2A:88:95:9F:5C:3A:44:66:5C:51:65:8F:41:AA:2D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9cf5aee7-218f-34db-9045-d74ae5f39244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:91ef::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:8a:3e:92:f1:d3:11:d0:24:63:29:17:e0:f7:96:39:be:9b: f8:03:d4:ec:d6:95:f9:f1:43:0f:1c:4e:8f:48:d1:33:17:b0: c2:f8:78:7c:f1:df:72:97:1d:97:13:d7:c3:58:25:2c:7d:48: d7:b7:77:76:f7:9c:da:ce:38:e4:93:15:94:e3:c2:c1:57:4b: 01:82:dd:a6:02:5f:57:9e:d5:a8:5c:f3:a5:ad:26:2c:b5:5e: 53:05:20:02:c7:35:36:af:44:9c:c9:3d:25:96:0f:e6:86:0d: b3:65:1a:f2:a6:04:a5:82:cb:50:de:a9:08:46:b1:b8:9c:56: f7:eb:76:47:37:87:61:8b:e7:1d:e8:56:3a:58:18:44:63:5f: 0c:b0:5a:56:6e:73:2c:fa:9c:0d:de:a3:95:b4:c1:56:83:1b: 49:c7:41:03:0a:c7:e2:b7:81:66:27:86:04:0b:16:6a:25:f2: 1f:c3:45:af:26:c9:cf:8f:b0:d2:8c:8d:da:a5:3b:44:c1:bd: 5c:49:ac:1d:ef:6a:fe:ea:ab:da:56:3d:d8:1f:bf:dd:19:79: 05:ec:ad:48:17:be:6b:6e:56:ec:dc:b6:69:e7:ea:22:90:0b: 30:ba:76:41:32:c4:8a:9e:fe:30:d1:e1:68:1d:6d:19:90:6e: d1:fa:38:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2V8BVrJsvVl6ksAeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk OWFhNGY5YWYtNDVkZS00NjQxLTllYWEtODIwM2VlZWQyYWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghPrd7eDL6w77rMZCe9gKUmF5eoGzkkXYie1 +ZYTrqESAsI02FxaB60vRFOA6VagGLjZf5FQ/PZ42kW9ela26fl4zkmNOQG86DNN s7x6g+DfqdRB22rrF7JCL5s+J17gX+B1XcmNuKe1ze+Gv/r5WW/DwcGJMNTOGJ9P kQpawEfbxwx7zEIl6K6Tm3m124ifJlff/bJfryiVmUyHS22uuiZwHhwUtvMsvbAI MUycMaiGG0BG5eRJgMJZbUHyXsjJNxNjC6QEuXMcyBx5i8EEWCnFaLVYED6gDaCX zyQWsYhbNwuSEHA/0NKH2vt63m1duE+ad7yCB+URiyKmbXLGLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGjILbUqiJWfXDpEZlxRZY9Bqi1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOWNmNWFlZTctMjE4Zi0z NGRiLTkwNDUtZDc0YWU1ZjM5MjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA5Hv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGaKPpLx0xHQJGMpF+D3ljm+m/gD1OzWlfnxQw8cTo9I0TMXsML4 eHzx33KXHZcT18NYJSx9SNe3d3b3nNrOOOSTFZTjwsFXSwGC3aYCX1ee1ahc86Wt Jiy1XlMFIALHNTavRJzJPSWWD+aGDbNlGvKmBKWCy1DeqQhGsbicVvfrdkc3h2GL 5x3oVjpYGERjXwywWlZucyz6nA3eo5W0wVaDG0nHQQMKx+K3gWYnhgQLFmol8h/D Ra8myc+PsNKMjdqlO0TBvVxJrB3vav7qq9pWPdgfv90ZeQXsrUgXvmtuVuzctmnn 6iKQCzC6dkEyxIqe/jDR4WgdbRmQbtH6OKM= -----END CERTIFICATE-----Generated at Wed May 13 08:38:39 2026 by rpki-client