$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa File: d345e031-7e87-3977-9aa7-6b7e19f3795e.roa (raw, json) Hash identifier: VWRGbC8hKj+L+XCOCUY0mIDFlj6mq24s7lHUz4/XHF4= Subject key identifier: 72:09:F6:D6:16:20:28:D4:B3:66:EE:7E:39:61:6C:A1:F1:8B:0A:FD Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584DA11AE2278533CA3B77DD4690 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 396609 IP address blocks: 2001:501:8a29::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:e2:27:85:33:ca:3b:77:dd:46:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=2d3b6036-8de7-4e5b-acd5-902b16d784ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cf:31:ca:d0:00:19:62:4d:d9:b4:aa:dc:da: f6:74:35:38:57:a5:9a:3b:18:ab:f0:90:a2:c9:25: 8d:2d:1a:64:12:0c:c5:4f:d8:5e:ce:dc:d2:43:23: 31:7c:33:5f:01:5f:76:ef:7d:ad:d7:b7:63:5c:ed: aa:8c:bf:e1:0a:64:11:a5:be:8e:66:71:16:f1:7f: 1a:1e:f4:c5:c4:63:e1:7a:ae:af:9c:ac:b6:9f:55: 44:29:2c:7f:20:06:6d:04:9f:d4:10:57:3b:2d:ff: c1:34:d9:48:0f:02:65:c5:ed:4e:18:db:43:6e:09: 09:86:38:2a:5e:6f:ce:16:ac:ca:59:be:a6:b7:86: 49:3d:f8:98:54:90:21:c0:13:3a:14:3a:30:9b:5a: 63:f3:3c:74:d4:1c:83:ad:a5:cb:dc:a4:1a:1d:44: 1b:41:5d:48:35:91:43:b8:c2:bb:0f:ac:53:99:62: 33:54:be:c6:05:29:a5:d5:8d:5f:0e:20:2c:74:6c: dd:2c:94:56:5d:3f:ea:90:2d:7a:38:15:d4:7b:97: b0:48:e5:e8:65:3b:3c:89:f8:ae:3b:16:52:23:de: 60:19:51:7b:36:1c:d4:f3:c8:84:0c:73:ab:83:0a: 26:20:f7:a6:0b:41:37:50:47:cc:98:5c:e7:a3:4a: 9e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:09:F6:D6:16:20:28:D4:B3:66:EE:7E:39:61:6C:A1:F1:8B:0A:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d345e031-7e87-3977-9aa7-6b7e19f3795e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:cb:7e:09:bb:f5:d7:62:4a:3c:c2:e5:91:cb:92:b0:d4:c8: 5e:a5:1f:05:50:85:b8:55:04:e8:9e:1f:ff:7a:fc:df:ae:4b: 7b:98:7d:bd:9d:97:bf:2e:2f:ba:1c:de:fc:12:6c:80:41:27: 3e:b2:8d:67:15:ed:a0:0d:0d:ab:cd:4b:3c:93:55:96:ff:e7: 6e:80:87:3f:2d:53:2c:09:b0:55:88:3e:0d:3b:9c:a5:b6:23: 0d:ff:8c:56:2a:6a:5d:4e:96:bb:34:11:d7:98:16:96:87:a2: 2a:92:fe:a7:38:46:ec:24:cb:bf:69:74:39:e3:38:13:c6:ed: d4:14:5a:68:75:51:d5:38:18:09:96:3f:2b:bd:51:42:26:64: 91:cb:bf:b1:6b:32:a6:79:b9:0d:21:99:de:3e:d9:02:8a:c2: 82:d2:f4:be:9b:26:59:89:63:89:db:1e:91:d1:09:99:91:3c: 67:97:f1:0d:a0:51:dd:51:0c:9e:bb:69:69:6a:39:7d:87:e7: d3:9c:b0:07:47:41:0d:df:0e:49:10:33:25:09:74:a2:3a:09: 49:d3:8c:45:b6:18:29:d3:e1:aa:3a:ce:5b:db:af:6f:a9:82: df:17:e0:c3:c6:ca:bc:17:df:22:a0:db:0d:c3:2a:2d:26:7a: e2:74:f0:8c -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2hGuInhTPKO3fdRpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MmQzYjYwMzYtOGRlNy00ZTViLWFjZDUtOTAyYjE2ZDc4NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj88xytAAGWJN2bSq3Nr2dDU4V6WaOxir8JCi ySWNLRpkEgzFT9heztzSQyMxfDNfAV92732t17djXO2qjL/hCmQRpb6OZnEW8X8a HvTFxGPheq6vnKy2n1VEKSx/IAZtBJ/UEFc7Lf/BNNlIDwJlxe1OGNtDbgkJhjgq Xm/OFqzKWb6mt4ZJPfiYVJAhwBM6FDowm1pj8zx01ByDraXL3KQaHUQbQV1INZFD uMK7D6xTmWIzVL7GBSml1Y1fDiAsdGzdLJRWXT/qkC16OBXUe5ewSOXoZTs8ifiu OxZSI95gGVF7NhzU88iEDHOrgwomIPemC0E3UEfMmFzno0qe4wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFHIJ9tYWICjUs2bufjlhbKHxiwr9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDM0NWUwMzEtN2U4Ny0z OTc3LTlhYTctNmI3ZTE5ZjM3OTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAYop AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAgy34Ju/XXYko8wuWRy5Kw1MhepR8FUIW4VQTo nh//evzfrkt7mH29nZe/Li+6HN78EmyAQSc+so1nFe2gDQ2rzUs8k1WW/+dugIc/ LVMsCbBViD4NO5yltiMN/4xWKmpdTpa7NBHXmBaWh6Iqkv6nOEbsJMu/aXQ54zgT xu3UFFpodVHVOBgJlj8rvVFCJmSRy7+xazKmebkNIZnePtkCisKC0vS+myZZiWOJ 2x6R0QmZkTxnl/ENoFHdUQyeu2lpajl9h+fTnLAHR0EN3w5JEDMlCXSiOglJ04xF thgp0+GqOs5b269vqYLfF+DDxsq8F98ioNsNwyotJnridPCM -----END CERTIFICATE-----Generated at Wed May 13 10:13:47 2026 by rpki-client