$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a13e8b-3743-3bc3-be14-591e88b09e5f.roa File: a9a13e8b-3743-3bc3-be14-591e88b09e5f.roa (raw, json) Hash identifier: nAcxuYybh0gCYltZ8txJgjQjjF4ISLrkdz2ssgDXsVI= Subject key identifier: F9:70:77:55:74:AE:89:F3:9F:4B:AC:7D:85:65:86:82:6E:1B:B6:E6 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584CFE0B2D05C3628B836AA9FF80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a13e8b-3743-3bc3-be14-591e88b09e5f.roa Signing time: Thu 26 Feb 2026 15:12:29 +0000 ROA not before: Thu 26 Feb 2026 15:12:29 +0000 ROA not after: Wed 27 May 2026 14:12:29 +0000 asID: 396609 IP address blocks: 2001:503:83eb::30/128 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:0b:2d:05:c3:62:8b:83:6a:a9:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 26 15:12:29 2026 GMT Not After : May 27 14:12:29 2026 GMT Subject: CN=cdcfde8d-a122-42e8-b0c9-f6811f73be48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:10:91:96:d2:94:e7:94:7a:73:36:58:73:2c: b6:8c:d1:1e:88:5b:f1:11:cb:5d:da:62:65:37:ef: 4d:85:f1:43:f5:1a:24:5a:c2:97:68:0d:b7:6b:e7: da:4a:f2:d3:0c:bf:a1:61:e4:2e:f9:f1:69:9d:f3: 2d:c9:44:f2:d5:4e:af:f4:f2:94:73:9a:a7:3c:93: 76:5d:d7:f2:91:cd:ac:d1:d4:2a:49:cd:2a:ee:12: 6a:6b:e0:a2:95:47:aa:6a:fb:46:9c:db:30:2b:ad: 05:9a:c5:8a:03:e8:88:4e:f3:d0:e9:3d:86:fa:42: 5e:b1:e1:25:e1:1f:d7:33:a9:fd:5c:0d:c7:68:7c: 01:8c:f8:65:96:48:8c:f3:b1:a5:cd:70:0d:b6:ab: 56:b9:df:0e:7f:d1:96:4c:e4:15:e3:09:2d:b6:9f: f2:5d:8f:b7:be:fd:3d:98:24:75:b2:41:38:7e:33: e4:70:55:88:d4:59:7e:58:ec:10:26:90:e1:79:7d: 43:8b:44:7b:f9:b1:ff:c5:b4:cb:8f:af:ac:6d:21: 71:03:d0:c7:01:b2:37:02:01:04:9c:13:1c:d2:85: 69:69:77:ce:42:cb:25:6f:52:08:54:d0:0d:22:21: ab:3d:92:30:12:49:c6:15:11:c1:38:20:83:77:1e: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:70:77:55:74:AE:89:F3:9F:4B:AC:7D:85:65:86:82:6E:1B:B6:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9a13e8b-3743-3bc3-be14-591e88b09e5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv6: 2001:503:83eb:0:0:0:0:30/128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:51:33:0d:c7:20:7b:71:39:9a:76:ab:b2:d8:0f:1b:d8:40: e7:03:34:06:00:fe:d6:c3:43:37:6c:b6:4f:32:c7:0f:d8:b5: 46:f4:ca:99:e8:3a:4c:ea:42:08:ce:9d:37:8a:6b:13:80:15: f5:2b:8e:2d:94:44:00:41:22:29:e6:e6:e8:79:b3:7b:22:54: 37:72:1a:e2:6a:76:54:6e:46:6f:6d:4b:9b:a3:45:30:d6:24: ab:6e:5b:06:51:ac:d4:35:c6:22:2f:bb:5f:37:50:23:26:46: bd:c5:9d:d8:f0:7a:9e:41:b2:8c:62:7b:35:a1:97:8b:f2:ce: 21:20:91:14:fd:26:01:05:b0:37:98:11:57:4b:1a:9e:ec:a4: 80:94:ba:2a:bd:f7:70:98:6a:9b:6e:b0:11:ee:8d:27:7f:a0: 11:81:27:f8:f8:79:7a:f2:a5:f5:5b:99:e1:8b:c3:65:9b:43: cd:a0:ef:93:83:d8:ea:46:70:83:56:0b:a3:3e:1e:2a:17:54: b4:0e:85:d7:8f:f3:c4:e0:7e:1a:c2:43:6a:40:5d:56:2d:10: b9:6a:3d:0f:be:d0:a4:6b:53:81:90:9e:d1:9b:44:8c:e7:1a: 31:70:f1:1c:c9:9c:1d:bc:11:e6:dc:41:23:ba:83:33:87:1e: 70:5e:56:0a -----BEGIN CERTIFICATE----- MIIGUDCCBTigAwIBAgIUAQ0Mn0MoWEz+Cy0Fw2KLg2qp/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI2MDIyNjE1MTIyOVoXDTI2MDUyNzE0MTIyOVowLzEtMCsGA1UEAxMk Y2RjZmRlOGQtYTEyMi00MmU4LWIwYzktZjY4MTFmNzNiZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBCRltKU55R6czZYcyy2jNEeiFvxEctd2mJl N+9NhfFD9RokWsKXaA23a+faSvLTDL+hYeQu+fFpnfMtyUTy1U6v9PKUc5qnPJN2 Xdfykc2s0dQqSc0q7hJqa+CilUeqavtGnNswK60FmsWKA+iITvPQ6T2G+kJeseEl 4R/XM6n9XA3HaHwBjPhllkiM87GlzXANtqtWud8Of9GWTOQV4wkttp/yXY+3vv09 mCR1skE4fjPkcFWI1Fl+WOwQJpDheX1Di0R7+bH/xbTLj6+sbSFxA9DHAbI3AgEE nBMc0oVpaXfOQsslb1IIVNANIiGrPZIwEknGFRHBOCCDdx4RawIDAQABo4IDYjCC A14wHQYDVR0OBBYEFPlwd1V0ronzn0usfYVlhoJuG7bmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTlhMTNlOGItMzc0My0z YmMzLWJlMTQtNTkxZTg4YjA5ZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATAxEAIAEFA4Pr AAAAAAAAAAAAMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAEUTMNxyB7cTmadquy2A8b2EDnAzQGAP7Ww0M3 bLZPMscP2LVG9MqZ6DpM6kIIzp03imsTgBX1K44tlEQAQSIp5uboebN7IlQ3chri anZUbkZvbUubo0Uw1iSrblsGUazUNcYiL7tfN1AjJka9xZ3Y8HqeQbKMYns1oZeL 8s4hIJEU/SYBBbA3mBFXSxqe7KSAlLoqvfdwmGqbbrAR7o0nf6ARgSf4+Hl68qX1 W5nhi8Nlm0PNoO+Tg9jqRnCDVgujPh4qF1S0DoXXj/PE4H4awkNqQF1WLRC5aj0P vtCka1OBkJ7Rm0SM5xoxcPEcyZwdvBHm3EEjuoMzhx5wXlYK -----END CERTIFICATE-----Generated at Mon Mar 2 04:48:12 2026 by rpki-client