$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1ef72-c7a6-3596-ad41-57b127359de1.roa File: d7a1ef72-c7a6-3596-ad41-57b127359de1.roa (raw, json) Hash identifier: bauIjqVRT4EiFOubHNNzaTT4D3UBEQiO0gYAQsxtYmE= Subject key identifier: C1:4F:FD:D6:63:6A:CC:BC:73:25:25:23:D7:38:32:90:83:A3:95:69 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D6EDA74965009147796F8BA48 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1ef72-c7a6-3596-ad41-57b127359de1.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 396555 IP address blocks: 2620:0:5050::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:74:96:50:09:14:77:96:f8:ba:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=d720b582-cbcb-4501-8d7a-599f2225a257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:31:a5:14:76:e0:41:29:14:47:f6:ad:ff: 45:3b:55:98:36:c4:0a:79:3d:fb:5e:c6:c9:ea:93: 2a:72:c9:da:61:b8:b5:ae:d1:de:d0:63:ab:19:06: 47:74:04:f4:d0:81:d0:a2:94:97:11:f9:91:1b:9f: f5:1b:42:21:a1:98:95:bf:d9:bc:c3:6a:ab:c7:0d: 5b:00:7c:8c:8d:b1:2e:51:c9:cf:74:37:ff:70:4d: b7:6b:b0:30:b1:ad:88:56:40:cb:aa:01:01:bb:45: 70:99:08:20:41:d3:a5:eb:ec:47:35:cc:65:ab:3d: 5e:ee:a4:57:d1:a1:c9:61:35:53:3f:5d:97:ca:6d: 01:da:dd:c8:75:cf:ef:0d:d4:f4:1c:ec:b9:0e:6a: da:45:ee:97:c6:c0:46:dc:99:e1:5e:82:9f:4e:39: ff:bf:27:27:00:ab:e0:17:42:02:93:c8:48:aa:20: da:c3:10:88:f4:d9:c4:74:7b:8d:5c:8b:b0:c9:08: 58:26:fe:a1:14:82:1d:31:67:46:e8:cc:38:a9:f3: 66:24:19:68:27:93:e9:64:23:b6:ec:0e:d0:b9:1a: 5c:ad:08:06:3a:76:25:cd:83:47:05:f3:3e:77:35: d4:64:b7:28:8e:60:f4:cc:1e:60:29:c1:38:3a:21: c4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:4F:FD:D6:63:6A:CC:BC:73:25:25:23:D7:38:32:90:83:A3:95:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/d7a1ef72-c7a6-3596-ad41-57b127359de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2620:0:5050::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:97:14:f1:d6:41:4c:81:d0:61:f7:19:4b:af:bc:7e:7a:ce: 79:f6:54:13:e6:88:1c:64:9c:03:fe:ed:a5:16:2e:05:44:68: 84:91:24:53:91:6a:6c:27:a3:7d:d0:62:a1:ac:c6:70:e8:f1: b3:92:91:87:9d:17:9d:29:98:54:08:cc:52:64:59:e6:cf:16: 4b:47:55:b1:5d:5e:94:4f:26:4c:a6:52:fa:d6:30:74:9f:dd: 5b:40:d3:fa:86:9d:c0:e7:6a:71:c1:4d:15:38:05:a6:07:a0: 50:38:e8:81:9b:e0:aa:9b:73:20:2a:29:31:e1:64:69:01:ab: 3d:39:99:d5:d8:ef:48:6c:5a:ac:ea:f7:fe:cc:c5:d8:0c:a7: 96:52:e2:60:fc:3e:49:1b:10:9b:c4:ca:d4:19:7d:da:60:61: 7e:5d:4b:bc:9d:96:f7:67:1d:06:e0:41:23:a2:ed:00:72:b1: 35:8e:cd:06:af:06:52:30:da:76:bc:1e:f4:18:2e:8e:c1:2a: 7b:d6:49:eb:9d:11:2a:ce:f2:19:ad:c2:fe:a1:17:81:eb:60: 6c:31:b7:b5:8f:26:a2:f6:17:bc:c2:91:da:33:f2:ca:7d:71: bf:56:01:d2:1b:8c:3e:07:4f:13:38:66:60:83:1a:53:07:f6: c0:ff:96:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1u2nSWUAkUd5b4ukgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk ZDcyMGI1ODItY2JjYi00NTAxLThkN2EtNTk5ZjIyMjVhMjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJUxpRR24EEpFEf2rf9FO1WYNsQKeT37XsbJ 6pMqcsnaYbi1rtHe0GOrGQZHdAT00IHQopSXEfmRG5/1G0IhoZiVv9m8w2qrxw1b AHyMjbEuUcnPdDf/cE23a7Awsa2IVkDLqgEBu0VwmQggQdOl6+xHNcxlqz1e7qRX 0aHJYTVTP12Xym0B2t3Idc/vDdT0HOy5DmraRe6XxsBG3JnhXoKfTjn/vycnAKvg F0ICk8hIqiDawxCI9NnEdHuNXIuwyQhYJv6hFIIdMWdG6Mw4qfNmJBloJ5PpZCO2 7A7QuRpcrQgGOnYlzYNHBfM+dzXUZLcojmD0zB5gKcE4OiHEBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMFP/dZjasy8cyUlI9c4MpCDo5VpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZDdhMWVmNzItYzdhNi0z NTk2LWFkNDEtNTdiMTI3MzU5ZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAAFBQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABuXFPHWQUyB0GH3GUuvvH56znn2VBPmiBxknAP+7aUWLgVEaISR JFORamwno33QYqGsxnDo8bOSkYedF50pmFQIzFJkWebPFktHVbFdXpRPJkymUvrW MHSf3VtA0/qGncDnanHBTRU4BaYHoFA46IGb4KqbcyAqKTHhZGkBqz05mdXY70hs Wqzq9/7MxdgMp5ZS4mD8PkkbEJvEytQZfdpgYX5dS7ydlvdnHQbgQSOi7QBysTWO zQavBlIw2na8HvQYLo7BKnvWSeudESrO8hmtwv6hF4HrYGwxt7WPJqL2F7zCkdoz 8sp9cb9WAdIbjD4HTxM4ZmCDGlMH9sD/luw= -----END CERTIFICATE-----Generated at Fri Apr 17 15:43:12 2026 by rpki-client