$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/212c9d4c-4ee6-33af-89f3-1e3671ac5653.roa File: 212c9d4c-4ee6-33af-89f3-1e3671ac5653.roa (raw, json) Hash identifier: n1wZtOZKMLG9JP/7j5Mnctx5ouLk7+QTRwoTbG0bT40= Subject key identifier: FB:D7:EA:8A:99:83:88:83:F0:AD:D5:3A:22:76:DA:62:A8:EA:E3:6D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584CFE0B31C6C4FA6C8AAA06BB80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/212c9d4c-4ee6-33af-89f3-1e3671ac5653.roa Signing time: Thu 26 Feb 2026 15:12:31 +0000 ROA not before: Thu 26 Feb 2026 15:12:31 +0000 ROA not after: Wed 27 May 2026 14:12:31 +0000 asID: 396540 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:0b:31:c6:c4:fa:6c:8a:aa:06:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 26 15:12:31 2026 GMT Not After : May 27 14:12:31 2026 GMT Subject: CN=12e431fa-8423-40c8-9031-15c08d079ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:22:02:b6:b3:f6:1c:b4:bb:de:35:4b:ac:20: 73:a9:7c:6c:6e:0d:3e:17:33:14:32:d3:f1:9d:91: d6:04:f5:71:1f:e1:8e:d8:f8:26:a7:6e:1e:a6:a2: 21:28:14:fe:80:b2:33:4e:02:70:e0:e6:8b:f2:51: 71:d9:3f:c2:c3:cc:9b:da:9b:ae:56:c1:64:fa:2c: ec:74:94:04:a1:eb:10:6e:50:75:5e:d2:8e:b0:c7: cf:e2:e7:87:36:26:56:8c:37:fc:5d:2d:ea:03:f8: b6:dd:02:8d:a9:7e:17:ef:a7:c3:20:2e:16:58:20: 78:26:92:ba:5b:7d:1e:ba:cf:a5:a6:50:4a:da:21: 5b:a4:dc:f2:e7:1b:ab:ae:4f:d5:0f:26:fc:f8:92: bc:64:99:00:3d:de:16:3b:10:36:1c:29:36:01:51: 2b:d9:d5:0a:2d:1c:a1:56:99:de:e4:90:33:91:2a: 48:10:94:3c:36:32:1a:99:15:46:67:94:37:e9:75: 90:da:6a:75:e8:4b:f7:99:dc:81:d5:8c:b4:92:54: db:4d:21:ec:dc:3d:71:00:46:1a:87:21:81:42:83: df:56:1d:37:e5:d3:e1:73:03:bd:85:cd:f4:78:4a: 1f:d4:08:70:58:5f:45:36:90:fc:b0:bd:4d:dd:07: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D7:EA:8A:99:83:88:83:F0:AD:D5:3A:22:76:DA:62:A8:EA:E3:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/212c9d4c-4ee6-33af-89f3-1e3671ac5653.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c5:8a:ba:1f:81:c7:f6:f6:df:2b:90:a4:4b:04:c4:c5:65: 05:57:7d:c1:4b:83:63:bc:be:05:04:22:b4:2d:72:2c:5f:ac: 6b:8e:ad:9e:3b:17:90:af:b4:32:04:a0:de:b8:43:16:e2:e3: 3f:24:79:5d:c9:d6:da:8e:76:2f:fe:d0:e4:07:e3:d7:b5:b9: 57:d1:0a:8c:ab:04:53:9a:2a:5a:18:8e:8c:b5:1a:5f:e8:ac: dc:41:1b:0c:1e:c6:81:30:df:a5:32:45:27:76:f5:99:11:8d: 1e:25:ac:80:17:7e:75:fd:ba:61:23:a3:84:b0:17:5e:4d:a6: 6d:02:2a:ba:06:64:fc:67:6d:51:b1:93:d4:99:08:89:ee:41: 0a:38:6b:17:df:2c:1f:a1:dc:1e:be:27:2f:f5:7a:c8:d8:57: 34:60:7d:74:82:44:a1:08:8c:12:60:11:51:f2:7b:91:57:97: ba:b8:e5:9c:b0:5c:1e:39:bc:f7:9a:09:65:8f:00:5e:d1:a2: f3:de:74:56:0e:31:3a:c3:97:b1:1a:24:ab:30:52:8b:20:24: cc:91:c6:95:2e:42:b2:dc:53:71:ef:f4:a2:cb:dc:7b:be:50: 3e:42:a4:24:54:dc:b1:af:89:3f:6c:8f:11:b3:97:1a:54:ff: 87:4e:14:c4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz+CzHGxPpsiqoGu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyNjE1MTIzMVoXDTI2MDUyNzE0MTIzMVowLzEtMCsGA1UEAxMk MTJlNDMxZmEtODQyMy00MGM4LTkwMzEtMTVjMDhkMDc5ZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyICtrP2HLS73jVLrCBzqXxsbg0+FzMUMtPx nZHWBPVxH+GO2Pgmp24epqIhKBT+gLIzTgJw4OaL8lFx2T/Cw8yb2puuVsFk+izs dJQEoesQblB1XtKOsMfP4ueHNiZWjDf8XS3qA/i23QKNqX4X76fDIC4WWCB4JpK6 W30eus+lplBK2iFbpNzy5xurrk/VDyb8+JK8ZJkAPd4WOxA2HCk2AVEr2dUKLRyh Vpne5JAzkSpIEJQ8NjIamRVGZ5Q36XWQ2mp16Ev3mdyB1Yy0klTbTSHs3D1xAEYa hyGBQoPfVh035dPhcwO9hc30eEof1AhwWF9FNpD8sL1N3QdQgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPvX6oqZg4iD8K3VOiJ22mKo6uNtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMjEyYzlkNGMtNGVlNi0z M2FmLTg5ZjMtMWUzNjcxYWM1NjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACfFirofgcf29t8rkKRLBMTFZQVXfcFLg2O8vgUEIrQtcixfrGuO rZ47F5CvtDIEoN64Qxbi4z8keV3J1tqOdi/+0OQH49e1uVfRCoyrBFOaKloYjoy1 Gl/orNxBGwwexoEw36UyRSd29ZkRjR4lrIAXfnX9umEjo4SwF15Npm0CKroGZPxn bVGxk9SZCInuQQo4axffLB+h3B6+Jy/1esjYVzRgfXSCRKEIjBJgEVHye5FXl7q4 5ZywXB45vPeaCWWPAF7RovPedFYOMTrDl7EaJKswUosgJMyRxpUuQrLcU3Hv9KLL 3Hu+UD5CpCRU3LGviT9sjxGzlxpU/4dOFMQ= -----END CERTIFICATE-----Generated at Mon Mar 2 06:34:19 2026 by rpki-client