$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20afd88d-448b-34cc-a8d5-26b16fdc554c.roa File: 20afd88d-448b-34cc-a8d5-26b16fdc554c.roa (raw, json) Hash identifier: oax38H8ZVIm8Xj5ZsWx3cuFx/l3GDjCl7OCmcnFBUXY= Subject key identifier: A0:05:D0:BB:6D:20:3F:D2:5C:9D:25:CE:E0:A6:DE:E6:58:74:D9:B8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D87FA924FBC01952678C6C600 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20afd88d-448b-34cc-a8d5-26b16fdc554c.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 20431 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:92:4f:bc:01:95:26:78:c6:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=8703b2a2-ab71-4401-b26b-2bd0d80ad50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:b3:d3:2b:f3:c6:22:73:2d:ac:a1:f5:82: 54:f4:47:a2:2b:2f:6b:b6:d2:d9:4d:3c:1d:de:b8: 68:42:18:c3:e7:f9:4d:4e:46:9c:3d:b9:bb:ac:a6: 38:3f:35:19:91:40:2c:b3:b2:1b:1f:c8:b7:5f:59: 01:7a:92:53:13:65:1d:53:ef:0c:b9:c7:6e:9b:20: 9b:f4:4b:c7:c3:9b:43:97:12:80:f6:f5:3f:a6:9c: 40:49:8e:0e:4c:87:7f:6b:08:cb:e1:95:45:78:a6: 4c:ca:60:d3:a6:90:5f:c7:ae:9a:e1:75:88:57:e9: d0:12:76:60:05:0e:20:2f:83:49:03:fe:b4:6a:e4: da:5f:96:4e:84:de:be:75:86:7f:37:06:55:43:54: d3:cf:a2:d5:e3:3d:eb:cd:18:69:bd:f3:4e:9d:4c: 46:7b:8c:19:7d:65:7c:d9:c0:a3:99:62:46:e2:bd: 17:f8:f9:48:6b:45:80:c9:c4:88:e6:8a:77:3f:95: 98:70:ef:22:54:60:b1:b9:42:cc:ae:bd:7a:2f:2e: de:16:94:0e:d4:40:3f:d1:c9:68:38:1a:cc:2d:c1: d3:28:7f:2a:42:50:06:9c:c6:23:1a:e8:5c:4c:8e: 82:cd:7f:60:41:a7:9d:7c:07:2a:4b:94:cd:e4:df: e4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:05:D0:BB:6D:20:3F:D2:5C:9D:25:CE:E0:A6:DE:E6:58:74:D9:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/20afd88d-448b-34cc-a8d5-26b16fdc554c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:2a:ee:a5:61:5f:eb:44:b6:92:8c:49:65:48:d9:5d:6b:40: e1:b1:c2:98:48:f8:19:65:5d:7e:ab:1f:2e:b6:85:3c:60:43: f4:5c:65:63:51:03:b6:69:d5:f2:c4:cf:02:4a:de:ab:1c:34: 40:3a:1c:c1:b4:75:27:fa:0e:06:31:33:11:74:45:61:be:e5: e0:03:cb:7e:ae:2b:f3:da:4b:c3:fa:02:3d:88:f2:b0:39:ee: 92:77:e9:3d:1c:86:63:fe:eb:98:a2:0c:f6:b6:29:77:d7:9c: 22:23:bd:c0:67:92:23:76:4b:34:4e:b7:92:79:7c:ca:1f:0f: 3d:cb:be:01:53:20:ba:e6:01:89:2e:5a:96:b5:6e:58:c5:68: 59:d6:46:94:9a:c6:64:0e:01:9a:74:65:90:14:c5:20:21:f4: 97:dc:78:36:51:10:4f:80:d5:85:31:1f:88:bb:90:17:0a:61: 6d:dc:36:fb:b8:62:45:27:31:46:7b:f5:af:17:7e:f4:dd:9e: 41:b6:70:2e:a9:ad:05:c2:46:46:7f:69:a9:a1:0b:ec:f0:89: f0:6d:9e:dc:81:98:b4:c7:c5:4d:e7:cd:c6:01:fe:bf:63:7a: e7:ab:fd:10:2f:25:22:76:21:0f:1c:ef:9b:63:cb:a9:5e:93: 0f:8e:cc:32 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2H+pJPvAGVJnjGxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk ODcwM2IyYTItYWI3MS00NDAxLWIyNmItMmJkMGQ4MGFkNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO6z0yvzxiJzLayh9YJU9EeiKy9rttLZTTwd 3rhoQhjD5/lNTkacPbm7rKY4PzUZkUAss7IbH8i3X1kBepJTE2UdU+8MucdumyCb 9EvHw5tDlxKA9vU/ppxASY4OTId/awjL4ZVFeKZMymDTppBfx66a4XWIV+nQEnZg BQ4gL4NJA/60auTaX5ZOhN6+dYZ/NwZVQ1TTz6LV4z3rzRhpvfNOnUxGe4wZfWV8 2cCjmWJG4r0X+PlIa0WAycSI5op3P5WYcO8iVGCxuULMrr16Ly7eFpQO1EA/0clo OBrMLcHTKH8qQlAGnMYjGuhcTI6CzX9gQaedfAcqS5TN5N/kSwIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKAF0LttID/SXJ0lzuCm3uZYdNm4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjBhZmQ4OGQtNDQ4Yi0z NGNjLWE4ZDUtMjZiMTZmZGM1NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCvKu6lYV/rRLaSjEllSNlda0DhscKYSPgZZV1+ qx8utoU8YEP0XGVjUQO2adXyxM8CSt6rHDRAOhzBtHUn+g4GMTMRdEVhvuXgA8t+ rivz2kvD+gI9iPKwOe6Sd+k9HIZj/uuYogz2til315wiI73AZ5Ijdks0TreSeXzK Hw89y74BUyC65gGJLlqWtW5YxWhZ1kaUmsZkDgGadGWQFMUgIfSX3Hg2URBPgNWF MR+Iu5AXCmFt3Db7uGJFJzFGe/WvF3703Z5BtnAuqa0FwkZGf2mpoQvs8InwbZ7c gZi0x8VN583GAf6/Y3rnq/0QLyUidiEPHO+bY8upXpMPjswy -----END CERTIFICATE-----Generated at Fri Apr 17 13:00:51 2026 by rpki-client