$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/633f4e98-7166-3819-8a3e-4de8938eea5a.roa File: 633f4e98-7166-3819-8a3e-4de8938eea5a.roa (raw, json) Hash identifier: lFCWyrcU1XUgq4j3dmhjYx+gnEahlKIi91D/pN5XGzs= Subject key identifier: 80:D9:83:BB:63:6E:1C:12:BC:F8:F3:A2:06:DD:94:2E:91:F2:25:2B Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584CFE0B3687C2FC22FE73E3B720 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/633f4e98-7166-3819-8a3e-4de8938eea5a.roa Signing time: Thu 26 Feb 2026 15:12:33 +0000 ROA not before: Thu 26 Feb 2026 15:12:33 +0000 ROA not after: Wed 27 May 2026 14:12:33 +0000 asID: 396544 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:0b:36:87:c2:fc:22:fe:73:e3:b7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 26 15:12:33 2026 GMT Not After : May 27 14:12:33 2026 GMT Subject: CN=86ea2fcd-369a-49c7-84bf-05384a22e908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f6:bc:92:0a:87:f0:c3:d2:fc:b4:45:8c:2c: 49:a5:6d:e1:6d:89:6e:36:b6:af:d5:c7:53:ac:1e: 24:43:a3:46:8d:7c:03:e7:02:59:e7:6f:cc:9b:b3: bc:e4:25:15:2d:18:42:52:da:84:37:fc:ed:23:d7: b3:04:b6:a4:1f:03:51:7f:b6:f7:6a:4f:0d:72:4b: fc:28:ff:b4:93:04:bf:fd:29:f7:d0:0b:ef:8d:14: 9a:ce:e6:7a:35:89:56:d9:95:d1:e3:a3:fb:74:39: 7e:6e:3c:f5:b3:0b:11:6e:e5:44:02:91:33:c3:6d: ce:b4:4b:ce:01:e7:87:c9:93:3b:65:26:ca:f7:ee: 8f:bd:51:ed:98:81:c0:08:98:d9:22:2b:2f:a7:ff: d1:cc:80:cf:26:93:9a:a2:e3:3d:06:0b:db:de:c2: 1f:cf:a6:24:d8:e8:92:39:02:df:26:35:89:bd:76: a4:36:8a:f5:86:cc:ec:96:1b:a0:ce:a5:8e:ef:30: 7b:00:88:a6:06:c1:ac:41:b6:3b:a6:e0:de:0d:5e: 07:c5:0f:e9:bb:39:3b:bd:67:72:00:6b:5a:3d:86: 49:4e:82:31:72:44:9c:30:88:5a:28:93:b0:26:31: ea:30:fe:86:43:0e:94:91:e4:81:c7:fa:11:1f:86: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D9:83:BB:63:6E:1C:12:BC:F8:F3:A2:06:DD:94:2E:91:F2:25:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/633f4e98-7166-3819-8a3e-4de8938eea5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:25:03:01:d4:50:ff:74:dc:0b:52:09:ee:1d:4b:97:da:ca: 0e:38:df:fa:d7:79:09:bb:b2:fb:68:02:62:a2:85:64:0e:52: 3e:71:c8:1a:96:64:1c:6c:2f:e2:17:dd:1c:f1:74:20:05:9b: 6c:5d:5b:28:58:0c:ae:3c:bf:da:de:6e:c5:3f:f6:e3:0f:82: 0e:30:f6:c8:9f:20:15:83:dd:fb:e7:0c:68:44:43:50:ac:07: 77:1c:3f:1e:46:18:b9:11:d4:99:05:72:cc:f1:5b:55:eb:d1: 9d:7d:b2:96:d9:4f:4b:5a:5e:af:e1:39:5d:13:cf:43:a8:48: 00:31:be:61:7f:e2:cd:ac:ba:3c:96:d6:23:72:88:09:40:f0: b0:9c:1e:67:ee:58:37:ed:97:ef:5f:89:35:0b:2f:c6:18:c2: d1:64:20:c4:e3:00:f5:b7:1f:39:fc:10:38:8e:7c:dd:15:03: 80:93:32:49:67:55:03:21:cd:bf:0e:1e:59:68:f1:bf:ad:60: 0b:86:b6:e5:b5:77:5a:10:3a:1d:a1:0b:a1:a2:b9:15:cd:cc: 63:06:e0:9b:2f:3e:da:21:9e:bc:01:12:a6:f4:39:74:29:24: e2:af:55:b4:21:15:cb:cf:f3:26:95:f2:1b:cd:1e:6d:ff:cc: 7d:c8:ad:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz+CzaHwvwi/nPjtyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyNjE1MTIzM1oXDTI2MDUyNzE0MTIzM1owLzEtMCsGA1UEAxMk ODZlYTJmY2QtMzY5YS00OWM3LTg0YmYtMDUzODRhMjJlOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifa8kgqH8MPS/LRFjCxJpW3hbYluNrav1cdT rB4kQ6NGjXwD5wJZ52/Mm7O85CUVLRhCUtqEN/ztI9ezBLakHwNRf7b3ak8Nckv8 KP+0kwS//Sn30AvvjRSazuZ6NYlW2ZXR46P7dDl+bjz1swsRbuVEApEzw23OtEvO AeeHyZM7ZSbK9+6PvVHtmIHACJjZIisvp//RzIDPJpOaouM9Bgvb3sIfz6Yk2OiS OQLfJjWJvXakNor1hszslhugzqWO7zB7AIimBsGsQbY7puDeDV4HxQ/puzk7vWdy AGtaPYZJToIxckScMIhaKJOwJjHqMP6GQw6UkeSBx/oRH4ZCKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIDZg7tjbhwSvPjzogbdlC6R8iUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvNjMzZjRlOTgtNzE2Ni0z ODE5LThhM2UtNGRlODkzOGVlYTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKwlAwHUUP903AtSCe4dS5fayg443/rXeQm7svtoAmKihWQOUj5x yBqWZBxsL+IX3RzxdCAFm2xdWyhYDK48v9rebsU/9uMPgg4w9sifIBWD3fvnDGhE Q1CsB3ccPx5GGLkR1JkFcszxW1Xr0Z19spbZT0taXq/hOV0Tz0OoSAAxvmF/4s2s ujyW1iNyiAlA8LCcHmfuWDftl+9fiTULL8YYwtFkIMTjAPW3Hzn8EDiOfN0VA4CT MklnVQMhzb8OHllo8b+tYAuGtuW1d1oQOh2hC6GiuRXNzGMG4JsvPtohnrwBEqb0 OXQpJOKvVbQhFcvP8yaV8hvNHm3/zH3Irdk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:30:50 2026 by rpki-client