$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a3694df-63a0-39be-a55a-ea7d303b1d2c.roa File: 5a3694df-63a0-39be-a55a-ea7d303b1d2c.roa (raw, json) Hash identifier: T4/SLPgzxtRU1rOM53BBhvetG75TW2lF+LxNMWQUtzc= Subject key identifier: 13:43:88:99:CA:1B:8A:CF:C4:04:A3:F4:58:D0:F0:EF:E7:8B:63:E7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E0F8B8777A22395AA0172F700 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a3694df-63a0-39be-a55a-ea7d303b1d2c.roa Signing time: Thu 04 Jun 2026 14:26:46 +0000 ROA not before: Thu 04 Jun 2026 14:26:46 +0000 ROA not after: Wed 02 Sep 2026 14:26:46 +0000 asID: 25485 IP address blocks: 2001:503:d2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0f:8b:87:77:a2:23:95:aa:01:72:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 4 14:26:46 2026 GMT Not After : Sep 2 14:26:46 2026 GMT Subject: CN=6b8ee65d-495b-4588-8023-c8aa55e3b82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f1:3f:3d:db:41:a9:11:5d:f6:78:f4:ff:2d: 43:4f:bb:06:09:36:46:a2:5f:6e:83:fd:52:9b:d2: 68:11:e9:0f:b4:81:3c:1b:be:b9:67:1f:39:aa:d6: 2f:41:24:44:eb:42:3b:9b:11:4b:86:97:17:f6:08: ec:b5:4e:66:dc:df:99:66:f8:0e:3a:67:be:3a:b9: ac:68:d3:bf:ae:bd:26:8a:b6:f1:85:60:23:ea:42: 0e:77:38:de:69:23:16:24:8a:16:48:15:a6:d7:42: c5:ad:02:f9:5c:61:84:78:ab:09:2d:a9:1e:71:62: 0d:f7:20:d4:ca:f8:0d:77:67:3d:25:d0:f8:57:54: 92:1f:69:ba:ff:1a:03:8a:bd:17:2c:eb:15:44:16: 45:cb:33:b6:ff:a7:c4:ea:8f:38:a2:3f:53:e1:5d: ea:98:4a:8b:32:f0:02:b9:87:16:3f:b5:28:68:6e: 87:83:1d:93:c1:21:54:c8:b0:d7:d1:d2:fc:89:77: 3f:2c:73:c3:ff:43:0c:a2:23:36:0d:82:4a:84:26: 53:0c:ec:74:e1:11:b0:bc:45:64:9d:a3:2f:96:58: b6:f9:30:ca:0e:ca:8d:20:7d:ad:51:79:f8:68:09: 2e:d9:d0:05:a4:5a:f1:55:76:42:60:6e:de:11:de: 12:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:43:88:99:CA:1B:8A:CF:C4:04:A3:F4:58:D0:F0:EF:E7:8B:63:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/5a3694df-63a0-39be-a55a-ea7d303b1d2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:b4:33:22:a3:5f:10:73:bc:95:a8:70:bf:d6:9e:91:6d:22: 87:91:0c:45:e4:21:dd:6c:d0:af:f0:a5:20:c1:40:06:75:25: 03:4f:e0:cc:ff:31:51:b3:d3:d0:5e:9d:ea:de:85:92:4f:50: 0c:6a:7c:eb:0f:84:aa:18:31:e5:29:dd:cd:1e:57:d1:14:1c: 95:d7:5c:ae:42:05:1a:12:aa:a2:e1:73:0c:14:a5:6c:3d:e0: 70:82:b2:35:ac:a9:92:9e:6a:65:a2:39:03:c6:63:5f:5e:94: f3:90:64:87:af:0b:a8:e3:2e:15:1f:21:b4:a2:fd:fb:52:4b: 4a:a5:73:65:b7:0a:81:1a:9f:1f:e3:d9:38:0f:85:9b:85:7b: 6f:48:9f:9b:cd:a8:03:b5:92:9b:d0:0b:56:cb:e6:07:eb:3f: ef:7d:53:24:a5:d6:88:34:89:88:cb:80:20:c2:f4:12:f2:07: cb:66:09:c3:fe:bd:4e:c6:88:ae:4e:b2:94:97:0a:c7:07:a2: f5:11:86:f5:ff:15:c8:ce:dc:09:24:d0:6b:52:3c:b1:bd:83: 5b:38:04:d9:0c:b2:c1:a9:46:ae:0b:ed:32:e8:0a:93:ec:a9: d3:51:6b:7a:db:cd:90:01:94:70:13:07:3a:ba:83:0c:ee:98: 23:80:7f:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Pi4d3oiOVqgFy9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwNDE0MjY0NloXDTI2MDkwMjE0MjY0NlowLzEtMCsGA1UEAxMk NmI4ZWU2NWQtNDk1Yi00NTg4LTgwMjMtYzhhYTU1ZTNiODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/E/PdtBqRFd9nj0/y1DT7sGCTZGol9ug/1S m9JoEekPtIE8G765Zx85qtYvQSRE60I7mxFLhpcX9gjstU5m3N+ZZvgOOme+Orms aNO/rr0mirbxhWAj6kIOdzjeaSMWJIoWSBWm10LFrQL5XGGEeKsJLakecWIN9yDU yvgNd2c9JdD4V1SSH2m6/xoDir0XLOsVRBZFyzO2/6fE6o84oj9T4V3qmEqLMvAC uYcWP7UoaG6Hgx2TwSFUyLDX0dL8iXc/LHPD/0MMoiM2DYJKhCZTDOx04RGwvEVk naMvlli2+TDKDsqNIH2tUXn4aAku2dAFpFrxVXZCYG7eEd4SVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBNDiJnKG4rPxASj9FjQ8O/ni2PnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNWEzNjk0ZGYtNjNhMC0z OWJlLWE1NWEtZWE3ZDMwM2IxZDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAw0t MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABe0MyKjXxBzvJWocL/WnpFtIoeRDEXkId1s0K/wpSDBQAZ1JQNP 4Mz/MVGz09BenerehZJPUAxqfOsPhKoYMeUp3c0eV9EUHJXXXK5CBRoSqqLhcwwU pWw94HCCsjWsqZKeamWiOQPGY19elPOQZIevC6jjLhUfIbSi/ftSS0qlc2W3CoEa nx/j2TgPhZuFe29In5vNqAO1kpvQC1bL5gfrP+99UySl1og0iYjLgCDC9BLyB8tm CcP+vU7GiK5OspSXCscHovURhvX/FcjO3Akk0GtSPLG9g1s4BNkMssGpRq4L7TLo CpPsqdNRa3rbzZABlHATBzq6gwzumCOAf6A= -----END CERTIFICATE-----Generated at Sat Jun 13 18:29:20 2026 by rpki-client