$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7a407c4-11d5-37c3-aaef-047100b69ac1.roa File: a7a407c4-11d5-37c3-aaef-047100b69ac1.roa (raw, json) Hash identifier: +B6JVxE+dk0KIjs99WuVQaR+nrhw24/DqNSSPbx8hSc= Subject key identifier: A4:BB:7E:A0:67:49:A5:88:74:F3:39:93:77:32:31:47:3A:70:B2:FC Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D732BD4CB02A4816DC95F0EA4 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7a407c4-11d5-37c3-aaef-047100b69ac1.roa Signing time: Thu 09 Apr 2026 14:07:51 +0000 ROA not before: Thu 09 Apr 2026 14:07:51 +0000 ROA not after: Wed 08 Jul 2026 14:07:51 +0000 asID: 397210 IP address blocks: 2001:503:d2d::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:2b:d4:cb:02:a4:81:6d:c9:5f:0e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 9 14:07:51 2026 GMT Not After : Jul 8 14:07:51 2026 GMT Subject: CN=a9cd644c-ccff-4d2a-8c98-36aba0663376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e3:07:2a:e9:88:8b:44:3f:71:1b:24:9d:72: 48:64:60:bb:21:cb:e8:a4:14:e9:f4:90:1c:23:97: 8d:2b:48:92:f9:e4:f6:3d:63:99:29:da:81:2a:5c: 34:5e:dd:c1:24:11:0c:20:76:42:59:3c:1a:24:b9: 65:ca:8c:5f:86:0a:d6:c1:65:fe:b6:3c:80:6a:24: fa:d6:2f:cf:c5:72:36:53:65:6d:a3:cc:9e:03:b3: 97:cd:39:59:bc:e3:72:ce:b9:69:d6:4a:06:a8:29: 59:83:42:c5:6a:2d:27:8c:f6:54:de:5e:0d:45:c8: 76:da:96:5a:38:40:97:db:65:8e:d6:52:ea:34:be: 68:70:f1:34:30:2a:da:1e:68:0c:ec:8b:5f:4c:91: 49:9f:5a:81:be:fa:00:4f:9e:c2:cf:71:bf:5d:b3: e1:e1:b4:b8:e4:bf:a5:0c:fd:ac:69:e6:47:97:28: cb:48:f4:5e:d7:10:68:e8:1b:a9:b8:5a:6f:30:d6: a9:b4:7d:2b:06:6b:e5:46:4d:9d:b5:57:d0:ac:da: 3a:3c:01:54:0f:0a:ef:e4:f9:f1:70:de:db:4a:db: 48:1b:06:56:c5:31:19:c7:a4:99:3f:ea:1c:78:b1: 44:e3:c6:82:6d:29:45:b8:d5:84:4b:aa:93:ed:f5: 3e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BB:7E:A0:67:49:A5:88:74:F3:39:93:77:32:31:47:3A:70:B2:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a7a407c4-11d5-37c3-aaef-047100b69ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:d2d:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a5:a5:12:5e:b3:ab:ef:0b:6d:e2:60:c3:47:9d:af:a5:01: c5:25:1c:bd:11:a6:18:da:66:4e:e4:a6:d4:3e:84:6f:f6:a6: 03:6c:7a:88:db:a7:cf:fc:f3:48:0d:a8:01:04:33:39:c8:5e: c4:1f:5b:57:1d:50:c6:2c:12:ec:d2:6c:23:b6:ae:20:e1:40: 48:95:03:01:31:48:27:60:ba:b5:ca:92:b4:96:c0:2e:b4:08: b0:46:15:50:4a:4a:65:60:10:00:e1:d9:53:f3:1b:8a:43:35: bb:32:87:1b:b7:5d:8c:22:3d:e8:83:c4:c3:c4:10:bf:e8:2e: fe:5f:e9:3e:34:98:46:31:83:e5:26:10:29:b2:25:ef:14:15: a5:b3:58:63:e7:1c:07:5e:07:9c:dd:4f:a5:f7:ed:15:39:f3: 41:68:7a:0e:8c:dd:fe:80:cb:4f:d4:fe:db:c4:58:7b:9e:25: 16:fe:20:74:2e:28:ff:e4:8f:0a:ad:91:16:28:ae:94:6a:5d: 8c:b4:b1:ec:ec:ca:0f:55:12:ee:a8:f8:22:d0:d3:7f:a1:4f: 07:d6:40:d2:06:af:6f:97:8c:65:1b:7d:3c:1f:c6:c2:7a:58: 1b:b5:be:92:35:b2:56:a3:fd:12:f8:c5:2e:0d:e4:9a:a6:76: 7d:3e:c8:e1 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE1zK9TLAqSBbclfDqQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwOTE0MDc1MVoXDTI2MDcwODE0MDc1MVowLzEtMCsGA1UEAxMk YTljZDY0NGMtY2NmZi00ZDJhLThjOTgtMzZhYmEwNjYzMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuMHKumIi0Q/cRsknXJIZGC7IcvopBTp9JAc I5eNK0iS+eT2PWOZKdqBKlw0Xt3BJBEMIHZCWTwaJLllyoxfhgrWwWX+tjyAaiT6 1i/PxXI2U2Vto8yeA7OXzTlZvONyzrlp1koGqClZg0LFai0njPZU3l4NRch22pZa OECX22WO1lLqNL5ocPE0MCraHmgM7ItfTJFJn1qBvvoAT57Cz3G/XbPh4bS45L+l DP2saeZHlyjLSPRe1xBo6BupuFpvMNaptH0rBmvlRk2dtVfQrNo6PAFUDwrv5Pnx cN7bSttIGwZWxTEZx6SZP+oceLFE48aCbSlFuNWES6qT7fU+hQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFKS7fqBnSaWIdPM5k3cyMUc6cLL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTdhNDA3YzQtMTFkNS0z N2MzLWFhZWYtMDQ3MTAwYjY5YWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAw0t AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBypaUSXrOr7wtt4mDDR52vpQHFJRy9EaYY2mZO 5KbUPoRv9qYDbHqI26fP/PNIDagBBDM5yF7EH1tXHVDGLBLs0mwjtq4g4UBIlQMB MUgnYLq1ypK0lsAutAiwRhVQSkplYBAA4dlT8xuKQzW7Mocbt12MIj3og8TDxBC/ 6C7+X+k+NJhGMYPlJhApsiXvFBWls1hj5xwHXgec3U+l9+0VOfNBaHoOjN3+gMtP 1P7bxFh7niUW/iB0Lij/5I8KrZEWKK6Ual2MtLHs7MoPVRLuqPgi0NN/oU8H1kDS Bq9vl4xlG308H8bCelgbtb6SNbJWo/0S+MUuDeSapnZ9Psjh -----END CERTIFICATE-----Generated at Fri Apr 17 13:02:52 2026 by rpki-client