$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa File: 25dfc76c-b579-36f8-95b3-a1b22bcff809.roa (raw, json) Hash identifier: W7NmgC4gk+xhDzihiYXpCc4/sm7tDBVi3iDfWJT5olg= Subject key identifier: 35:48:98:8B:DD:F1:34:4C:26:55:7A:A7:C2:88:9A:32:23:F4:03:43 Certificate issuer: /CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Certificate serial: 010D0C9F4328584D9A20188FB46DC379CCC34830 Authority key identifier: E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 0 IP address blocks: 2001:504:100::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:18:8f:b4:6d:c3:79:cc:c3:48:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=ddf3a6ac-5731-4d30-aec8-93bc2dc6152c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:d7:5d:b7:d6:df:a5:2f:7a:e6:56:51:92: ce:7f:01:91:f6:ae:b2:da:dd:6d:09:53:01:ee:06: 91:cd:d2:f1:7a:d2:17:9b:ae:e5:bd:23:89:c4:02: de:62:84:3d:3d:3b:74:3b:e7:98:3c:6d:20:9b:61: 18:b4:33:5d:07:0c:8d:0c:36:d3:84:7f:13:8a:21: 59:40:44:3c:62:91:3e:a3:31:ad:34:2e:ac:ab:56: b0:2d:45:22:4c:f0:8f:08:a0:2a:c3:ee:63:85:5c: ca:7e:6b:72:98:a8:29:22:e0:56:3c:6d:69:e5:11: 48:62:db:12:fe:d8:5e:9a:15:67:40:50:28:2a:4c: 5e:e1:7d:3a:1e:ce:45:89:7c:74:52:91:9d:bb:26: b9:b1:73:50:88:b8:db:20:9f:13:43:01:4c:d9:61: 77:a0:26:a8:a3:cf:4b:1a:73:23:c4:5b:2f:75:55: 08:62:c5:c7:a0:1e:d4:56:81:a1:21:b6:1c:a8:26: f0:ed:a9:8e:1c:0b:34:3f:5a:38:ce:73:3b:4c:36: 8f:39:a2:e6:64:a1:84:3f:2d:40:3f:84:63:11:2e: 01:4c:c2:ee:ec:e4:53:c3:a3:09:35:15:f9:d5:a7: 2a:d9:ec:ee:eb:f7:40:8a:a7:73:30:2c:7f:1f:13: d9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:48:98:8B:DD:F1:34:4C:26:55:7A:A7:C2:88:9A:32:23:F4:03:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/25dfc76c-b579-36f8-95b3-a1b22bcff809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.crl X509v3 Authority Key Identifier: keyid:E7:C3:4D:92:13:BD:90:DE:BE:98:53:B6:75:61:97:86:5B:27:46:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a611ef1-195e-4958-a6ac-f4a1d2cd8c8f.cer sbgp-ipAddrBlock: critical IPv6: 2001:504:100::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:76:20:9c:76:66:92:5b:58:f7:1e:d7:29:0b:64:39:6b:6d: aa:ed:a2:d5:be:61:4b:15:2a:b7:0a:f4:f8:aa:3e:0d:43:d6: ba:3c:84:8b:de:f2:7f:88:81:41:bb:b0:94:8d:18:41:fa:60: 92:fe:6f:72:a3:b6:54:a8:84:50:18:60:03:36:7a:f6:05:61: 50:cf:23:62:89:10:58:3e:83:b3:42:72:d2:2d:45:38:78:1b: 63:8b:48:39:c5:1d:ea:36:cc:a2:f6:5c:63:09:a7:d5:1d:03: d7:9e:dc:43:2a:9c:81:3e:0e:13:8c:e0:ef:1f:9a:7d:16:c2: 4b:b9:cb:fa:19:42:55:a6:0f:50:2c:d8:db:49:de:cb:a4:1f: d7:99:e9:af:f7:18:ac:a7:2b:46:b1:65:80:ea:37:da:dc:4e: 89:c2:74:df:7b:af:31:fe:6c:46:2e:30:db:46:7d:65:2e:a9: fc:e5:6c:84:c4:eb:59:3e:d4:a4:f1:44:f2:03:a2:20:5b:a0: 2b:ee:b5:5b:d2:93:b9:57:7f:37:61:c2:a0:21:7d:4f:4c:c8: 14:8a:0d:2c:6d:ae:40:31:74:36:02:17:88:ea:e9:79:74:40: 1e:9f:7c:e2:8d:f7:1a:00:9e:66:0c:71:97:c3:c1:01:88:55: 69:34:a7:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2aIBiPtG3DeczDSDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE2MTFlZjEtMTk1ZS00OTU4LWE2YWMtZjRhMWQyY2Q4 YzhmMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk ZGRmM2E2YWMtNTczMS00ZDMwLWFlYzgtOTNiYzJkYzYxNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQDXXbfW36UveuZWUZLOfwGR9q6y2t1tCVMB 7gaRzdLxetIXm67lvSOJxALeYoQ9PTt0O+eYPG0gm2EYtDNdBwyNDDbThH8TiiFZ QEQ8YpE+ozGtNC6sq1awLUUiTPCPCKAqw+5jhVzKfmtymKgpIuBWPG1p5RFIYtsS /themhVnQFAoKkxe4X06Hs5FiXx0UpGduya5sXNQiLjbIJ8TQwFM2WF3oCaoo89L GnMjxFsvdVUIYsXHoB7UVoGhIbYcqCbw7amOHAs0P1o4znM7TDaPOaLmZKGEPy1A P4RjES4BTMLu7ORTw6MJNRX51acq2ezu6/dAiqdzMCx/HxPZWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDVImIvd8TRMJlV6p8KImjIj9ANDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYx MWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGExZDJjZDhjOGYvMjVkZmM3NmMtYjU3OS0z NmY4LTk1YjMtYTFiMjJiY2ZmODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE2MTFlZjEtMTk1ZS00OTU4LWE2 YWMtZjRhMWQyY2Q4YzhmLzJhNjExZWYxLTE5NWUtNDk1OC1hNmFjLWY0YTFkMmNk OGM4Zi5jcmwwHwYDVR0jBBgwFoAU58NNkhO9kN6+mFO2dWGXhlsnRk0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTYxMWVmMS0xOTVlLTQ5NTgtYTZhYy1mNGEx ZDJjZDhjOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFBAEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACZ2IJx2ZpJbWPce1ykLZDlrbartotW+YUsVKrcK9PiqPg1D1ro8 hIve8n+IgUG7sJSNGEH6YJL+b3KjtlSohFAYYAM2evYFYVDPI2KJEFg+g7NCctIt RTh4G2OLSDnFHeo2zKL2XGMJp9UdA9ee3EMqnIE+DhOM4O8fmn0Wwku5y/oZQlWm D1As2NtJ3sukH9eZ6a/3GKynK0axZYDqN9rcTonCdN97rzH+bEYuMNtGfWUuqfzl bITE61k+1KTxRPIDoiBboCvutVvSk7lXfzdhwqAhfU9MyBSKDSxtrkAxdDYCF4jq 6Xl0QB6ffOKN9xoAnmYMcZfDwQGIVWk0pys= -----END CERTIFICATE-----Generated at Fri May 1 17:04:32 2026 by rpki-client