$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df41fb7c-4fc6-3559-9d44-d0e9518e9191.roa File: df41fb7c-4fc6-3559-9d44-d0e9518e9191.roa (raw, json) Hash identifier: M12k+ABHDz5XI++E0ohht1mvLpe+AHROm0WwBLxm3ss= Subject key identifier: D1:F1:D1:9E:F7:02:2A:33:D7:B5:18:05:35:C5:6B:5B:D4:31:53:E1 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584E09F250C0C6E15C3659BE9920 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df41fb7c-4fc6-3559-9d44-d0e9518e9191.roa Signing time: Tue 02 Jun 2026 14:19:01 +0000 ROA not before: Tue 02 Jun 2026 14:19:01 +0000 ROA not after: Mon 31 Aug 2026 14:19:01 +0000 asID: 396688 IP address blocks: 2001:503:231d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:09:f2:50:c0:c6:e1:5c:36:59:be:99:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jun 2 14:19:01 2026 GMT Not After : Aug 31 14:19:01 2026 GMT Subject: CN=988b54c5-8108-43f7-9f0e-27682d08e110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:70:ea:b5:dc:3d:1b:2a:7e:d0:83:78:9d:bf: aa:5e:f3:ef:c6:c6:ee:35:de:76:91:d6:b0:d8:63: ca:67:d5:02:f9:dc:68:ef:39:64:bc:69:17:95:2e: 7e:69:1d:f0:ba:4d:63:e3:dc:ae:e2:c8:95:61:ce: a6:fc:06:a9:4e:25:6b:33:a5:43:07:a2:5a:d6:22: d2:d0:8c:58:e0:6b:19:c4:39:11:e4:de:16:2a:97: b9:ce:08:a3:db:7f:b0:1e:d8:fb:e4:93:3d:bb:f3: d2:fd:c4:20:33:8b:08:4a:6a:81:35:f6:11:c6:78: f1:9a:41:59:b8:80:0e:fc:4e:e9:17:75:4f:65:78: f5:95:ff:f8:dd:8b:07:39:f0:1b:bd:66:e9:96:2f: 7f:55:81:b3:e5:b9:29:a7:4b:9a:5e:b1:f8:0d:61: 95:3e:a4:e4:cf:ba:75:6a:d3:7d:02:40:26:f6:95: d2:44:61:77:47:d1:aa:0a:99:e3:00:88:59:e5:a1: 9b:ac:9a:56:59:04:56:d1:78:42:e2:52:57:33:2c: 89:b8:9b:a5:8f:91:6e:5d:a4:18:d7:16:b0:8a:97: e5:a9:1c:95:81:d6:3c:05:36:af:f0:bd:b3:5f:66: b9:27:78:8e:08:d0:61:4e:8c:51:ca:19:82:d2:be: 23:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F1:D1:9E:F7:02:2A:33:D7:B5:18:05:35:C5:6B:5B:D4:31:53:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/df41fb7c-4fc6-3559-9d44-d0e9518e9191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:231d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:87:3a:b4:74:11:ad:d0:89:f0:4c:e0:78:92:31:8a:35:05: a3:ec:2d:46:80:c0:b3:61:b5:33:c2:19:23:a3:2e:bf:4c:38: 85:26:27:2b:2f:1c:28:c5:1a:47:44:18:72:35:12:58:31:e2: 3f:f1:43:6a:c6:83:4d:11:8e:78:b7:46:78:53:dc:f4:9e:94: e1:c7:00:85:c1:e9:a5:9f:e6:cb:a4:59:b2:47:68:2c:94:78: e0:16:26:53:27:ba:bb:7d:82:f4:c3:13:ec:8f:29:38:cc:82: e8:95:02:98:54:47:cb:ec:a3:2a:be:c0:91:5f:1c:fb:3a:d9: 89:70:56:0b:bb:a2:22:78:25:0e:5e:49:7a:4d:d9:78:30:49: 9f:2f:a8:ff:5f:e9:71:95:be:76:35:c4:ed:35:47:0e:93:85: a4:3b:82:d4:a5:a8:01:3e:65:60:94:c4:95:dc:25:63:cc:c6: 06:19:4f:4c:24:a1:ee:dc:3c:a5:84:c7:cb:a6:58:ff:80:47: be:a3:89:63:88:e6:4f:c5:9c:34:a5:60:d0:cf:4d:df:44:f9: fb:d8:12:0a:1e:c6:d6:0f:20:b5:db:91:8e:b4:e9:b8:a6:5d: e3:4e:c5:b3:a9:74:67:d3:60:ca:fd:e5:f7:d5:2b:ab:0c:5c: 19:55:39:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4J8lDAxuFcNlm+mSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDYwMjE0MTkwMVoXDTI2MDgzMTE0MTkwMVowLzEtMCsGA1UEAxMk OTg4YjU0YzUtODEwOC00M2Y3LTlmMGUtMjc2ODJkMDhlMTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53Dqtdw9Gyp+0IN4nb+qXvPvxsbuNd52kdaw 2GPKZ9UC+dxo7zlkvGkXlS5+aR3wuk1j49yu4siVYc6m/AapTiVrM6VDB6Ja1iLS 0IxY4GsZxDkR5N4WKpe5zgij23+wHtj75JM9u/PS/cQgM4sISmqBNfYRxnjxmkFZ uIAO/E7pF3VPZXj1lf/43YsHOfAbvWbpli9/VYGz5bkpp0uaXrH4DWGVPqTkz7p1 atN9AkAm9pXSRGF3R9GqCpnjAIhZ5aGbrJpWWQRW0XhC4lJXMyyJuJulj5FuXaQY 1xawipflqRyVgdY8BTav8L2zX2a5J3iOCNBhToxRyhmC0r4j6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNHx0Z73Aioz17UYBTXFa1vUMVPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvZGY0MWZiN2MtNGZjNi0z NTU5LTlkNDQtZDBlOTUxOGU5MTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAyMd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE6HOrR0Ea3QifBM4HiSMYo1BaPsLUaAwLNhtTPCGSOjLr9MOIUm JysvHCjFGkdEGHI1Elgx4j/xQ2rGg00Rjni3RnhT3PSelOHHAIXB6aWf5sukWbJH aCyUeOAWJlMnurt9gvTDE+yPKTjMguiVAphUR8vsoyq+wJFfHPs62YlwVgu7oiJ4 JQ5eSXpN2XgwSZ8vqP9f6XGVvnY1xO01Rw6ThaQ7gtSlqAE+ZWCUxJXcJWPMxgYZ T0wkoe7cPKWEx8umWP+AR76jiWOI5k/FnDSlYNDPTd9E+fvYEgoextYPILXbkY60 6bimXeNOxbOpdGfTYMr95ffVK6sMXBlVOYk= -----END CERTIFICATE-----Generated at Sat Jun 13 20:28:00 2026 by rpki-client