$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa File: 8a504d20-acb4-356e-98ad-eecca8e4d734.roa (raw, json) Hash identifier: HvPFY+IG9Ecb932G4b/q2eQ6DLS3IqRVH/1yGp8tYkA= Subject key identifier: 17:16:E0:26:62:0B:E0:71:4F:43:95:B5:78:F6:49:F6:A3:4A:54:A1 Certificate issuer: /CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Certificate serial: 010D0C9F4328584D571FBE7D5AD12C76F4B23E00 Authority key identifier: 5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 0 IP address blocks: 2001:504:a0::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:be:7d:5a:d1:2c:76:f4:b2:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f98c2-cbd2-43de-a8cf-7091ad719621 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=a97fe831-81ae-46a3-8d9c-d77d70ab66d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:59:45:cb:7b:09:c8:0d:9e:4e:c5:cd:03:1e: 14:87:29:12:a7:e0:43:52:7c:f1:8d:db:88:fa:ae: 7f:25:0c:c3:60:3b:b8:5e:68:bf:f7:34:eb:81:23: d5:9a:f1:21:a8:ce:d7:37:5a:06:06:8d:67:0f:82: 1f:52:92:07:81:f9:2b:a8:21:ac:5a:cf:7c:f3:ed: 8f:30:44:ae:d3:06:0e:5f:04:4b:f4:79:40:1b:27: fc:a5:7d:75:e6:28:eb:f4:9d:16:4d:f7:92:e0:15: 91:84:dc:7e:c6:b2:ca:1e:33:23:cc:95:16:55:91: ed:f3:34:89:91:b8:d0:d0:3d:5f:68:5a:c0:9a:fc: e5:de:59:11:52:8a:47:ab:e7:e3:57:5c:c6:0b:16: cb:6f:3d:a6:15:a5:35:47:4a:bc:44:07:0c:44:c3: 0d:47:8a:a8:1f:5f:99:31:f0:4e:bd:df:95:7c:4f: 10:5a:84:1d:d0:cb:98:b1:99:21:0b:90:e6:7f:c2: f8:f6:9d:a1:bf:76:77:32:64:7f:2b:74:5c:6e:c9: 06:fe:2a:23:4e:3b:29:dc:d2:25:a9:d7:8e:42:9b: d4:da:73:da:8b:9c:b0:46:d5:6f:ba:20:a4:b9:97: 1a:f7:73:32:47:f9:08:e4:ae:fd:e7:d6:90:8f:ca: 9e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:16:E0:26:62:0B:E0:71:4F:43:95:B5:78:F6:49:F6:A3:4A:54:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/8a504d20-acb4-356e-98ad-eecca8e4d734.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621/917f98c2-cbd2-43de-a8cf-7091ad719621.crl X509v3 Authority Key Identifier: keyid:5D:92:48:68:AC:B1:85:67:D2:75:86:CA:93:F0:1D:52:F7:6C:FC:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917f98c2-cbd2-43de-a8cf-7091ad719621.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:a0::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:54:a9:8d:73:1f:41:36:1f:5e:a7:52:7f:90:14:67:89:a7: d0:e2:34:41:b9:83:29:76:d9:f7:cd:47:e2:22:ff:46:36:8e: 17:ec:d1:eb:97:47:e4:d4:62:f9:a9:74:40:ed:02:32:c7:29: f7:58:27:7a:7a:bc:c4:35:1b:ea:35:d2:ed:5c:f7:51:50:9d: fa:99:73:30:4b:ba:e1:ef:6a:48:74:a5:8d:4b:a4:14:51:ec: 19:9d:d7:1d:0d:61:c5:8a:13:3c:36:f6:7a:d1:0e:78:73:cf: 41:20:9b:c2:26:dd:65:44:6e:b1:4c:5a:20:e8:80:90:2d:7f: 82:fe:7e:72:42:cb:0d:72:7b:40:67:1f:a4:a8:66:99:ef:c3: c0:7a:7d:14:81:78:1b:d0:3c:ba:76:d2:d5:ac:69:ca:00:b1: d4:87:fe:ef:53:b7:7d:4c:bd:e2:0f:ca:63:5e:1b:13:d0:2c: a3:b7:15:ea:4e:f9:3a:e0:0d:2e:eb:a0:e4:59:9d:1d:c8:26: 1b:14:90:28:ad:ec:fe:07:aa:38:6f:6c:e8:1d:34:bc:1a:eb: 89:ab:50:c7:23:2f:4e:a9:e5:d0:c6:1d:51:81:5d:bd:3e:cf: eb:4d:56:77:d8:00:2d:09:a4:59:4c:09:a9:10:ef:1e:20:e8: d5:23:5c:6d -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE1XH759WtEsdvSyPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3Zjk4YzItY2JkMi00M2RlLWE4Y2YtNzA5MWFkNzE5 NjIxMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YTk3ZmU4MzEtODFhZS00NmEzLThkOWMtZDc3ZDcwYWI2NmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAollFy3sJyA2eTsXNAx4UhykSp+BDUnzxjduI +q5/JQzDYDu4Xmi/9zTrgSPVmvEhqM7XN1oGBo1nD4IfUpIHgfkrqCGsWs988+2P MESu0wYOXwRL9HlAGyf8pX115ijr9J0WTfeS4BWRhNx+xrLKHjMjzJUWVZHt8zSJ kbjQ0D1faFrAmvzl3lkRUopHq+fjV1zGCxbLbz2mFaU1R0q8RAcMRMMNR4qoH1+Z MfBOvd+VfE8QWoQd0MuYsZkhC5Dmf8L49p2hv3Z3MmR/K3RcbskG/iojTjsp3NIl qdeOQpvU2nPai5ywRtVvuiCkuZca93MyR/kI5K7959aQj8qe0QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFBcW4CZiC+BxT0OVtXj2SfajSlShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MTdm OThjMi1jYmQyLTQzZGUtYThjZi03MDkxYWQ3MTk2MjEvOGE1MDRkMjAtYWNiNC0z NTZlLTk4YWQtZWVjY2E4ZTRkNzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTE3Zjk4YzItY2JkMi00M2RlLWE4 Y2YtNzA5MWFkNzE5NjIxLzkxN2Y5OGMyLWNiZDItNDNkZS1hOGNmLTcwOTFhZDcx OTYyMS5jcmwwHwYDVR0jBBgwFoAUXZJIaKyxhWfSdYbKk/AdUvds/O8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MTdmOThjMi1jYmQyLTQzZGUtYThjZi03MDkx YWQ3MTk2MjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFBACg AAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAL1SpjXMfQTYfXqdSf5AUZ4mn0OI0QbmDKXbZ981H4iL/RjaO F+zR65dH5NRi+al0QO0CMscp91gnenq8xDUb6jXS7Vz3UVCd+plzMEu64e9qSHSl jUukFFHsGZ3XHQ1hxYoTPDb2etEOeHPPQSCbwibdZURusUxaIOiAkC1/gv5+ckLL DXJ7QGcfpKhmme/DwHp9FIF4G9A8unbS1axpygCx1If+71O3fUy94g/KY14bE9As o7cV6k75OuANLuug5FmdHcgmGxSQKK3s/geqOG9s6B00vBrriatQxyMvTqnl0MYd UYFdvT7P601Wd9gALQmkWUwJqRDvHiDo1SNcbQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:51:57 2026 by rpki-client