$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb885627-93f5-3375-917c-f20d38085717.roa File: cb885627-93f5-3375-917c-f20d38085717.roa (raw, json) Hash identifier: 2qjoLG+xF2bDOmPaIR6qsPKRA41a5pa5iqBEIPZTBOo= Subject key identifier: 2F:50:50:76:4A:34:62:23:7D:91:9B:E0:7E:C3:76:FD:6B:F4:08:06 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DAAE022DA18721EB6F3F83900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb885627-93f5-3375-917c-f20d38085717.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 397210 IP address blocks: 2001:502:1ca1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:22:da:18:72:1e:b6:f3:f8:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=596bbd3a-abaf-4472-b7ae-d07dc55f87ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:5b:13:13:0b:4e:48:5d:8a:9f:e2:ce:26: 9e:93:d5:e1:ff:02:22:43:0b:e3:0b:0e:3d:f6:4e: 3f:7a:f4:3d:52:7f:71:e1:6f:b9:93:5e:8b:9a:da: 54:ef:5c:64:67:b4:9c:9d:bc:9f:f6:93:04:19:bc: 14:25:04:e2:a6:75:d2:7c:dd:70:18:56:b7:d4:07: 4a:61:97:26:61:e2:ca:cb:82:ae:c0:2c:89:db:95: b1:54:89:be:86:fd:e1:b0:b5:13:c6:82:c8:63:91: 0d:96:39:63:87:f7:8e:be:2b:68:61:6a:6f:7c:59: 6a:7f:5d:92:c6:07:b8:c4:1c:cb:6c:4f:91:2a:6a: 6a:06:03:03:7a:e6:bb:3c:0a:41:c3:3f:1b:81:29: b8:39:e7:cd:0e:b2:71:42:c5:f6:9a:3a:23:3d:fd: 11:02:c5:85:4a:a5:88:52:ff:0f:2d:66:32:b4:cb: eb:d0:f0:2b:7a:1f:fa:42:82:d8:11:95:d2:fb:71: ef:f9:84:74:a5:ea:6c:f2:86:a8:78:e5:b4:e2:d4: aa:ca:0d:32:05:e4:67:5e:0c:f1:bf:72:f7:00:a8: 34:34:1d:59:43:4c:67:ce:0c:6e:cb:fb:07:61:4b: 92:a8:d2:f4:58:d7:da:2b:be:d0:11:96:0b:f9:35: 50:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:50:50:76:4A:34:62:23:7D:91:9B:E0:7E:C3:76:FD:6B:F4:08:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cb885627-93f5-3375-917c-f20d38085717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f5:53:83:d1:72:f5:bd:ca:35:70:59:08:78:7d:92:66:1c: 1b:b9:2e:a6:70:37:e5:51:93:88:22:4a:43:5d:81:1a:22:0a: b7:ab:e3:57:22:ed:f7:3c:9d:21:fd:42:7b:a5:d8:7f:2a:d7: 4e:63:68:6c:0a:bf:b7:32:70:9f:02:f9:51:d7:19:ba:77:26: 4b:03:49:cb:00:0c:9a:e8:d1:1c:83:9e:45:82:67:04:c2:fd: 82:2a:cc:79:0e:f5:f8:4f:a5:ea:bc:fa:3a:8d:79:10:81:07: 30:68:f8:50:e8:47:c7:82:17:26:e4:94:bf:18:8d:da:16:7f: 84:1d:14:cb:ca:9b:99:ee:d8:fd:7c:4c:5d:08:ab:4f:a4:72: b9:3e:1b:69:4b:91:52:3f:df:7c:f9:0c:d0:1e:2e:d0:2f:5d: a0:84:b6:b7:c1:e2:f6:fe:5f:a6:9f:d5:72:96:ac:56:57:7e: f4:92:b2:93:8a:22:79:db:c7:17:cf:64:34:9b:5d:ce:74:24: 78:6a:9c:a3:a4:b2:e2:a5:07:0b:20:db:0f:ff:74:63:65:07: 56:f4:ce:36:37:05:d5:46:d5:ff:be:36:85:2b:70:09:ca:44: a0:04:38:df:28:bf:76:05:ae:dd:5e:92:d2:d7:dd:ae:79:0b: ad:87:2b:e0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2q4CLaGHIetvP4OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk NTk2YmJkM2EtYWJhZi00NDcyLWI3YWUtZDA3ZGM1NWY4N2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoNbExMLTkhdip/iziaek9Xh/wIiQwvjCw49 9k4/evQ9Un9x4W+5k16LmtpU71xkZ7Scnbyf9pMEGbwUJQTipnXSfN1wGFa31AdK YZcmYeLKy4KuwCyJ25WxVIm+hv3hsLUTxoLIY5ENljljh/eOvitoYWpvfFlqf12S xge4xBzLbE+RKmpqBgMDeua7PApBwz8bgSm4OefNDrJxQsX2mjojPf0RAsWFSqWI Uv8PLWYytMvr0PAreh/6QoLYEZXS+3Hv+YR0peps8oaoeOW04tSqyg0yBeRnXgzx v3L3AKg0NB1ZQ0xnzgxuy/sHYUuSqNL0WNfaK77QEZYL+TVQdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC9QUHZKNGIjfZGb4H7Ddv1r9AgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2I4ODU2MjctOTNmNS0z Mzc1LTkxN2MtZjIwZDM4MDg1NzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAhyh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAH1U4PRcvW9yjVwWQh4fZJmHBu5LqZwN+VRk4giSkNdgRoiCrer 41ci7fc8nSH9Qnul2H8q105jaGwKv7cycJ8C+VHXGbp3JksDScsADJro0RyDnkWC ZwTC/YIqzHkO9fhPpeq8+jqNeRCBBzBo+FDoR8eCFybklL8YjdoWf4QdFMvKm5nu 2P18TF0Iq0+kcrk+G2lLkVI/33z5DNAeLtAvXaCEtrfB4vb+X6af1XKWrFZXfvSS spOKInnbxxfPZDSbXc50JHhqnKOksuKlBwsg2w//dGNlB1b0zjY3BdVG1f++NoUr cAnKRKAEON8ov3YFrt1ektLX3a55C62HK+A= -----END CERTIFICATE-----Generated at Wed May 13 15:08:41 2026 by rpki-client