$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf977539-8aed-33f1-9016-b41ef628b351.roa File: cf977539-8aed-33f1-9016-b41ef628b351.roa (raw, json) Hash identifier: jxLPikbIuKxE8+WFjwXzFOzvskZavh+jT9DAt5b6q88= Subject key identifier: 33:08:DC:83:0B:65:6D:36:AB:96:41:37:7D:DA:3B:26:B6:7B:04:A8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D8EF54F677F1591B486C1B000 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf977539-8aed-33f1-9016-b41ef628b351.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 397212 IP address blocks: 2001:502:8cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:4f:67:7f:15:91:b4:86:c1:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=a60e49ba-dea6-4f4a-af75-a7a4a3d34789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7e:25:13:96:6b:b7:b8:c3:3c:4d:1e:be:d9: f8:7e:ba:31:b7:47:df:6d:b5:4e:34:ae:ed:39:24: 9b:6e:8f:e5:4e:62:cd:fa:50:64:fa:14:61:15:7e: 44:ba:9f:ac:cb:a5:a2:eb:ac:de:fa:84:bc:60:69: d6:8f:a8:f7:43:2f:dd:33:2c:65:3a:c7:84:e2:67: f9:58:f7:ee:94:fc:3c:14:4c:80:56:46:3c:49:65: 6d:be:ec:fa:f4:b1:5a:5b:c5:cb:fb:ab:00:ae:a9: 02:f4:c2:4e:99:5e:57:e5:52:41:2c:4a:91:c2:51: 5a:ae:de:b4:9f:71:8a:18:ca:88:c0:45:39:13:22: 35:96:c6:db:22:5b:fa:07:46:46:d5:73:b6:09:66: f3:26:0c:55:a5:26:99:7c:7c:c1:22:93:e9:e1:15: 00:a6:1a:86:89:84:9f:fb:44:28:7c:aa:92:ce:3c: cb:b6:ce:d2:93:11:01:4b:b6:24:fa:db:9a:11:de: 70:8e:85:8a:a9:b9:a5:fa:a8:73:d8:91:22:a4:14: 81:3b:f5:b1:cf:fe:88:4e:b9:ee:d1:1d:87:34:c1: 0b:a0:42:cd:e7:10:fd:8b:42:b8:2b:72:b6:8f:0a: 59:ee:c1:75:5c:21:85:50:cf:3b:fe:96:7e:17:9f: 8a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:08:DC:83:0B:65:6D:36:AB:96:41:37:7D:DA:3B:26:B6:7B:04:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/cf977539-8aed-33f1-9016-b41ef628b351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:42:00:a8:6d:4d:22:98:d4:9e:e0:44:7d:d1:f1:9d:2c:62: 28:da:3d:95:59:64:70:8d:ba:dd:03:52:b0:d8:51:bd:c2:b7: 69:9e:6d:05:34:0c:c5:e4:81:ab:be:45:74:8b:61:43:21:5d: 7c:4c:28:15:2d:41:80:08:2b:8d:60:4a:ac:c9:94:d1:75:05: 86:d5:e6:06:1f:8a:b6:0d:f2:5b:ad:34:6f:3b:e3:69:d4:82: be:f7:a4:60:bf:a3:d5:74:a3:35:7a:3f:35:e3:a9:f1:14:cc: 70:ef:35:8d:61:c8:da:04:6b:64:1a:03:56:65:45:d2:95:69: 4c:cd:f3:d4:4d:83:8a:c6:b5:e8:be:40:df:0b:d3:2c:24:4c: 1b:87:43:fb:5e:ed:61:ca:5b:1b:82:72:fe:78:58:46:d5:c5: e1:ab:f9:90:c6:c3:de:b7:e5:0b:7d:60:81:3c:88:e9:6b:9d: 62:ed:8f:b7:7f:39:46:05:4b:5a:8e:8c:e9:b9:48:1c:c9:4b: 35:a3:4e:ed:dc:81:c6:4f:d9:93:58:db:42:0a:13:c5:bd:73: 61:dc:05:2c:e5:71:dd:53:4f:eb:99:1b:12:0c:2d:e7:65:ff: d2:9d:0a:95:88:2f:a0:b3:82:be:64:22:4f:f1:46:85:82:02: 88:c6:cf:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2O9U9nfxWRtIbBsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YTYwZTQ5YmEtZGVhNi00ZjRhLWFmNzUtYTdhNGEzZDM0Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo34lE5Zrt7jDPE0evtn4froxt0ffbbVONK7t OSSbbo/lTmLN+lBk+hRhFX5Eup+sy6Wi66ze+oS8YGnWj6j3Qy/dMyxlOseE4mf5 WPfulPw8FEyAVkY8SWVtvuz69LFaW8XL+6sArqkC9MJOmV5X5VJBLEqRwlFart60 n3GKGMqIwEU5EyI1lsbbIlv6B0ZG1XO2CWbzJgxVpSaZfHzBIpPp4RUAphqGiYSf +0QofKqSzjzLts7SkxEBS7Yk+tuaEd5wjoWKqbml+qhz2JEipBSBO/Wxz/6ITrnu 0R2HNMELoELN5xD9i0K4K3K2jwpZ7sF1XCGFUM87/pZ+F5+KQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDMI3IMLZW02q5ZBN33aOya2ewSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvY2Y5Nzc1MzktOGFlZC0z M2YxLTkwMTYtYjQxZWY2MjhiMzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAgjM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKRCAKhtTSKY1J7gRH3R8Z0sYijaPZVZZHCNut0DUrDYUb3Ct2me bQU0DMXkgau+RXSLYUMhXXxMKBUtQYAIK41gSqzJlNF1BYbV5gYfirYN8lutNG87 42nUgr73pGC/o9V0ozV6PzXjqfEUzHDvNY1hyNoEa2QaA1ZlRdKVaUzN89RNg4rG tei+QN8L0ywkTBuHQ/te7WHKWxuCcv54WEbVxeGr+ZDGw9635Qt9YIE8iOlrnWLt j7d/OUYFS1qOjOm5SBzJSzWjTu3cgcZP2ZNY20IKE8W9c2HcBSzlcd1TT+uZGxIM Ledl/9KdCpWIL6Czgr5kIk/xRoWCAojGz3Y= -----END CERTIFICATE-----Generated at Wed May 13 07:58:07 2026 by rpki-client