$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae7c5c3c-3b42-390a-9c47-fdcea92398da.roa File: ae7c5c3c-3b42-390a-9c47-fdcea92398da.roa (raw, json) Hash identifier: NbLTakLUOtCS5i1wi+vFV8BeS1a5ijdY/5efax7i2hI= Subject key identifier: AA:14:72:0C:7D:AF:B6:9B:04:6B:BF:74:00:88:A1:21:83:4D:30:99 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DA11AE2FE312CBF289A8DE890 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae7c5c3c-3b42-390a-9c47-fdcea92398da.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 396827 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:e2:fe:31:2c:bf:28:9a:8d:e8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=d3dd059a-4586-4ed0-8527-089f644b13dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c0:21:c9:3a:ae:c1:8d:c3:e8:d0:d7:03:a1: d8:5f:a5:de:ce:9e:7a:50:c0:ef:79:0d:cc:62:2d: 64:72:6c:04:59:90:b4:af:5b:1d:ee:84:f9:89:ff: 53:5d:66:5d:7d:ac:2a:6c:02:1c:f3:8a:00:3f:61: 6d:a8:32:47:e0:77:68:25:6f:c4:65:6c:d8:92:96: fc:a8:03:10:b0:aa:66:94:fd:a3:89:fc:4b:c2:3f: 72:6f:80:5b:25:36:b5:52:ce:47:59:7b:fe:0e:25: 45:ab:e2:46:d1:e2:c5:4a:a8:30:8f:17:14:8d:6b: d9:c1:f9:c8:6b:30:3e:94:92:ed:02:84:ba:a3:75: 9b:42:76:ec:62:01:d6:3b:69:6b:b5:58:34:07:85: f7:6d:6f:f9:8f:4f:1b:a5:12:bd:3c:0d:fb:e4:94: d4:6d:a3:41:bb:fe:bb:f4:b1:cd:82:ef:75:85:63: 22:64:db:29:ec:ed:e8:f4:99:19:10:ab:e1:80:85: 49:8a:2d:33:9c:2b:3a:b6:aa:84:07:ba:bd:61:f7: 71:a5:92:0d:fa:f4:e6:60:33:7e:e9:8e:23:8c:4d: a2:61:eb:d7:66:c4:de:2e:0b:85:ae:06:98:9d:e3: 5d:1a:b7:60:7a:91:5f:d4:b0:c3:16:20:ed:9a:0d: f3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:14:72:0C:7D:AF:B6:9B:04:6B:BF:74:00:88:A1:21:83:4D:30:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae7c5c3c-3b42-390a-9c47-fdcea92398da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b4:8a:e5:43:75:f7:30:2b:c4:ce:b4:42:a9:2f:c3:dd:a8: 07:db:6f:71:7c:ca:ad:b8:7d:a0:25:4c:6e:36:ba:de:48:a9: 29:fc:3a:8b:12:46:8a:78:2f:de:bc:95:ec:c7:21:af:1e:2d: 82:0d:c2:3a:61:92:21:c9:0d:a7:6b:2f:6d:b8:66:0b:66:6b: 92:6a:d6:52:be:c5:98:9a:10:b0:51:48:df:b1:e7:73:08:e3: d6:fd:a7:cb:c9:44:e8:34:0b:e9:b5:15:7f:87:e8:dd:ad:34: 34:ef:a1:29:b5:44:2b:a6:ef:75:df:2a:ec:c8:cf:e3:e1:fd: 4a:3c:12:44:21:59:97:44:26:48:30:e9:13:d0:21:c2:79:fa: fc:c0:37:95:ae:71:0c:79:44:21:37:51:d2:6c:f2:38:c1:d4: 26:ab:3e:e3:e7:1b:8f:fb:0b:f9:11:48:9d:56:0d:4b:e9:17: d3:b8:db:1a:66:0f:fa:2a:f7:16:ba:d2:79:01:b7:8e:d6:52: b6:01:cc:26:bb:8e:1f:d8:21:99:ef:ab:ec:2c:31:b9:88:83: 3d:0d:fd:9f:72:f6:6d:75:a9:0f:51:3d:85:9a:3b:b8:c1:f6: d1:a3:c3:da:89:06:e4:e2:92:e7:99:bf:b0:df:91:02:d2:65: 6c:58:72:4a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2hGuL+MSy/KJqN6JAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZDNkZDA1OWEtNDU4Ni00ZWQwLTg1MjctMDg5ZjY0NGIxM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsAhyTquwY3D6NDXA6HYX6Xezp56UMDveQ3M Yi1kcmwEWZC0r1sd7oT5if9TXWZdfawqbAIc84oAP2FtqDJH4HdoJW/EZWzYkpb8 qAMQsKpmlP2jifxLwj9yb4BbJTa1Us5HWXv+DiVFq+JG0eLFSqgwjxcUjWvZwfnI azA+lJLtAoS6o3WbQnbsYgHWO2lrtVg0B4X3bW/5j08bpRK9PA375JTUbaNBu/67 9LHNgu91hWMiZNsp7O3o9JkZEKvhgIVJii0znCs6tqqEB7q9YfdxpZIN+vTmYDN+ 6Y4jjE2iYevXZsTeLguFrgaYneNdGrdgepFf1LDDFiDtmg3zbQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKoUcgx9r7abBGu/dACIoSGDTTCZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYWU3YzVjM2MtM2I0Mi0z OTBhLTljNDctZmRjZWE5MjM5OGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAitIrlQ3X3MCvEzrRCqS/D3agH229xfMqtuH2g JUxuNrreSKkp/DqLEkaKeC/evJXsxyGvHi2CDcI6YZIhyQ2nay9tuGYLZmuSatZS vsWYmhCwUUjfsedzCOPW/afLyUToNAvptRV/h+jdrTQ076EptUQrpu913yrsyM/j 4f1KPBJEIVmXRCZIMOkT0CHCefr8wDeVrnEMeUQhN1HSbPI4wdQmqz7j5xuP+wv5 EUidVg1L6RfTuNsaZg/6KvcWutJ5AbeO1lK2Acwmu44f2CGZ76vsLDG5iIM9Df2f cvZtdakPUT2Fmju4wfbRo8PaiQbk4pLnmb+w35EC0mVsWHJK -----END CERTIFICATE-----Generated at Wed May 13 14:06:12 2026 by rpki-client