$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1ff9b8d-915b-34ca-b95d-6f1a5bb8744d.roa File: a1ff9b8d-915b-34ca-b95d-6f1a5bb8744d.roa (raw, json) Hash identifier: oOXKPjQO2SHSfXT3PvT2JO9isNKpMLlcELf3CayHPcc= Subject key identifier: 9D:E0:3A:5F:3C:88:93:8D:0A:3A:A4:FC:1C:3A:54:BC:C4:2F:45:9C Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584CFE0B338D08D2493BBC14D540 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1ff9b8d-915b-34ca-b95d-6f1a5bb8744d.roa Signing time: Thu 26 Feb 2026 15:12:32 +0000 ROA not before: Thu 26 Feb 2026 15:12:32 +0000 ROA not after: Wed 27 May 2026 14:12:32 +0000 asID: 397199 IP address blocks: 2001:501:8a29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:0b:33:8d:08:d2:49:3b:bc:14:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 26 15:12:32 2026 GMT Not After : May 27 14:12:32 2026 GMT Subject: CN=a7dea348-6b2e-4075-af89-4a8377bc5061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:03:71:cb:37:11:ce:b2:ef:21:ed:08:63:f9: ff:57:74:ca:72:fa:70:af:74:1b:76:66:8f:70:8f: 49:30:4d:9e:a5:1b:d9:7d:63:6c:25:f9:af:c7:4e: d3:ef:82:52:9e:17:f5:d6:27:39:9b:64:79:d5:d9: 58:1f:bb:2a:61:1b:83:da:d2:86:15:ab:5a:f2:d6: ad:d6:d7:68:6e:cc:f5:de:b3:30:fa:6d:fd:54:8b: 4d:53:ad:30:86:16:81:ca:e7:75:31:d0:49:20:1f: d8:54:d0:3e:60:d4:e9:15:7c:7f:9a:c5:0d:9a:b4: 50:f8:95:e4:8b:7f:d5:bf:6c:25:84:4e:45:3a:f3: ce:c7:f2:91:fc:f5:2d:de:2c:09:2b:6d:40:f9:dc: 72:ce:cf:3d:5e:42:cc:14:28:e6:11:0b:db:68:7b: 02:87:99:14:d5:09:c0:b6:de:9f:9b:88:90:9a:38: e4:fa:f2:41:c3:28:fe:a0:13:81:b6:e4:ad:c6:96: 6a:dd:4d:67:29:41:b3:e2:79:3f:ad:4a:61:eb:d3: 22:b6:29:5e:54:f4:7c:b4:76:ee:4f:62:88:3d:f9: c6:50:d5:aa:bc:a1:c6:ec:a7:de:f4:12:39:42:6b: ae:7c:ab:00:2d:b9:98:59:a5:2f:b4:d5:9d:8a:d6: 58:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:E0:3A:5F:3C:88:93:8D:0A:3A:A4:FC:1C:3A:54:BC:C4:2F:45:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a1ff9b8d-915b-34ca-b95d-6f1a5bb8744d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:501:8a29::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3b:a7:e0:f7:6c:1b:c5:cc:ac:25:bf:41:2e:ce:61:29:fe: fe:fd:51:4a:1d:cc:b7:1f:55:e3:19:23:70:bc:48:9c:3b:98: 76:db:a8:06:b7:f5:5b:5d:10:51:32:1b:93:fe:92:c3:c9:be: 24:0b:c9:f0:3d:3b:85:49:bb:57:89:c6:8e:fc:c5:13:0c:93: 04:eb:0b:a1:6f:85:e1:9b:e0:bc:5d:bf:54:b2:38:89:57:15: b3:32:f7:12:24:f2:10:d5:68:1e:36:58:18:54:06:79:79:14: f6:98:6d:ba:f6:8c:95:f7:0b:22:0a:1f:52:52:8a:ec:00:8e: 45:8a:14:83:7d:62:d4:a8:2f:97:a1:37:4d:c7:4a:3e:cc:52: 8f:55:28:fc:39:28:ac:14:51:4e:22:73:84:89:7b:67:8c:62: 7a:e4:ad:51:d0:30:2b:03:c9:ab:28:b9:be:b8:30:b3:4b:6a: b0:99:3f:37:0c:5c:93:11:e1:10:73:6c:68:d2:fb:a3:03:09: d8:a9:dc:92:53:b9:e8:8b:7b:4e:f0:42:34:71:17:22:e6:15: b4:3b:c3:5b:f3:49:2f:ff:ad:57:ed:4f:4f:05:d0:e2:87:e4: 05:46:12:55:d5:11:58:91:9e:dd:c9:86:b8:b9:d2:f0:a1:7a: 57:e7:d0:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz+CzONCNJJO7wU1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyNjE1MTIzMloXDTI2MDUyNzE0MTIzMlowLzEtMCsGA1UEAxMk YTdkZWEzNDgtNmIyZS00MDc1LWFmODktNGE4Mzc3YmM1MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwNxyzcRzrLvIe0IY/n/V3TKcvpwr3QbdmaP cI9JME2epRvZfWNsJfmvx07T74JSnhf11ic5m2R51dlYH7sqYRuD2tKGFata8tat 1tdobsz13rMw+m39VItNU60whhaByud1MdBJIB/YVNA+YNTpFXx/msUNmrRQ+JXk i3/Vv2wlhE5FOvPOx/KR/PUt3iwJK21A+dxyzs89XkLMFCjmEQvbaHsCh5kU1QnA tt6fm4iQmjjk+vJBwyj+oBOBtuStxpZq3U1nKUGz4nk/rUph69MitileVPR8tHbu T2KIPfnGUNWqvKHG7Kfe9BI5QmuufKsALbmYWaUvtNWditZYMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ3gOl88iJONCjqk/Bw6VLzEL0WcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTFmZjliOGQtOTE1Yi0z NGNhLWI5NWQtNmYxYTViYjg3NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAYop MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFU7p+D3bBvFzKwlv0EuzmEp/v79UUodzLcfVeMZI3C8SJw7mHbb qAa39VtdEFEyG5P+ksPJviQLyfA9O4VJu1eJxo78xRMMkwTrC6FvheGb4Lxdv1Sy OIlXFbMy9xIk8hDVaB42WBhUBnl5FPaYbbr2jJX3CyIKH1JSiuwAjkWKFIN9YtSo L5ehN03HSj7MUo9VKPw5KKwUUU4ic4SJe2eMYnrkrVHQMCsDyasoub64MLNLarCZ PzcMXJMR4RBzbGjS+6MDCdip3JJTueiLe07wQjRxFyLmFbQ7w1vzSS//rVftT08F 0OKH5AVGElXVEViRnt3Jhri50vChelfn0Dk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:30:10 2026 by rpki-client