$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9962f78-df8d-3f2f-8d25-ee2b5004b3f8.roa File: a9962f78-df8d-3f2f-8d25-ee2b5004b3f8.roa (raw, json) Hash identifier: XjQsTi6e22EJYI+Ipn9h7AuJR7X6KtEiHQ3HWxWkBBE= Subject key identifier: 9E:16:1F:3B:7D:6D:D6:6D:C2:1E:FC:1F:23:90:41:47:BF:6E:7C:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DA84F352BFD9CDF3869355180 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9962f78-df8d-3f2f-8d25-ee2b5004b3f8.roa Signing time: Tue 28 Apr 2026 14:56:58 +0000 ROA not before: Tue 28 Apr 2026 14:56:58 +0000 ROA not after: Mon 27 Jul 2026 14:56:58 +0000 asID: 397212 IP address blocks: 2001:503:eea3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:4f:35:2b:fd:9c:df:38:69:35:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 28 14:56:58 2026 GMT Not After : Jul 27 14:56:58 2026 GMT Subject: CN=1f09dcfd-05e9-407d-b58c-80ca2baadb90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:90:cf:88:b2:94:02:e5:b8:37:25:06:2f: 33:a4:f9:b6:44:f9:fe:16:4b:ac:f2:b6:21:3b:6e: 63:a3:35:5e:8a:fe:5a:e4:39:d6:10:fd:34:44:f7: b1:be:00:af:c7:96:20:5b:a0:20:f6:3a:e2:cd:1b: 6d:c8:99:49:11:6d:b6:77:7d:33:27:66:56:c0:23: 23:4d:83:4e:46:3b:52:93:f8:0b:fd:b7:e3:f9:9f: 48:b7:8e:63:39:ab:cc:e4:9b:93:fc:75:ee:13:21: 4e:1a:a8:1c:cf:7d:cd:de:ed:f1:dd:51:65:d6:47: 9e:46:62:d8:fb:15:2d:9f:02:97:c3:55:d5:1b:62: ef:05:01:09:76:77:5e:dd:e3:47:26:e2:bf:9a:31: 5a:8f:88:aa:00:47:ea:67:80:88:76:4b:65:9e:dc: 19:e1:71:0c:1d:dd:a4:cb:46:59:bc:00:17:46:c3: 69:fe:2f:ab:43:8c:a5:f6:c6:d0:ff:9d:bd:af:4a: de:8b:01:45:60:b0:55:e0:2c:18:2b:a1:ba:c8:20: cf:fc:d7:25:b0:61:33:4a:cd:48:19:ed:78:6a:d5: 7b:1b:76:69:8a:b2:1d:7c:de:1e:d7:1b:00:2a:04: c8:17:e1:7c:dc:52:3a:ae:c7:9f:df:17:79:1a:30: 53:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:16:1F:3B:7D:6D:D6:6D:C2:1E:FC:1F:23:90:41:47:BF:6E:7C:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9962f78-df8d-3f2f-8d25-ee2b5004b3f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:eea3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a3:09:bf:ce:cf:d9:e2:e3:6f:08:e7:c5:3e:da:10:ac:0b: c5:a8:d9:47:5d:a6:d8:9c:e0:1d:fb:be:4f:d2:3c:4d:af:5f: 32:8e:d7:4c:ad:1f:27:f2:68:1f:39:00:44:3b:97:6b:70:b6: 91:fd:3f:2f:14:32:ed:79:31:b9:5c:aa:a1:10:da:ac:a0:14: a1:a5:1b:03:ce:7d:eb:a1:fe:b1:15:74:d8:4a:0a:3d:80:f7: 4d:e0:20:fc:9e:d9:d7:3c:4d:c1:eb:b9:9a:8c:61:9d:5e:8e: fd:fa:db:4f:43:40:fb:e2:5a:a5:33:22:e6:5d:cc:42:bf:e8: fc:73:f1:bb:77:61:32:b3:3e:d5:db:b1:62:09:d1:54:a4:d3: 87:e1:fa:72:f0:8a:bf:2a:8f:ce:6b:70:bd:df:e4:e2:71:23: 1a:8b:e3:ab:6a:0e:6f:d6:56:25:b7:e3:94:34:85:9e:88:48: 53:a6:a8:34:7a:0d:ef:54:40:66:06:7b:c5:72:de:c3:0d:f2: 4c:c2:b5:f4:89:bd:b5:52:02:d9:cb:8e:d5:d5:ed:02:d7:83: 86:c2:d8:15:9b:c8:93:a5:5b:a4:b5:c3:5b:f0:8f:10:1c:ae: c4:cd:bf:43:e0:e7:eb:4a:c1:1e:66:fa:02:cb:71:3e:6b:be: 57:d7:50:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oTzUr/ZzfOGk1UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyODE0NTY1OFoXDTI2MDcyNzE0NTY1OFowLzEtMCsGA1UEAxMk MWYwOWRjZmQtMDVlOS00MDdkLWI1OGMtODBjYTJiYWFkYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXmQz4iylALluDclBi8zpPm2RPn+Fkus8rYh O25jozVeiv5a5DnWEP00RPexvgCvx5YgW6Ag9jrizRttyJlJEW22d30zJ2ZWwCMj TYNORjtSk/gL/bfj+Z9It45jOavM5JuT/HXuEyFOGqgcz33N3u3x3VFl1keeRmLY +xUtnwKXw1XVG2LvBQEJdnde3eNHJuK/mjFaj4iqAEfqZ4CIdktlntwZ4XEMHd2k y0ZZvAAXRsNp/i+rQ4yl9sbQ/529r0reiwFFYLBV4CwYK6G6yCDP/NclsGEzSs1I Ge14atV7G3ZpirIdfN4e1xsAKgTIF+F83FI6rsef3xd5GjBTWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ4WHzt9bdZtwh78HyOQQUe/bnyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTk5NjJmNzgtZGY4ZC0z ZjJmLThkMjUtZWUyYjUwMDRiM2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACyjCb/Oz9ni428I58U+2hCsC8Wo2Uddptic4B37vk/SPE2vXzKO 10ytHyfyaB85AEQ7l2twtpH9Py8UMu15MblcqqEQ2qygFKGlGwPOfeuh/rEVdNhK Cj2A903gIPye2dc8TcHruZqMYZ1ejv36209DQPviWqUzIuZdzEK/6Pxz8bt3YTKz PtXbsWIJ0VSk04fh+nLwir8qj85rcL3f5OJxIxqL46tqDm/WViW345Q0hZ6ISFOm qDR6De9UQGYGe8Vy3sMN8kzCtfSJvbVSAtnLjtXV7QLXg4bC2BWbyJOlW6S1w1vw jxAcrsTNv0Pg5+tKwR5m+gLLcT5rvlfXUMQ= -----END CERTIFICATE-----Generated at Wed May 13 03:55:24 2026 by rpki-client