$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa File: 436394c3-8039-3911-9e8f-576517a3fbc8.roa (raw, json) Hash identifier: Dk3xLHPxGCbSHS+CP5zMN2xROD7Fie7Hv/3u9O0iWz8= Subject key identifier: 42:1E:BC:E8:C5:04:A5:D5:B8:38:19:60:0D:60:85:1E:C0:0F:DF:CB Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584D037D587BB2DE97B1FE227A80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 397211 IP address blocks: 2001:501:b1f9::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:58:7b:b2:de:97:b1:fe:22:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=5b0ce35c-7f72-4afc-8ae4-94f24c10ac42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:bb:d7:47:5c:4a:1e:e4:4e:fa:c9:74:5f:10: 93:56:bf:81:46:14:af:4b:2c:c8:1e:2f:d1:6c:d1: 59:48:fe:73:75:74:05:47:01:fa:76:57:6e:31:30: b1:31:92:39:22:b4:64:b5:7f:05:18:9a:e9:65:4a: 7d:f7:6a:4b:c2:94:6f:60:f3:52:2f:b5:ed:ce:cb: d6:03:5a:02:f3:7a:9b:bc:ed:da:4b:73:15:e7:ac: 41:a5:3d:09:e4:92:e3:54:f3:cd:fe:10:c4:37:9d: 6c:f9:58:c6:15:00:45:54:8b:ad:6b:57:2e:b3:84: f2:61:8f:67:3c:b5:2f:3a:34:9a:d1:ef:10:5e:e4: 32:74:89:23:1f:f4:2a:33:89:4d:be:3d:07:56:50: 4c:2a:bf:0a:be:4f:5a:f8:05:de:94:2d:b2:0b:41: 74:3f:c0:bd:d2:6c:55:24:9f:f1:d4:c5:65:f4:e6: f1:34:0f:29:22:22:31:5a:8d:9b:a7:18:45:bd:4f: 92:48:ed:2f:dc:59:c1:6e:48:72:49:c1:6a:1b:b3: 3f:2e:28:99:25:25:95:2f:14:12:e0:3f:ec:a7:d5: ab:eb:79:6c:ae:91:5e:5a:94:40:a8:14:5d:95:b4: bb:d7:4d:2b:30:f4:e7:6d:64:cd:0b:96:5c:51:b0: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1E:BC:E8:C5:04:A5:D5:B8:38:19:60:0D:60:85:1E:C0:0F:DF:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/436394c3-8039-3911-9e8f-576517a3fbc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:b1f9:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:93:a9:3d:e6:95:6e:4e:c1:e9:43:ae:64:19:a8:50:ee:74: 6f:0b:c1:15:78:4e:ab:f1:0a:5f:fc:1c:10:28:24:96:27:ee: b5:d4:9d:ac:00:55:ab:79:e6:a4:72:c9:ee:88:b1:1a:61:fd: 5c:39:ea:3f:4d:b9:15:8f:8f:86:bc:20:77:34:58:dc:5e:6d: ee:fc:60:48:c7:7e:48:3f:15:f1:2a:14:ff:d1:0b:c0:a5:bf: dc:53:1a:0f:38:9c:6d:a5:3b:3c:2a:02:f9:ac:7c:22:86:7e: e8:e3:e9:8d:ec:55:26:d4:b9:ab:70:20:b8:03:46:97:e6:30: 4e:c1:5b:55:e8:8f:2a:2b:53:62:21:48:b3:fa:b3:f2:c8:f8: 0c:ab:7d:99:aa:21:1e:26:86:bc:82:6b:41:22:21:00:6b:a0: 59:a9:f9:cc:be:98:bd:9e:b1:d0:2d:8b:ba:69:ae:1a:65:d3: cf:65:74:0a:90:ee:a3:31:e0:c2:84:0c:89:65:3a:1b:f8:01: 16:1e:a9:b1:ac:75:da:ee:24:05:99:16:b8:fc:b3:7f:3d:d6: 00:48:e6:7a:5a:90:97:de:d7:fd:5a:0d:ae:af:db:0b:4a:54: a6:89:84:cb:b2:00:fc:fe:e2:49:6e:fa:bf:0b:3b:7c:23:78: 4f:32:42:4d -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWE0DfVh7st6Xsf4ieoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk NWIwY2UzNWMtN2Y3Mi00YWZjLThhZTQtOTRmMjRjMTBhYzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7vXR1xKHuRO+sl0XxCTVr+BRhSvSyzIHi/R bNFZSP5zdXQFRwH6dlduMTCxMZI5IrRktX8FGJrpZUp992pLwpRvYPNSL7XtzsvW A1oC83qbvO3aS3MV56xBpT0J5JLjVPPN/hDEN51s+VjGFQBFVIuta1cus4TyYY9n PLUvOjSa0e8QXuQydIkjH/QqM4lNvj0HVlBMKr8Kvk9a+AXelC2yC0F0P8C90mxV JJ/x1MVl9ObxNA8pIiIxWo2bpxhFvU+SSO0v3FnBbkhyScFqG7M/LiiZJSWVLxQS 4D/sp9Wr63lsrpFeWpRAqBRdlbS7100rMPTnbWTNC5ZcUbBVNQIDAQABo4IDYjCC A14wHQYDVR0OBBYEFEIevOjFBKXVuDgZYA1ghR7AD9/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNDM2Mzk0YzMtODAzOS0z OTExLTllOGYtNTc2NTE3YTNmYmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAbH5 AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAVk6k95pVuTsHpQ65kGahQ7nRvC8EVeE6r8Qpf /BwQKCSWJ+611J2sAFWreeakcsnuiLEaYf1cOeo/TbkVj4+GvCB3NFjcXm3u/GBI x35IPxXxKhT/0QvApb/cUxoPOJxtpTs8KgL5rHwihn7o4+mN7FUm1LmrcCC4A0aX 5jBOwVtV6I8qK1NiIUiz+rPyyPgMq32ZqiEeJoa8gmtBIiEAa6BZqfnMvpi9nrHQ LYu6aa4aZdPPZXQKkO6jMeDChAyJZTob+AEWHqmxrHXa7iQFmRa4/LN/PdYASOZ6 WpCX3tf9Wg2ur9sLSlSmiYTLsgD8/uJJbvq/Czt8I3hPMkJN -----END CERTIFICATE-----Generated at Mon Mar 2 16:09:44 2026 by rpki-client