$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02564017-eb82-38ca-9f37-7574934b2fc9.roa File: 02564017-eb82-38ca-9f37-7574934b2fc9.roa (raw, json) Hash identifier: 5jmMxWie9Cp2q2Uf1X++FrEHbOYMhGmld+AvIP/xKtM= Subject key identifier: 39:7A:39:9B:33:BF:89:62:91:13:92:AC:E2:3D:C4:BB:3E:42:40:E7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6DA18A1F9CC82BCF307A3A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02564017-eb82-38ca-9f37-7574934b2fc9.roa Signing time: Tue 07 Apr 2026 14:30:10 +0000 ROA not before: Tue 07 Apr 2026 14:30:10 +0000 ROA not after: Mon 06 Jul 2026 14:30:10 +0000 asID: 396593 IP address blocks: 2001:500:13f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:a1:8a:1f:9c:c8:2b:cf:30:7a:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 7 14:30:10 2026 GMT Not After : Jul 6 14:30:10 2026 GMT Subject: CN=8d06d84d-5d17-412e-9339-10e9390c81b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c5:7b:cf:03:a7:ce:10:f7:77:ad:37:06:74: 6a:19:2c:b9:92:79:d2:30:5e:3e:3d:e9:78:b8:4f: 2b:d6:7f:28:12:2c:58:b4:82:a6:3b:8f:65:c8:2f: 53:6e:10:28:56:1b:ff:b5:1d:bd:36:1b:95:cd:37: bb:9f:a8:cf:a5:5f:11:33:d5:5d:38:01:ab:ba:0a: bb:7c:9e:28:3a:3d:44:e9:55:19:67:93:35:2a:e1: 4b:48:0a:00:03:a7:5d:4e:cf:78:17:e6:8d:a3:18: 19:91:4f:56:37:c2:dd:7b:29:9d:fc:dd:4a:97:a0: ee:86:6d:3f:9c:9a:3e:e1:25:a6:4d:32:03:2a:77: df:0c:a0:a3:4b:96:a1:ad:87:59:b4:fc:0f:89:0a: eb:2c:48:22:af:7f:62:21:de:87:9d:12:21:03:35: 82:bc:f7:b6:64:26:94:a7:39:a3:f0:94:45:08:82: 66:5b:ae:d5:05:dc:07:c1:df:62:0b:d1:ea:98:85: a3:4a:d5:ac:43:56:2a:e0:fd:43:a3:ce:76:5f:43: d4:b7:7b:3c:be:93:cc:2a:37:5d:29:23:09:b7:2e: 07:f4:ab:6b:e7:5a:e5:b4:a7:16:71:e8:06:fd:67: 6f:ac:8e:99:55:bf:c1:0c:3a:90:7b:b5:4c:8d:b1: f8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7A:39:9B:33:BF:89:62:91:13:92:AC:E2:3D:C4:BB:3E:42:40:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/02564017-eb82-38ca-9f37-7574934b2fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:13f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7f:dd:77:5b:5d:2e:b0:21:cb:ce:f8:0f:e9:5c:01:9e:ac: 40:03:73:ee:aa:ca:51:0e:6a:42:20:62:ee:69:88:04:80:8a: dd:af:a4:4f:4f:3c:7f:15:18:ee:db:0f:66:9c:e2:06:57:9a: ce:d6:f2:a8:52:a3:ce:37:ed:20:4d:1e:87:b9:77:64:f4:15: bd:8c:3d:df:16:10:60:39:e0:84:4a:f0:65:27:cc:c8:e9:39: 13:8f:6a:bc:89:72:3c:4d:35:8e:d2:dd:15:f6:40:13:3b:12: 10:cb:7d:98:7d:f2:92:5e:e1:29:10:7e:d0:f0:fa:03:65:98: dd:c5:14:08:26:5c:8c:70:d9:84:07:cd:65:2c:20:08:ed:57: d7:fb:57:8e:e2:ac:76:7a:f7:9b:4d:22:39:6c:6b:69:b8:ef: b6:5a:1d:7d:d4:98:b0:67:69:08:ee:32:59:2d:71:0e:2e:89: f7:6e:e7:23:45:cb:44:80:f8:ac:6c:63:bd:ae:b1:be:05:4c: 41:c7:3d:c1:16:40:88:92:fa:49:77:69:a2:a5:e4:6b:8b:68: d5:29:00:e8:4f:38:96:be:e0:e5:c6:a3:3d:31:af:7e:fd:fb: b7:51:3c:1c:d7:22:da:b2:87:83:02:1b:93:47:f5:67:73:b8: 43:13:60:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1toYofnMgrzzB6OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwNzE0MzAxMFoXDTI2MDcwNjE0MzAxMFowLzEtMCsGA1UEAxMk OGQwNmQ4NGQtNWQxNy00MTJlLTkzMzktMTBlOTM5MGM4MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsV7zwOnzhD3d603BnRqGSy5knnSMF4+Pel4 uE8r1n8oEixYtIKmO49lyC9TbhAoVhv/tR29NhuVzTe7n6jPpV8RM9VdOAGrugq7 fJ4oOj1E6VUZZ5M1KuFLSAoAA6ddTs94F+aNoxgZkU9WN8Ldeymd/N1Kl6Duhm0/ nJo+4SWmTTIDKnffDKCjS5ahrYdZtPwPiQrrLEgir39iId6HnRIhAzWCvPe2ZCaU pzmj8JRFCIJmW67VBdwHwd9iC9HqmIWjStWsQ1Yq4P1Do852X0PUt3s8vpPMKjdd KSMJty4H9Ktr51rltKcWcegG/WdvrI6ZVb/BDDqQe7VMjbH4DQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDl6OZszv4likROSrOI9xLs+QkDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMDI1NjQwMTctZWI4Mi0z OGNhLTlmMzctNzU3NDkzNGIyZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAAE/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHx/3XdbXS6wIcvO+A/pXAGerEADc+6qylEOakIgYu5piASAit2v pE9PPH8VGO7bD2ac4gZXms7W8qhSo8437SBNHoe5d2T0Fb2MPd8WEGA54IRK8GUn zMjpOROParyJcjxNNY7S3RX2QBM7EhDLfZh98pJe4SkQftDw+gNlmN3FFAgmXIxw 2YQHzWUsIAjtV9f7V47irHZ695tNIjlsa2m477ZaHX3UmLBnaQjuMlktcQ4uifdu 5yNFy0SA+KxsY72usb4FTEHHPcEWQIiS+kl3aaKl5GuLaNUpAOhPOJa+4OXGoz0x r379+7dRPBzXItqyh4MCG5NH9WdzuEMTYLk= -----END CERTIFICATE-----Generated at Fri Apr 17 13:09:47 2026 by rpki-client