$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/842a536f-e838-30c3-9741-3e199560ab5b.roa File: 842a536f-e838-30c3-9741-3e199560ab5b.roa (raw, json) Hash identifier: Q2jnaPv9h3DzIHfh2kZ0ALOxbVQ1rdQSf6nFX6cbH3s= Subject key identifier: 1E:CD:49:F1:3B:D0:3D:C1:1D:07:B3:40:1F:82:87:21:F7:AB:AC:1B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E0F8B87687338614A0B0FB9C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/842a536f-e838-30c3-9741-3e199560ab5b.roa Signing time: Thu 04 Jun 2026 14:26:46 +0000 ROA not before: Thu 04 Jun 2026 14:26:46 +0000 ROA not after: Wed 02 Sep 2026 14:26:46 +0000 asID: 396587 IP address blocks: 2001:503:d2d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0f:8b:87:68:73:38:61:4a:0b:0f:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 4 14:26:46 2026 GMT Not After : Sep 2 14:26:46 2026 GMT Subject: CN=26c1b751-8742-45b0-9d76-f2a3b03617be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:59:3a:c9:48:02:7d:1e:59:44:c0:ec:a4:0a: 05:e3:f8:f3:3f:58:4a:c6:86:4a:e5:49:70:99:35: ab:b4:9f:57:a2:4a:23:b2:8e:67:52:23:d7:ed:f5: 44:db:80:86:0d:85:a5:a8:a4:a6:bb:ff:bb:9d:0c: e5:5c:f5:84:8a:31:06:54:2d:53:46:bb:f6:5f:e7: e1:b6:21:b1:5f:9a:7f:21:03:5b:de:55:a2:85:98: 2c:54:ba:b6:be:f8:7f:3d:a9:2a:83:cc:e2:52:74: 7e:84:5f:41:85:bc:0a:65:0a:5c:ba:64:a5:f0:2a: b9:1b:a3:4f:7c:0a:e6:48:f0:aa:c1:18:5f:40:88: e0:91:9a:1a:93:28:4b:30:7d:dc:86:ae:2b:b9:42: b8:9d:ac:95:a8:88:77:ee:77:5c:0e:66:63:e3:6c: bb:06:76:c7:20:e7:54:cd:46:a5:04:78:72:ad:3b: de:f0:bf:37:4c:a7:47:a8:92:6f:cb:6f:83:00:f6: b3:b2:be:b9:ed:24:e0:f6:79:2f:fb:30:0d:5c:dd: 4d:cc:e4:fc:6f:20:15:95:b2:d5:c8:7c:ce:44:04: d8:b5:7b:48:55:12:6d:b4:1e:f4:1c:28:00:21:ea: 49:e5:b7:40:9d:51:c9:c9:5b:12:bf:21:ed:d1:5b: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CD:49:F1:3B:D0:3D:C1:1D:07:B3:40:1F:82:87:21:F7:AB:AC:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/842a536f-e838-30c3-9741-3e199560ab5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d2d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:91:59:8d:34:05:65:5a:ac:08:d3:76:e9:39:1f:6c:7e:22: 9d:49:a7:cd:f4:ad:c2:0f:30:f7:43:3e:e5:5d:8b:0a:c3:14: 99:67:bd:4a:f3:01:40:6e:56:78:34:63:08:30:a0:60:ab:a2: 49:09:27:9a:fc:2d:29:88:18:20:9d:65:23:d0:0c:db:25:24: ab:21:b8:62:d5:9c:e4:b1:fe:31:9f:ae:b3:9a:0e:2a:82:64: 74:68:f8:a9:a1:fd:a1:53:16:b3:58:ea:99:35:cb:7b:ab:72: f3:92:09:ad:65:b4:6f:34:2e:99:a7:de:a1:35:dc:67:65:39: 72:af:e2:88:97:fb:d9:ec:b8:6c:3a:43:dd:24:2c:45:3d:f3: 84:96:ff:69:41:02:16:55:72:bd:61:c4:cc:ce:bd:14:0d:22: 0f:51:f9:95:f1:93:a7:05:14:03:b0:81:47:f7:36:67:fc:b4: 09:06:e8:7d:0e:fd:55:41:70:a5:92:e4:f4:a3:21:f0:17:61: 40:ab:e2:cf:87:fb:34:31:75:49:b6:0e:66:be:a7:60:2c:25: 8d:60:68:20:84:e3:57:bb:76:f5:93:bb:e0:97:ac:64:16:ea: 91:f6:91:e7:80:dd:f5:f6:9f:7b:03:28:05:48:7f:84:bb:67: 4e:b9:9d:a2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4Pi4doczhhSgsPucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwNDE0MjY0NloXDTI2MDkwMjE0MjY0NlowLzEtMCsGA1UEAxMk MjZjMWI3NTEtODc0Mi00NWIwLTlkNzYtZjJhM2IwMzYxN2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1k6yUgCfR5ZRMDspAoF4/jzP1hKxoZK5Ulw mTWrtJ9Xokojso5nUiPX7fVE24CGDYWlqKSmu/+7nQzlXPWEijEGVC1TRrv2X+fh tiGxX5p/IQNb3lWihZgsVLq2vvh/Pakqg8ziUnR+hF9BhbwKZQpcumSl8Cq5G6NP fArmSPCqwRhfQIjgkZoakyhLMH3chq4ruUK4nayVqIh37ndcDmZj42y7BnbHIOdU zUalBHhyrTve8L83TKdHqJJvy2+DAPazsr657STg9nkv+zANXN1NzOT8byAVlbLV yHzORATYtXtIVRJttB70HCgAIepJ5bdAnVHJyVsSvyHt0VssywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB7NSfE70D3BHQezQB+ChyH3q6wbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODQyYTUzNmYtZTgzOC0z MGMzLTk3NDEtM2UxOTk1NjBhYjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAw0t MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAByRWY00BWVarAjTduk5H2x+Ip1Jp830rcIPMPdDPuVdiwrDFJln vUrzAUBuVng0YwgwoGCrokkJJ5r8LSmIGCCdZSPQDNslJKshuGLVnOSx/jGfrrOa DiqCZHRo+Kmh/aFTFrNY6pk1y3urcvOSCa1ltG80Lpmn3qE13GdlOXKv4oiX+9ns uGw6Q90kLEU984SW/2lBAhZVcr1hxMzOvRQNIg9R+ZXxk6cFFAOwgUf3Nmf8tAkG 6H0O/VVBcKWS5PSjIfAXYUCr4s+H+zQxdUm2Dma+p2AsJY1gaCCE41e7dvWTu+CX rGQW6pH2keeA3fX2n3sDKAVIf4S7Z065naI= -----END CERTIFICATE-----Generated at Sat Jun 13 15:41:53 2026 by rpki-client