$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4d0402b4-3d72-3559-85da-54c26af32861.roa File: 4d0402b4-3d72-3559-85da-54c26af32861.roa (raw, json) Hash identifier: 72I6rQIRNvcjmUjSu67mmxPPadEoN2tgVEvcE2WFAfw= Subject key identifier: A4:43:76:78:EC:95:D1:88:08:7B:DA:2C:D1:F7:80:41:0A:DD:F8:61 Certificate issuer: /CN=4eab7524-ab79-46c8-aea6-96b100eb245d Certificate serial: 010D0C9F4328584C4F6BC48BCFAB8C172BEBBD00 Authority key identifier: 02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4d0402b4-3d72-3559-85da-54c26af32861.roa Signing time: Fri 26 Dec 2025 02:00:32 +0000 ROA not before: Fri 26 Dec 2025 02:00:32 +0000 ROA not after: Thu 26 Mar 2026 01:00:32 +0000 asID: 400097 IP address blocks: 2606:3d40:3c00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4f:6b:c4:8b:cf:ab:8c:17:2b:eb:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eab7524-ab79-46c8-aea6-96b100eb245d Validity Not Before: Dec 26 02:00:32 2025 GMT Not After : Mar 26 01:00:32 2026 GMT Subject: CN=a7033a50-42bf-4884-9772-d14e79cbab17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:60:dc:77:37:f5:0a:f2:8c:12:dc:50:43:69: dd:b9:25:d3:83:e6:f0:13:a8:13:d7:22:4c:a5:f0: 1b:46:05:cd:44:52:0b:ec:fc:bb:4b:e0:6c:e3:99: 84:b0:e8:55:b8:1d:3e:92:76:78:ff:bf:f5:2f:c1: e0:ed:bc:72:b7:e0:41:95:8a:65:cb:99:c2:df:fe: 44:9e:b4:17:30:de:7e:0c:a7:ff:16:cd:e5:e4:fb: 99:8f:eb:0e:34:e1:e1:56:ac:2c:21:64:3d:c1:57: d6:bb:1d:a2:7a:8c:fb:99:5c:46:8b:72:a4:62:12: 7e:5f:c3:16:79:4a:5b:64:2f:88:9f:47:f5:9d:83: 73:0b:5b:69:c4:54:ec:23:79:31:b3:5d:3a:b4:80: 89:d1:67:7a:72:d7:57:02:ff:b8:d3:85:9c:35:d3: bb:0d:61:80:dc:24:cb:d2:7e:46:33:7c:1d:6d:ca: b7:7a:eb:3f:f2:fc:b5:33:91:61:a8:a4:2d:2a:34: 0f:f9:1b:d3:ca:20:b9:04:69:34:ee:be:1c:b6:a3: 68:0b:72:9f:f3:e0:24:7a:3b:54:ac:75:cb:cb:09: bb:1a:70:8a:9b:2a:82:2e:51:31:3a:ea:cb:fe:64: 12:f3:8b:b5:39:11:94:0e:85:2e:7e:4b:02:83:cb: 2d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:43:76:78:EC:95:D1:88:08:7B:DA:2C:D1:F7:80:41:0A:DD:F8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4d0402b4-3d72-3559-85da-54c26af32861.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d/4eab7524-ab79-46c8-aea6-96b100eb245d.crl X509v3 Authority Key Identifier: keyid:02:F0:17:37:BB:5C:70:38:EC:B7:A4:E7:A3:1F:B0:AD:29:D0:EB:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4eab7524-ab79-46c8-aea6-96b100eb245d.cer sbgp-ipAddrBlock: critical IPv6: 2606:3d40:3c00::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:75:d9:17:3f:6b:dd:0c:30:34:48:65:22:33:64:95:6f:90: 