$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a54e4485-008e-3ae9-a689-c6a08e3980fa.roa File: a54e4485-008e-3ae9-a689-c6a08e3980fa.roa (raw, json) Hash identifier: m4M5JvFyHIkyQK+B8R6EuBy1M79n/KbbO/tyOSDoa9A= Subject key identifier: 38:9C:EA:EC:48:15:A7:49:59:8B:AF:D7:8F:BF:AE:60:29:70:C2:A8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D9A4B859BC5D69720152CE600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a54e4485-008e-3ae9-a689-c6a08e3980fa.roa Signing time: Thu 23 Apr 2026 14:28:14 +0000 ROA not before: Thu 23 Apr 2026 14:28:14 +0000 ROA not after: Wed 22 Jul 2026 14:28:14 +0000 asID: 396567 IP address blocks: 2001:503:a83e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:4b:85:9b:c5:d6:97:20:15:2c:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 23 14:28:14 2026 GMT Not After : Jul 22 14:28:14 2026 GMT Subject: CN=5f1a6d1a-4f70-4d6a-8815-f02539100b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:19:bb:10:c5:b8:70:e2:7a:80:77:7c:aa:d4: e6:68:06:13:40:f6:db:b6:10:b0:c3:d8:6d:9b:11: 7b:0f:d5:62:3d:18:91:c4:16:0e:cb:22:50:9f:b4: 16:11:ae:ba:70:95:51:65:92:df:b2:6b:5c:58:ce: ac:b6:1a:15:20:4c:5c:54:63:93:75:18:1d:29:87: 2e:55:8d:76:33:f0:f9:18:8e:6f:ee:9d:51:51:e3: cc:29:e0:ce:76:4b:4f:46:a4:68:ea:b4:38:10:32: 9b:3b:0a:31:f8:4e:6f:b8:f9:04:b8:38:fd:65:c6: 07:aa:fc:c0:11:f6:6d:af:b0:7c:55:d7:a0:b0:bb: 0e:af:82:28:de:a0:2a:21:9f:fc:56:ee:6e:53:22: 35:c0:92:ed:0d:de:5c:09:1b:6c:a3:36:29:b6:7e: b3:d9:b1:fc:4e:f2:63:bc:a8:34:0c:d4:91:4a:1b: 98:e3:5e:9c:ae:f1:38:ec:62:34:ef:80:62:14:44: ce:9c:28:3b:4f:25:b3:0c:4a:c3:1c:14:cf:71:0b: 74:72:f9:53:37:79:62:b2:5a:09:ea:e9:63:d1:67: 9b:89:9c:da:cb:f3:69:34:7b:93:1b:45:ec:74:5f: df:f7:b9:92:ba:05:a0:c4:5f:40:44:a5:08:79:b5: 5c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9C:EA:EC:48:15:A7:49:59:8B:AF:D7:8F:BF:AE:60:29:70:C2:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a54e4485-008e-3ae9-a689-c6a08e3980fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:a83e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:5a:25:32:46:24:aa:72:97:95:bd:02:07:9e:86:22:bf:28: 78:cf:87:b8:8a:c9:b3:26:00:b5:ec:1c:be:a3:b7:28:6d:a5: ee:65:ff:d4:c5:a8:b5:69:28:a2:74:d7:72:e5:d7:23:00:f9: d5:3f:04:69:29:59:22:ca:d5:5b:8d:96:60:e8:a0:56:ba:7f: a2:1f:bb:18:b3:d0:e9:eb:72:0f:8c:6a:23:1e:ac:9c:63:b7: 37:14:34:bf:69:16:16:4f:fc:a8:23:dc:a1:10:bf:b7:67:58: 58:ae:b5:4a:df:5f:ca:f7:7e:8b:75:c2:3a:5a:77:5b:31:a2: 9e:6d:8e:71:e2:1d:8c:d8:52:7f:be:3c:8c:7c:98:7e:57:a9: ac:d4:48:2f:a9:0e:0f:7c:32:a9:db:3e:2e:35:7d:3e:56:c1: 71:bf:77:d9:bd:8d:d8:b1:fc:cd:1a:b8:44:31:8a:0a:94:db: 41:13:62:6e:d2:c3:69:ba:26:bb:ff:a1:85:72:3e:d8:7a:8f: f4:cd:39:ee:ca:70:95:53:4e:80:7a:93:34:a3:1a:76:92:c2: c2:21:c6:9d:97:1e:23:f5:67:37:02:ba:91:cc:c2:cf:3e:d8: 15:8c:07:64:cd:cb:63:a2:d6:c1:87:bc:a1:0b:f9:a3:fd:71: a8:17:a7:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2aS4WbxdaXIBUs5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyMzE0MjgxNFoXDTI2MDcyMjE0MjgxNFowLzEtMCsGA1UEAxMk NWYxYTZkMWEtNGY3MC00ZDZhLTg4MTUtZjAyNTM5MTAwYjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxm7EMW4cOJ6gHd8qtTmaAYTQPbbthCww9ht mxF7D9ViPRiRxBYOyyJQn7QWEa66cJVRZZLfsmtcWM6sthoVIExcVGOTdRgdKYcu VY12M/D5GI5v7p1RUePMKeDOdktPRqRo6rQ4EDKbOwox+E5vuPkEuDj9ZcYHqvzA EfZtr7B8VdegsLsOr4Io3qAqIZ/8Vu5uUyI1wJLtDd5cCRtsozYptn6z2bH8TvJj vKg0DNSRShuY416crvE47GI074BiFETOnCg7TyWzDErDHBTPcQt0cvlTN3lisloJ 6ulj0WebiZzay/NpNHuTG0XsdF/f97mSugWgxF9ARKUIebVcrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDic6uxIFadJWYuv14+/rmApcMKoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTU0ZTQ0ODUtMDA4ZS0z YWU5LWE2ODktYzZhMDhlMzk4MGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA6g+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKBaJTJGJKpyl5W9AgeehiK/KHjPh7iKybMmALXsHL6jtyhtpe5l /9TFqLVpKKJ013Ll1yMA+dU/BGkpWSLK1VuNlmDooFa6f6Ifuxiz0Onrcg+MaiMe rJxjtzcUNL9pFhZP/Kgj3KEQv7dnWFiutUrfX8r3fot1wjpad1sxop5tjnHiHYzY Un++PIx8mH5XqazUSC+pDg98MqnbPi41fT5WwXG/d9m9jdix/M0auEQxigqU20ET Ym7Sw2m6Jrv/oYVyPth6j/TNOe7KcJVTToB6kzSjGnaSwsIhxp2XHiP1ZzcCupHM ws8+2BWMB2TNy2Oi1sGHvKEL+aP9cagXp0I= -----END CERTIFICATE-----Generated at Wed May 13 08:10:25 2026 by rpki-client