$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/852947b5-d299-3a43-8987-66a2c6a604b1.roa File: 852947b5-d299-3a43-8987-66a2c6a604b1.roa (raw, json) Hash identifier: juD4EQLFgBNRjoCngGcI8dUnhhHekPHR7WAe+aNkc20= Subject key identifier: 84:50:F3:E8:D4:B5:2D:DE:FE:27:51:04:A6:6F:01:29:43:17:25:93 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584CEFF25E753F07D8F12BEF5C00 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/852947b5-d299-3a43-8987-66a2c6a604b1.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 397199 IP address blocks: 2001:502:1ca1::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:5e:75:3f:07:d8:f1:2b:ef:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=17b99484-e3f9-4213-9cf1-74a4c0d2b841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:77:06:12:a3:1e:b8:bf:2e:fb:22:89:bf:91: bd:06:8d:93:0b:aa:3f:e4:10:d7:51:2d:66:08:e1: cd:4c:9c:7c:1d:34:8f:51:d3:a3:e2:ab:d0:cb:aa: e0:27:f3:85:d5:11:19:ab:0c:e2:78:2f:5f:d3:12: b4:ee:de:bf:a4:c7:65:5d:13:33:44:fe:0c:1b:91: 55:f3:2e:b1:1d:a6:29:0a:d8:6a:95:82:60:d6:75: ae:37:a4:7b:42:ef:e0:54:91:0a:58:14:68:46:e1: f9:53:e6:64:0b:41:9b:99:d0:96:e7:78:c2:fd:0b: c6:44:50:4b:e4:25:d9:a1:f5:02:1f:46:60:75:2f: 7e:64:af:9d:51:8f:f1:49:fc:18:48:c2:e5:38:12: 1a:e0:e0:f6:b7:2f:19:c8:1a:ca:01:6b:59:c6:40: 91:20:36:2c:4c:d3:ca:27:fc:6a:3c:2b:5c:ff:94: 74:d0:8a:d5:e2:b4:27:3d:6a:0f:ec:b6:b5:5f:98: cc:24:30:18:b1:6a:8a:1b:06:97:5b:2c:66:dc:16: 01:05:eb:6a:74:a2:e1:ff:13:fd:4c:20:9a:d0:24: 94:07:2c:a8:85:be:55:1e:47:c6:57:2c:3b:bc:4b: 71:71:72:87:29:46:e4:de:84:0e:ff:bf:d9:d2:99: 17:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:50:F3:E8:D4:B5:2D:DE:FE:27:51:04:A6:6F:01:29:43:17:25:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/852947b5-d299-3a43-8987-66a2c6a604b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:502:1ca1:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:81:23:7d:44:09:9b:ec:23:1e:b9:7f:60:7d:2c:dd:40:1f: ab:16:76:fe:ba:b0:68:d5:1e:d0:37:c5:96:71:17:6f:48:f6: df:26:94:32:26:50:94:21:45:49:ba:e4:25:b1:00:0d:50:0f: f9:6f:7f:1b:8f:40:ba:01:ad:c7:df:d0:19:b9:5a:81:27:b0: f9:18:c4:1d:d5:c6:99:d4:1f:ba:df:d0:36:8b:e7:44:a1:a9: fd:0e:59:bd:84:bc:aa:20:fb:a2:5e:75:06:c6:f2:2d:25:31: 48:d0:9b:e3:96:7e:20:d5:fc:6d:ce:05:bf:e4:bd:74:6e:87: 63:b3:a3:7b:b7:fd:61:fa:85:b2:5d:f9:fe:40:f0:e4:fd:3d: 4d:f8:9f:ac:e1:40:32:6d:67:63:46:93:31:4f:69:73:b2:46: 5c:87:ac:b2:2d:73:41:4c:da:de:41:15:09:73:39:8d:3f:29: 69:14:27:af:6d:1c:93:f4:d7:22:aa:bd:c9:9f:d4:36:f9:7b: f1:84:68:de:e9:7a:27:7f:f3:f5:37:a8:aa:9a:79:04:44:4c: 18:89:00:a7:95:8d:f3:69:2d:d5:86:27:9b:c5:c6:12:d9:ec: 44:4b:ee:89:84:1e:b8:35:e1:8e:d3:39:b7:6f:87:35:e6:71: e0:ce:14:72 -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEzv8l51PwfY8SvvXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk MTdiOTk0ODQtZTNmOS00MjEzLTljZjEtNzRhNGMwZDJiODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53cGEqMeuL8u+yKJv5G9Bo2TC6o/5BDXUS1m COHNTJx8HTSPUdOj4qvQy6rgJ/OF1REZqwzieC9f0xK07t6/pMdlXRMzRP4MG5FV 8y6xHaYpCthqlYJg1nWuN6R7Qu/gVJEKWBRoRuH5U+ZkC0GbmdCW53jC/QvGRFBL 5CXZofUCH0ZgdS9+ZK+dUY/xSfwYSMLlOBIa4OD2ty8ZyBrKAWtZxkCRIDYsTNPK J/xqPCtc/5R00IrV4rQnPWoP7La1X5jMJDAYsWqKGwaXWyxm3BYBBetqdKLh/xP9 TCCa0CSUByyohb5VHkfGVyw7vEtxcXKHKUbk3oQO/7/Z0pkX9wIDAQABo4IDYjCC A14wHQYDVR0OBBYEFIRQ8+jUtS3e/idRBKZvASlDFyWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODUyOTQ3YjUtZDI5OS0z YTQzLTg5ODctNjZhMmM2YTYwNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFAhyh AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCkgSN9RAmb7CMeuX9gfSzdQB+rFnb+urBo1R7Q N8WWcRdvSPbfJpQyJlCUIUVJuuQlsQANUA/5b38bj0C6Aa3H39AZuVqBJ7D5GMQd 1caZ1B+639A2i+dEoan9Dlm9hLyqIPuiXnUGxvItJTFI0Jvjln4g1fxtzgW/5L10 bodjs6N7t/1h+oWyXfn+QPDk/T1N+J+s4UAybWdjRpMxT2lzskZch6yyLXNBTNre QRUJczmNPylpFCevbRyT9Nciqr3Jn9Q2+XvxhGje6Xonf/P1N6iqmnkEREwYiQCn lY3zaS3VhiebxcYS2exES+6JhB64NeGO0zm3b4c15nHgzhRy -----END CERTIFICATE-----Generated at Mon Mar 2 13:22:38 2026 by rpki-client