4b:fc:24:59:5c:67:2b:69:36:39:11:b9:4a:62:e5:ce:e8:d9: b8:8d:7d:92:31:61:24:a7:80:8b:47:28:f8:da:2f:cd:44:a6: c5:61:36:e7:7a:0d:a5:0a:76:3b:6f:47:5f:17:08:11:3f:9b: c4:ad:6d:c8:c1:0e:1c:7c:03:1f:fe:77:68:0a:6f:34:7d:82: c0:17:de:8d:39:66:87:91:be:6b:30:53:0f:67:a3:29:23:b8: 8c:28:3d:7d:1f:a1:dd:ac:4f:41:05:1b:fc:d1:53:49:9d:b6: 8a:a1:63:9f:b4:04:8c:f0:b0:d0:71:82:94:87:52:f4:49:48: 0a:7f:25:55:de:b1:b3:ea:d4:5f:97:35:49:70:42:9e:25:4f: bb:d5:74:f5:74:e7:c9:88:b4:58:f2:bc:ba:d1:47:03:b5:aa: de:51:21:c6:9a:64:08:e4:0d:33:5b:2e:4b:9b:fd:58:43:e8: b4:55:40:59:f9:b8:7a:83:08:18:18:c0:f3:a5:ae:88:5a:0d: 01:b6:44:3f:62:8a:f6:9b:6b:d5:ee:2f:eb:05:13:a7:75:45: 8c:cd:b9:ef:8e:6e:01:aa:a1:4f:5c:25:7e:42:bf:22:2e:81: 0d:48:e5:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExPa8SLz6uMFyvrvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGVhYjc1MjQtYWI3OS00NmM4LWFlYTYtOTZiMTAwZWIy NDVkMB4XDTI1MTIyNjAyMDAzMloXDTI2MDMyNjAxMDAzMlowLzEtMCsGA1UEAxMk YTcwMzNhNTAtNDJiZi00ODg0LTk3NzItZDE0ZTc5Y2JhYjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWDcdzf1CvKMEtxQQ2nduSXTg+bwE6gT1yJM pfAbRgXNRFIL7Py7S+Bs45mEsOhVuB0+knZ4/7/1L8Hg7bxyt+BBlYply5nC3/5E nrQXMN5+DKf/Fs3l5PuZj+sONOHhVqwsIWQ9wVfWux2ieoz7mVxGi3KkYhJ+X8MW eUpbZC+In0f1nYNzC1tpxFTsI3kxs106tICJ0Wd6ctdXAv+404WcNdO7DWGA3CTL 0n5GM3wdbcq3eus/8vy1M5FhqKQtKjQP+RvTyiC5BGk07r4ctqNoC3Kf8+AkejtU rHXLywm7GnCKmyqCLlExOurL/mQS84u1ORGUDoUufksCg8stcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKRDdnjsldGICHvaLNH3gEEK3fhhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFi NzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIxMDBlYjI0NWQvNGQwNDAyYjQtM2Q3Mi0z NTU5LTg1ZGEtNTRjMjZhZjMyODYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGVhYjc1MjQtYWI3OS00NmM4LWFl YTYtOTZiMTAwZWIyNDVkLzRlYWI3NTI0LWFiNzktNDZjOC1hZWE2LTk2YjEwMGVi MjQ1ZC5jcmwwHwYDVR0jBBgwFoAUAvAXN7tccDjst6Tnox+wrSnQ6+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZWFiNzUyNC1hYjc5LTQ2YzgtYWVhNi05NmIx MDBlYjI0NWQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY9QDwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJZ12Rc/a90MMDRIZSIzZJVvkEv8JFlcZytpNjkRuUpi5c7o2biN fZIxYSSngItHKPjaL81EpsVhNud6DaUKdjtvR18XCBE/m8StbcjBDhx8Ax/+d2gK bzR9gsAX3o05ZoeRvmswUw9noykjuIwoPX0fod2sT0EFG/zRU0mdtoqhY5+0BIzw sNBxgpSHUvRJSAp/JVXesbPq1F+XNUlwQp4lT7vVdPV058mItFjyvLrRRwO1qt5R IcaaZAjkDTNbLkub/VhD6LRVQFn5uHqDCBgYwPOlrohaDQG2RD9iivaba9XuL+sF E6d1RYzNue+ObgGqoU9cJX5CvyIugQ1I5dQ= -----END CERTIFICATE-----Generated at Mon Mar 2 13:25:40 2026 by rpki-client