$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ff57a-f55f-312a-b977-d0ed802f4f12.roa File: aa2ff57a-f55f-312a-b977-d0ed802f4f12.roa (raw, json) Hash identifier: KXsgxrh5pOmXiDoTG8S9fCuIAYlwWOe07xprEg/z/FU= Subject key identifier: CA:78:C4:5D:96:A6:C3:D5:B7:8A:FE:57:65:35:B1:30:D4:C1:58:6B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DA84F41D3107809C79CD47400 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ff57a-f55f-312a-b977-d0ed802f4f12.roa Signing time: Tue 28 Apr 2026 14:57:04 +0000 ROA not before: Tue 28 Apr 2026 14:57:04 +0000 ROA not after: Mon 27 Jul 2026 14:57:04 +0000 asID: 396546 IP address blocks: 2001:503:eea3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:4f:41:d3:10:78:09:c7:9c:d4:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 28 14:57:04 2026 GMT Not After : Jul 27 14:57:04 2026 GMT Subject: CN=8ade5e11-ca48-4a97-b3ca-e2868e9e5e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1e:d8:c7:a7:b7:77:9d:38:60:f5:8e:7d:0c: 26:f5:76:ae:93:ba:64:bd:e4:9a:67:b4:94:92:6e: c3:40:b9:17:16:56:f4:8d:99:f8:1b:e0:91:62:3b: 26:f8:4c:0c:0f:c3:3c:53:ba:0b:44:84:6f:6f:12: 29:57:d0:23:b7:3b:cd:87:00:92:2a:4f:69:9e:ba: 9f:c7:32:04:d7:55:56:af:d4:b4:11:06:89:43:cf: 23:71:d1:48:f1:ca:17:37:0a:2d:1b:8f:65:0b:9f: 42:a1:21:25:28:27:2c:61:39:46:89:40:54:ea:cf: f5:69:43:8c:c7:dd:ba:dd:ea:e0:7d:37:c3:13:68: 6b:11:15:e9:26:5d:34:c7:cb:eb:a7:ff:f7:f0:80: fc:65:1c:66:8d:13:93:fd:37:0f:85:ec:47:4e:34: 15:f7:b5:18:4c:af:20:e1:0e:da:bf:44:af:7d:0f: be:1e:ce:8b:2f:50:ae:b8:81:bc:3d:19:83:fb:39: 3e:5d:f1:40:ce:46:f2:56:b5:ad:04:32:b0:ec:66: 88:89:19:3f:47:9a:fe:de:31:ac:95:be:c4:99:a2: 25:44:c0:d7:a1:2f:82:cd:cf:e8:0e:12:6a:6b:71: 4b:59:ef:9a:1d:d2:19:19:f4:40:6c:c8:2b:05:28: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:78:C4:5D:96:A6:C3:D5:B7:8A:FE:57:65:35:B1:30:D4:C1:58:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/aa2ff57a-f55f-312a-b977-d0ed802f4f12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:eea3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:41:4c:3a:c6:c7:65:86:86:81:00:72:a6:2b:67:88:4b:b1: 92:25:b2:5c:5a:66:e8:fe:b2:8a:47:68:b2:ba:b4:b4:50:4d: 43:fb:5d:e6:73:6f:de:c6:73:39:bf:37:9d:77:48:b9:9f:a4: 8c:d3:56:8d:38:ca:58:6d:24:04:f3:12:1a:df:20:65:d3:bb: 44:d0:3d:63:e6:f0:ac:a8:4b:74:de:3c:25:a5:c7:80:8a:e5: f2:d1:f7:76:a4:19:c0:66:38:b1:e5:5e:38:f0:9e:2c:74:04: be:06:f7:0c:17:74:9c:c4:2e:d2:02:04:d3:03:09:f6:b4:16: 34:91:b7:bc:76:6b:90:71:33:0e:6c:71:a9:74:66:cb:40:67: fe:60:a4:c4:23:55:57:d4:3d:5c:da:04:96:d6:6d:91:45:b2: 8b:8c:b1:ba:95:56:fd:cb:04:bc:1c:76:37:d6:18:78:3f:53: 85:9b:a4:cf:36:64:51:02:03:ae:a3:75:b1:0d:e3:1f:54:8e: ed:20:01:ad:72:45:2a:ea:7e:01:3c:30:4e:a1:ec:e7:3b:66: d3:0f:59:da:d1:cb:41:f7:6d:f4:5b:ae:9e:b9:28:12:4b:6d: f7:29:05:ca:10:fa:da:8c:69:32:01:d1:d8:64:1d:48:3c:17: f5:d3:03:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2oT0HTEHgJx5zUdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyODE0NTcwNFoXDTI2MDcyNzE0NTcwNFowLzEtMCsGA1UEAxMk OGFkZTVlMTEtY2E0OC00YTk3LWIzY2EtZTI4NjhlOWU1ZTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih7Yx6e3d504YPWOfQwm9Xauk7pkveSaZ7SU km7DQLkXFlb0jZn4G+CRYjsm+EwMD8M8U7oLRIRvbxIpV9AjtzvNhwCSKk9pnrqf xzIE11VWr9S0EQaJQ88jcdFI8coXNwotG49lC59CoSElKCcsYTlGiUBU6s/1aUOM x9263ergfTfDE2hrERXpJl00x8vrp//38ID8ZRxmjROT/TcPhexHTjQV97UYTK8g 4Q7av0SvfQ++Hs6LL1CuuIG8PRmD+zk+XfFAzkbyVrWtBDKw7GaIiRk/R5r+3jGs lb7EmaIlRMDXoS+Czc/oDhJqa3FLWe+aHdIZGfRAbMgrBSjjHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMp4xF2WpsPVt4r+V2U1sTDUwVhrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWEyZmY1N2EtZjU1Zi0z MTJhLWI5NzctZDBlZDgwMmY0ZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFA+6j MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVBTDrGx2WGhoEAcqYrZ4hLsZIlslxaZuj+sopHaLK6tLRQTUP7 XeZzb97Gczm/N513SLmfpIzTVo04ylhtJATzEhrfIGXTu0TQPWPm8KyoS3TePCWl x4CK5fLR93akGcBmOLHlXjjwnix0BL4G9wwXdJzELtICBNMDCfa0FjSRt7x2a5Bx Mw5scal0ZstAZ/5gpMQjVVfUPVzaBJbWbZFFsouMsbqVVv3LBLwcdjfWGHg/U4Wb pM82ZFECA66jdbEN4x9Uju0gAa1yRSrqfgE8ME6h7Oc7ZtMPWdrRy0H3bfRbrp65 KBJLbfcpBcoQ+tqMaTIB0dhkHUg8F/XTA+4= -----END CERTIFICATE-----Generated at Wed May 13 09:08:28 2026 by rpki-client