$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42294bd1-5e21-32f2-ae99-6171e89a9be8.roa File: 42294bd1-5e21-32f2-ae99-6171e89a9be8.roa (raw, json) Hash identifier: dk2PKRm5vMQY3wCh6WS+CPNs+nonqUbf3k/z0VUXbjA= Subject key identifier: 66:0E:49:DC:C0:7C:09:EF:37:A2:97:21:40:A3:D0:68:B5:12:BB:E8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6EDA7B81EF0CAAC81C66ED00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42294bd1-5e21-32f2-ae99-6171e89a9be8.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 397195 IP address blocks: 2620:0:5050::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:7b:81:ef:0c:aa:c8:1c:66:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=047cbffb-c2e4-401d-82b8-71ef40dfb07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:19:c1:dc:09:f9:83:b6:d1:26:15:26:77:18: 3a:3d:84:a5:b4:28:fc:6b:ba:0e:17:9f:ea:1a:78: 28:55:14:19:19:2c:1e:4d:c1:59:84:37:f4:c7:e7: 56:3c:1e:84:81:1f:76:2c:cb:43:f9:c4:87:85:58: c0:58:95:c3:70:92:24:e2:46:d7:71:58:3f:a2:0f: 72:0b:0b:2a:aa:f4:2a:d8:09:a9:45:51:3b:80:65: 97:5a:0d:d1:38:4a:d8:49:15:15:a2:97:32:24:a0: 6d:4c:8f:07:f5:42:8b:6b:82:20:6f:10:89:3b:6c: aa:24:e3:30:c9:ec:52:3c:19:92:e2:db:d2:a9:58: a4:bf:29:c1:d0:64:45:e3:55:a7:e1:42:fe:d2:ae: fd:60:24:85:ac:23:df:61:3f:ed:e3:74:e1:db:cd: 2f:b2:2e:58:46:fc:d5:06:6f:a5:ca:9c:13:0a:96: df:bb:e8:28:22:b3:18:4a:b3:5e:53:c3:3d:f2:ea: 89:82:29:6e:a1:57:13:b8:b2:2b:42:72:84:3b:e4: b3:5d:b8:6b:48:00:12:65:17:a7:54:15:77:be:86: 42:cb:d2:d1:e4:0e:26:0e:18:da:df:ee:82:1e:02: cb:53:2c:d0:c6:b3:89:23:10:f4:a9:de:8d:d0:36: 4e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:0E:49:DC:C0:7C:09:EF:37:A2:97:21:40:A3:D0:68:B5:12:BB:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/42294bd1-5e21-32f2-ae99-6171e89a9be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:fe:50:fe:15:f7:ac:7b:69:96:ca:8e:ce:3e:3d:0e:4a:bf: fb:1f:c8:96:79:eb:4f:6a:ef:b8:05:d2:82:52:17:d2:9b:4b: d9:7b:1f:ed:fd:94:31:64:c6:88:e1:88:f1:09:44:7f:16:f0: 96:f5:19:4b:5a:5e:3d:7c:09:d3:c7:40:9c:94:f6:28:6f:e5: 3d:bb:33:40:33:c6:d3:b3:de:b2:a4:f4:19:e0:e1:66:99:d8: ca:0b:0c:1c:1a:f7:a3:0f:cb:54:e8:5d:cd:d7:e0:ed:4e:3b: 71:c6:63:ec:b3:e6:99:be:9f:90:39:ec:1c:89:3f:44:ba:cb: ae:31:4c:f4:d7:8d:f1:62:98:76:24:6d:d7:8c:50:52:29:d7: a8:f3:9c:3b:2e:7b:5e:04:48:14:93:c7:50:11:ae:e3:57:3d: 3a:67:2c:3f:87:ae:76:d6:e6:07:a9:ee:69:37:3e:4b:c6:4b: 00:82:79:50:08:45:b5:91:a8:4e:94:4a:8f:ee:55:22:a4:73: 0b:a8:02:19:d9:0c:7e:0f:57:ad:8d:5d:81:5a:fb:ff:51:a1: d4:d5:72:9e:64:4c:63:8a:18:6b:e2:15:3f:0a:50:45:99:5b: 97:0b:22:24:c1:3a:44:c5:43:43:e7:1b:5d:e7:8c:db:30:d1: 84:98:a6:f1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1u2nuB7wyqyBxm7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk MDQ3Y2JmZmItYzJlNC00MDFkLTgyYjgtNzFlZjQwZGZiMDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixnB3An5g7bRJhUmdxg6PYSltCj8a7oOF5/q GngoVRQZGSweTcFZhDf0x+dWPB6EgR92LMtD+cSHhVjAWJXDcJIk4kbXcVg/og9y CwsqqvQq2AmpRVE7gGWXWg3ROErYSRUVopcyJKBtTI8H9UKLa4IgbxCJO2yqJOMw yexSPBmS4tvSqVikvynB0GRF41Wn4UL+0q79YCSFrCPfYT/t43Th280vsi5YRvzV Bm+lypwTCpbfu+goIrMYSrNeU8M98uqJgiluoVcTuLIrQnKEO+SzXbhrSAASZRen VBV3voZCy9LR5A4mDhja3+6CHgLLUyzQxrOJIxD0qd6N0DZOQQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFGYOSdzAfAnvN6KXIUCj0Gi1ErvoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDIyOTRiZDEtNWUyMS0z MmYyLWFlOTktNjE3MWU4OWE5YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAJiAAAFBQ AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQC//lD+Ffese2mWyo7OPj0OSr/7H8iWeetPau+4 BdKCUhfSm0vZex/t/ZQxZMaI4YjxCUR/FvCW9RlLWl49fAnTx0CclPYob+U9uzNA M8bTs96ypPQZ4OFmmdjKCwwcGvejD8tU6F3N1+DtTjtxxmPss+aZvp+QOewciT9E usuuMUz0143xYph2JG3XjFBSKdeo85w7LnteBEgUk8dQEa7jVz06Zyw/h6521uYH qe5pNz5LxksAgnlQCEW1kahOlEqP7lUipHMLqAIZ2Qx+D1etjV2BWvv/UaHU1XKe ZExjihhr4hU/ClBFmVuXCyIkwTpExUND5xtd54zbMNGEmKbx -----END CERTIFICATE-----Generated at Fri Apr 17 12:07:54 2026 by rpki-client