$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f552cfc-f93a-3c4b-bb1b-f78f8beca2e5.roa File: 2f552cfc-f93a-3c4b-bb1b-f78f8beca2e5.roa (raw, json) Hash identifier: ZT3e8qG8RFn6CafEZxyOao8G/W9YBJkLJfHM17agtZw= Subject key identifier: 73:42:DF:22:B9:33:A6:B2:1C:17:A6:76:1D:4F:5D:D9:82:35:DE:2D Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584CFE0B33FD45129D5F86069080 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f552cfc-f93a-3c4b-bb1b-f78f8beca2e5.roa Signing time: Thu 26 Feb 2026 15:12:32 +0000 ROA not before: Thu 26 Feb 2026 15:12:32 +0000 ROA not after: Wed 27 May 2026 14:12:32 +0000 asID: 396555 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:0b:33:fd:45:12:9d:5f:86:06:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 26 15:12:32 2026 GMT Not After : May 27 14:12:32 2026 GMT Subject: CN=416b7d5f-65af-4176-b4e0-945ed20813c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:0c:e8:0a:9e:5a:ee:c1:15:d0:ca:24:30: 84:4f:64:5d:dd:38:0b:13:40:6d:5a:64:e0:1d:8b: 06:f0:cf:df:63:b2:86:61:93:8d:7b:73:dd:1f:5a: 48:d4:de:6f:8c:55:50:df:6e:6a:d3:08:e1:19:a8: d4:11:80:fd:8b:e2:0c:cc:83:37:6a:c1:a4:af:af: a9:1a:b1:83:6e:0a:4c:b7:17:c4:76:9f:1b:5d:6b: 7c:ac:5c:17:5a:7d:07:79:06:97:72:9a:80:72:86: 8b:15:09:af:64:a9:5c:17:8c:9e:50:bb:8d:8d:03: d4:72:66:5c:12:3b:ec:37:2f:ee:bd:08:1c:c7:07: 1c:9c:83:cc:04:46:ee:fd:9b:c3:67:00:05:63:10: c1:9f:fc:fe:b1:5a:96:23:60:bc:a7:3f:58:5a:3a: 89:05:33:57:ea:7d:e6:8c:78:87:38:37:f9:7b:b0: 76:ca:7e:16:9f:af:f4:e0:e0:46:80:ef:b8:d6:b5: fb:ce:5d:d5:48:a5:8f:88:ef:c8:a2:08:45:a3:2d: d6:74:8d:64:eb:dc:8b:56:f6:fa:6c:69:c2:00:31: 1e:ea:93:68:38:88:d9:a6:77:76:32:75:6c:00:ad: d8:5d:e8:d0:24:68:fa:9a:42:b1:d6:be:44:69:80: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:42:DF:22:B9:33:A6:B2:1C:17:A6:76:1D:4F:5D:D9:82:35:DE:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/2f552cfc-f93a-3c4b-bb1b-f78f8beca2e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:16:36:22:69:dd:34:a0:ae:4b:8b:e5:4e:dc:23:2a:ec:9b: f2:a7:3e:dc:40:ca:a4:42:16:95:c0:fb:17:1d:2e:5c:91:f0: d8:d1:7f:b1:e0:b1:1a:49:eb:2d:3b:34:df:f5:80:de:b1:16: 92:db:2f:72:81:22:e8:77:dd:3b:6d:cf:91:be:71:b5:7a:dc: e8:6a:17:b2:3f:02:52:c1:fd:40:1f:05:b2:7a:8e:b8:25:ae: 6e:89:8b:f9:1c:d1:b6:d4:84:6b:fe:c8:d3:f2:d0:28:9d:01: 04:1d:75:3f:e0:a1:84:e4:fd:75:30:6a:d0:3c:39:9d:1b:c3: eb:1c:54:19:d0:93:69:5e:56:c4:39:eb:35:f4:22:fa:c9:3b: 14:b0:fc:7c:6c:11:12:9f:c0:7c:57:a3:4e:bc:b7:67:f0:56: b3:d3:9a:5d:9e:c8:23:6d:27:70:01:1f:d5:5e:08:5c:cd:96: 31:02:85:39:b5:16:f0:86:82:c6:3d:e9:ba:b1:71:5c:55:c5: f8:2a:51:d4:2e:f9:32:ec:c2:84:4f:82:1d:1f:ae:80:53:79: ae:b3:78:fa:c8:fc:6f:c8:f6:eb:e4:5d:a2:a3:00:75:6b:d2: 29:27:c3:c2:d2:27:1b:02:19:4e:00:26:c2:61:bd:2a:c4:85: 4d:dd:a6:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz+CzP9RRKdX4YGkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyNjE1MTIzMloXDTI2MDUyNzE0MTIzMlowLzEtMCsGA1UEAxMk NDE2YjdkNWYtNjVhZi00MTc2LWI0ZTAtOTQ1ZWQyMDgxM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC4M6AqeWu7BFdDKJDCET2Rd3TgLE0BtWmTg HYsG8M/fY7KGYZONe3PdH1pI1N5vjFVQ325q0wjhGajUEYD9i+IMzIM3asGkr6+p GrGDbgpMtxfEdp8bXWt8rFwXWn0HeQaXcpqAcoaLFQmvZKlcF4yeULuNjQPUcmZc EjvsNy/uvQgcxwccnIPMBEbu/ZvDZwAFYxDBn/z+sVqWI2C8pz9YWjqJBTNX6n3m jHiHODf5e7B2yn4Wn6/04OBGgO+41rX7zl3VSKWPiO/IoghFoy3WdI1k69yLVvb6 bGnCADEe6pNoOIjZpnd2MnVsAK3YXejQJGj6mkKx1r5EaYC5XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHNC3yK5M6ayHBemdh1PXdmCNd4tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvMmY1NTJjZmMtZjkzYS0z YzRiLWJiMWItZjc4ZjhiZWNhMmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB0WNiJp3TSgrkuL5U7cIyrsm/KnPtxAyqRCFpXA+xcdLlyR8NjR f7HgsRpJ6y07NN/1gN6xFpLbL3KBIuh33Tttz5G+cbV63OhqF7I/AlLB/UAfBbJ6 jrglrm6Ji/kc0bbUhGv+yNPy0CidAQQddT/goYTk/XUwatA8OZ0bw+scVBnQk2le VsQ56zX0IvrJOxSw/HxsERKfwHxXo068t2fwVrPTml2eyCNtJ3ABH9VeCFzNljEC hTm1FvCGgsY96bqxcVxVxfgqUdQu+TLswoRPgh0froBTea6zePrI/G/I9uvkXaKj AHVr0iknw8LSJxsCGU4AJsJhvSrEhU3dpmA= -----END CERTIFICATE-----Generated at Mon Mar 2 08:25:46 2026 by rpki-client