$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9907d8ca-82bc-3ce6-beed-679027890470.roa File: 9907d8ca-82bc-3ce6-beed-679027890470.roa (raw, json) Hash identifier: ok1RTg8MoVmkSQiQhpqV+Cd/7JM6H5gQf725nrekl40= Subject key identifier: 9E:CB:57:92:B3:5E:BF:7F:0A:76:BA:F8:71:9C:33:42:8C:2A:91:91 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584CFE0B3647D21088B6CAB6B800 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9907d8ca-82bc-3ce6-beed-679027890470.roa Signing time: Thu 26 Feb 2026 15:12:33 +0000 ROA not before: Thu 26 Feb 2026 15:12:33 +0000 ROA not after: Wed 27 May 2026 14:12:33 +0000 asID: 396571 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:0b:36:47:d2:10:88:b6:ca:b6:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 26 15:12:33 2026 GMT Not After : May 27 14:12:33 2026 GMT Subject: CN=420a022d-5691-420f-af34-5c501f2e8c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1e:59:06:90:ae:95:11:c6:ca:db:8a:8f:5a: fa:38:4c:2b:13:1d:48:4a:6a:ae:9f:08:ce:6c:b4: 01:09:d8:b1:62:4f:cc:3b:da:e9:39:68:5e:cb:78: a6:db:a4:66:56:1d:91:33:ab:ab:16:25:c7:41:8b: df:41:fc:72:23:e6:a7:2a:7c:02:e4:5b:81:99:c8: 18:48:2a:a8:4c:63:76:b2:20:ab:34:d7:28:cd:2d: 58:49:06:91:d7:1d:6f:d0:22:e4:6c:ea:68:30:99: 2f:db:25:4b:25:61:f0:78:4a:db:7e:9e:0d:20:5c: cb:7f:0b:81:6c:f9:42:44:0d:78:86:9b:1d:fe:b6: e4:ef:10:c1:99:d9:95:02:88:96:77:39:62:a7:3d: b2:d8:bb:a4:3a:9a:84:9c:ae:b0:1e:2d:49:18:87: 51:75:1e:b9:e6:6f:dd:9a:9b:bf:80:e3:a5:ab:0c: 72:ba:c3:bf:3e:ff:4b:ea:8e:f7:7a:4b:be:32:a1: 37:3f:26:8e:32:04:30:f1:36:34:64:88:dd:b9:46: fc:23:dc:81:3f:2c:8d:4a:ff:0a:eb:eb:c5:bb:68: 96:0c:65:b3:14:fb:4e:41:8e:26:ac:3a:05:81:c7: f1:9f:bb:10:e2:5e:15:a0:10:6c:81:f0:7b:37:a1: cf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CB:57:92:B3:5E:BF:7F:0A:76:BA:F8:71:9C:33:42:8C:2A:91:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/9907d8ca-82bc-3ce6-beed-679027890470.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0d:e1:dc:f8:3a:9a:e3:f3:6a:09:2e:ba:da:43:a5:ce:92: 34:81:8b:73:68:b9:79:1c:0c:1a:de:58:41:0c:61:e2:a1:31: 56:3c:ac:d7:1b:54:7b:48:31:0b:33:ba:0c:e0:6d:5d:d2:1b: fb:ab:a6:00:e2:4c:52:9b:9f:ff:2d:d9:61:1b:3b:41:8c:b0: 52:00:d1:24:50:6c:a8:36:bb:8a:47:c1:51:57:b5:68:4f:de: 1c:8f:f3:4e:16:ee:ea:91:5f:f0:05:d4:07:1d:09:d7:47:c4: 2e:6d:02:8d:67:10:e4:d5:e7:6a:e8:7d:e2:d3:9c:f5:f0:fe: 51:aa:92:9f:3a:2b:01:b1:52:34:9b:08:a5:95:ae:bb:5b:5d: 58:f9:e7:9c:61:9d:6c:0b:81:19:5c:75:d0:ed:f0:2b:f1:b4: 2a:d4:b8:3f:02:eb:0f:d3:de:b4:15:c9:77:44:56:ce:83:a9: 4d:b5:44:5b:65:a5:34:96:b4:cf:06:03:00:dc:30:c9:23:ab: 28:a9:01:2c:fd:1f:fa:15:ba:2d:95:da:01:77:9a:69:fc:3a: b0:fe:9b:2a:f1:0f:4d:85:07:ee:8f:46:bc:fa:56:7b:6c:fa: 7b:2b:01:28:03:c8:80:17:3e:52:05:d5:aa:b9:fa:38:a8:40: dd:98:71:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz+CzZH0hCItsq2uAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyNjE1MTIzM1oXDTI2MDUyNzE0MTIzM1owLzEtMCsGA1UEAxMk NDIwYTAyMmQtNTY5MS00MjBmLWFmMzQtNWM1MDFmMmU4YzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB5ZBpCulRHGytuKj1r6OEwrEx1ISmqunwjO bLQBCdixYk/MO9rpOWhey3im26RmVh2RM6urFiXHQYvfQfxyI+anKnwC5FuBmcgY SCqoTGN2siCrNNcozS1YSQaR1x1v0CLkbOpoMJkv2yVLJWHweErbfp4NIFzLfwuB bPlCRA14hpsd/rbk7xDBmdmVAoiWdzlipz2y2LukOpqEnK6wHi1JGIdRdR655m/d mpu/gOOlqwxyusO/Pv9L6o73eku+MqE3PyaOMgQw8TY0ZIjduUb8I9yBPyyNSv8K 6+vFu2iWDGWzFPtOQY4mrDoFgcfxn7sQ4l4VoBBsgfB7N6HPYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7LV5KzXr9/Cna6+HGcM0KMKpGRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvOTkwN2Q4Y2EtODJiYy0z Y2U2LWJlZWQtNjc5MDI3ODkwNDcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABoN4dz4Oprj82oJLrraQ6XOkjSBi3NouXkcDBreWEEMYeKhMVY8 rNcbVHtIMQszugzgbV3SG/urpgDiTFKbn/8t2WEbO0GMsFIA0SRQbKg2u4pHwVFX tWhP3hyP804W7uqRX/AF1AcdCddHxC5tAo1nEOTV52rofeLTnPXw/lGqkp86KwGx UjSbCKWVrrtbXVj555xhnWwLgRlcddDt8CvxtCrUuD8C6w/T3rQVyXdEVs6DqU21 RFtlpTSWtM8GAwDcMMkjqyipASz9H/oVui2V2gF3mmn8OrD+myrxD02FB+6PRrz6 Vnts+nsrASgDyIAXPlIF1aq5+jioQN2YcQE= -----END CERTIFICATE-----Generated at Mon Mar 2 10:08:21 2026 by rpki-client