$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa File: ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa (raw, json) Hash identifier: waVxyCjePRDJfG0tFxTQedXxihK4BcWDncSvWp4RUTw= Subject key identifier: 57:58:3E:F5:76:06:BF:D5:DC:A5:50:52:A2:46:CD:D0:B9:2C:2C:32 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6EDA78999A6B3E516C3631C0 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 396602 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:78:99:9a:6b:3e:51:6c:36:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=d07cb351-a74e-4ff4-9b2c-913ee15e0c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7b:bd:42:16:50:f1:8b:97:57:4a:ff:06:3d: 1d:8d:20:5a:72:b6:9d:0d:d0:47:c8:fc:92:6c:ec: eb:09:09:93:3d:94:ec:61:b4:59:c7:8e:89:3f:21: c5:4c:b8:00:f2:f6:9d:34:7d:ae:2f:50:d2:eb:71: 9c:9e:ab:c7:23:ad:e4:93:6d:57:89:d0:35:a9:9d: 07:98:72:24:24:74:79:6b:b2:93:a0:48:91:41:9b: bb:ab:c7:c6:7b:7c:48:37:89:86:46:6a:b8:42:bf: 50:b1:50:99:2d:11:c9:f7:12:e3:21:8c:40:a7:77: 77:11:8a:cc:07:b5:85:7f:f6:d1:7e:8e:8a:c4:77: d2:e5:11:82:1b:8d:e8:92:82:30:30:db:23:3a:77: 4d:13:6d:d0:a5:95:b6:59:c7:e4:9b:84:7a:fc:dd: 81:42:f5:1c:32:83:0f:a3:40:17:94:45:ac:3b:2f: 84:28:05:6b:88:d4:18:92:dd:96:05:39:c1:78:77: f7:fe:ea:85:64:0a:59:bb:b8:8f:03:6a:d1:af:29: 55:c1:91:ce:85:16:96:85:98:8f:4e:08:08:32:5f: c1:e7:85:5b:1d:f9:47:73:61:f7:2b:c8:ed:31:76: c5:85:67:ca:73:30:50:00:31:df:68:bc:bb:60:ba: e8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:58:3E:F5:76:06:BF:D5:DC:A5:50:52:A2:46:CD:D0:B9:2C:2C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ba290ddd-27e1-33cd-82c7-756aa91e1e1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:aa:dc:49:5f:f1:d7:a1:f2:97:d5:16:4c:07:c2:22:0c:7b: 82:05:bc:7c:5e:bb:47:bb:b1:03:ae:ed:e2:79:f7:1a:04:12: 4e:d6:d0:47:7f:07:81:2e:c1:aa:3c:a9:5f:9f:23:22:1e:93: 0a:ab:c4:09:74:6e:b5:6a:f6:ab:20:c1:fa:69:24:eb:f8:be: d9:7b:12:1b:1d:ac:9a:2d:e8:f3:fd:a9:78:5a:33:1b:a2:ee: d0:4e:bd:01:31:44:a6:50:82:72:a1:2b:dc:2d:b1:39:fb:cb: 2f:62:02:3b:f4:4f:61:00:84:5c:a8:37:02:8d:34:f2:01:67: ef:d0:2a:64:5d:ee:67:84:79:3a:33:a1:cf:04:30:7b:44:5f: e1:33:80:7a:d8:83:30:e5:84:40:06:76:3c:97:7a:fb:8d:b9: f1:8d:09:15:d5:bf:4a:84:7f:f1:c7:f5:03:3b:96:99:25:61: 24:eb:25:4e:c1:37:e7:9b:d8:5b:a6:c4:e4:83:54:e3:07:6f: 38:3b:83:b1:b6:e8:46:66:1d:88:48:78:0b:aa:b1:0e:ae:41: 7b:9f:75:e7:c5:a8:14:c1:9e:b6:57:70:3e:e6:c2:92:51:4a: 53:c8:d3:fc:dc:16:09:d1:dd:a0:ef:f0:42:48:51:7e:24:86: b4:c6:f8:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1u2niZmms+UWw2McAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk ZDA3Y2IzNTEtYTc0ZS00ZmY0LTliMmMtOTEzZWUxNWUwYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHu9QhZQ8YuXV0r/Bj0djSBacradDdBHyPyS bOzrCQmTPZTsYbRZx46JPyHFTLgA8vadNH2uL1DS63GcnqvHI63kk21XidA1qZ0H mHIkJHR5a7KToEiRQZu7q8fGe3xIN4mGRmq4Qr9QsVCZLRHJ9xLjIYxAp3d3EYrM B7WFf/bRfo6KxHfS5RGCG43okoIwMNsjOndNE23QpZW2Wcfkm4R6/N2BQvUcMoMP o0AXlEWsOy+EKAVriNQYkt2WBTnBeHf3/uqFZApZu7iPA2rRrylVwZHOhRaWhZiP TggIMl/B54VbHflHc2H3K8jtMXbFhWfKczBQADHfaLy7YLroHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFdYPvV2Br/V3KVQUqJGzdC5LCwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmEyOTBkZGQtMjdlMS0z M2NkLTgyYzctNzU2YWE5MWUxZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCq3Elf8deh8pfVFkwHwiIMe4IFvHxeu0e7sQOu7eJ59xoEEk7W 0Ed/B4Euwao8qV+fIyIekwqrxAl0brVq9qsgwfppJOv4vtl7EhsdrJot6PP9qXha Mxui7tBOvQExRKZQgnKhK9wtsTn7yy9iAjv0T2EAhFyoNwKNNPIBZ+/QKmRd7meE eTozoc8EMHtEX+EzgHrYgzDlhEAGdjyXevuNufGNCRXVv0qEf/HH9QM7lpklYSTr JU7BN+eb2FumxOSDVOMHbzg7g7G26EZmHYhIeAuqsQ6uQXufdefFqBTBnrZXcD7m wpJRSlPI0/zcFgnR3aDv8EJIUX4khrTG+Mw= -----END CERTIFICATE-----Generated at Fri Apr 17 10:49:57 2026 by rpki-client