$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b1386d9-7043-36f5-8587-38c78da0c30b.roa File: 3b1386d9-7043-36f5-8587-38c78da0c30b.roa (raw, json) Hash identifier: jFXLQaufhYQaJm6/ttghngbw7wgsntfbu6skD2etDnA= Subject key identifier: A0:38:E8:39:24:58:68:F4:7F:A5:BA:E4:1D:5E:94:A6:63:D7:32:3B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D87FA95C23CD509F7870B6760 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b1386d9-7043-36f5-8587-38c78da0c30b.roa Signing time: Fri 17 Apr 2026 01:00:27 +0000 ROA not before: Fri 17 Apr 2026 01:00:27 +0000 ROA not after: Thu 16 Jul 2026 01:00:27 +0000 asID: 396540 IP address blocks: 2001:502:8cc::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:fa:95:c2:3c:d5:09:f7:87:0b:67:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 17 01:00:27 2026 GMT Not After : Jul 16 01:00:27 2026 GMT Subject: CN=cf0d86e4-242c-442d-b715-362c3773b9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:fc:ee:90:e6:57:12:9b:66:b1:51:bc:48: 2c:07:39:3a:20:f9:7c:61:cd:f8:e3:8d:08:d0:02: 15:a8:38:71:eb:0e:f0:78:10:7f:a5:af:34:c3:09: d9:1a:ab:f2:38:32:be:7e:aa:1f:6e:0b:93:19:61: 20:41:b8:08:b4:24:a1:85:f8:52:13:d1:c9:fa:fa: 4f:d7:f3:13:e7:9b:80:82:1a:8f:75:6b:fb:09:fa: 02:c4:72:75:44:db:58:34:84:98:26:10:2d:9b:ff: 39:b7:4b:79:c7:14:08:58:e3:04:e5:d8:b6:92:41: 2a:94:67:0d:fc:db:c4:75:94:cd:3c:d7:cb:bf:ba: 01:49:f7:cf:65:35:3c:bb:30:c8:f3:b8:96:36:a0: 49:f8:87:14:df:6e:99:19:59:96:0c:35:c3:c3:3c: 3d:94:0d:fc:68:3c:8b:0a:23:59:76:2d:70:11:63: 86:46:6d:78:d2:ca:ef:a0:32:f0:c3:6f:09:47:e1: 1e:3b:cd:4c:86:0b:79:ef:74:d5:34:34:34:5d:b4: 84:9f:9a:8a:a9:09:69:2d:fd:1c:b2:25:9b:2b:d4: ad:e5:22:e1:e8:56:cc:f9:6f:bb:77:bb:68:90:65: 82:a4:dc:b1:0b:21:89:e1:e4:80:9e:be:9c:58:40: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:38:E8:39:24:58:68:F4:7F:A5:BA:E4:1D:5E:94:A6:63:D7:32:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/3b1386d9-7043-36f5-8587-38c78da0c30b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:8cc:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:4c:c9:aa:99:5f:6f:ca:37:70:bb:4d:75:5d:b6:42:61:40: fa:ff:00:7e:d3:d6:96:73:ad:08:1e:f5:16:55:c1:9f:87:7f: 1b:33:01:a6:7b:d7:fb:e6:a6:42:2c:33:87:46:9b:9d:bc:ac: 5b:f9:bc:1c:82:cb:29:8f:c6:6f:27:1b:8e:b9:0d:c6:c1:e0: 12:01:20:10:04:3d:e2:69:15:25:34:a8:80:43:6d:65:d9:16: f0:1d:e9:db:92:92:a2:a2:e4:55:8e:66:26:07:4f:f8:c0:a7: 89:a8:e2:d9:6e:60:4d:1c:f0:98:6a:97:0a:e4:84:7c:ba:e9: f2:b1:ac:fb:bc:08:2a:53:e2:d3:9d:54:6b:45:41:96:5c:f7: 86:95:f0:b9:44:8e:00:b3:8d:1d:8c:ee:b8:e3:db:fa:d0:6e: 84:a7:10:5d:ec:39:2d:fa:91:ae:05:1a:5d:e6:15:1b:60:00: 1d:e8:70:a9:98:dc:2b:9c:9f:8d:aa:9f:c1:ee:36:e5:c7:6d: c4:98:28:95:5d:8f:f2:1b:a3:7e:f8:1c:8d:ff:75:bd:74:e1: 3a:fd:07:28:d4:0c:57:0a:4f:56:1d:03:ea:6a:03:d5:bc:7f: bf:12:a0:81:7a:a4:9f:e3:19:a4:ef:63:bb:49:cb:f3:99:41: e6:b8:8b:5b -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE2H+pXCPNUJ94cLZ2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQxNzAxMDAyN1oXDTI2MDcxNjAxMDAyN1owLzEtMCsGA1UEAxMk Y2YwZDg2ZTQtMjQyYy00NDJkLWI3MTUtMzYyYzM3NzNiOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI/87pDmVxKbZrFRvEgsBzk6IPl8Yc34440I 0AIVqDhx6w7weBB/pa80wwnZGqvyODK+fqofbguTGWEgQbgItCShhfhSE9HJ+vpP 1/MT55uAghqPdWv7CfoCxHJ1RNtYNISYJhAtm/85t0t5xxQIWOME5di2kkEqlGcN /NvEdZTNPNfLv7oBSffPZTU8uzDI87iWNqBJ+IcU326ZGVmWDDXDwzw9lA38aDyL CiNZdi1wEWOGRm140srvoDLww28JR+EeO81Mhgt573TVNDQ0XbSEn5qKqQlpLf0c siWbK9St5SLh6FbM+W+7d7tokGWCpNyxCyGJ4eSAnr6cWEAS+wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKA46DkkWGj0f6W65B1elKZj1zI7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvM2IxMzg2ZDktNzA0My0z NmY1LTg1ODctMzhjNzhkYTBjMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAgjM AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCRTMmqmV9vyjdwu011XbZCYUD6/wB+09aWc60I HvUWVcGfh38bMwGme9f75qZCLDOHRpudvKxb+bwcgsspj8ZvJxuOuQ3GweASASAQ BD3iaRUlNKiAQ21l2RbwHenbkpKiouRVjmYmB0/4wKeJqOLZbmBNHPCYapcK5IR8 uunysaz7vAgqU+LTnVRrRUGWXPeGlfC5RI4As40djO6449v60G6EpxBd7Dkt+pGu BRpd5hUbYAAd6HCpmNwrnJ+Nqp/B7jblx23EmCiVXY/yG6N++ByN/3W9dOE6/Qco 1AxXCk9WHQPqagPVvH+/EqCBeqSf4xmk72O7ScvzmUHmuItb -----END CERTIFICATE-----Generated at Fri Apr 17 17:53:53 2026 by rpki-client