$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/170476b8-4860-35be-ac73-ad6f764c5d01.roa File: 170476b8-4860-35be-ac73-ad6f764c5d01.roa (raw, json) Hash identifier: LIBM2EfADKFbc7ApPcW8JgSD93dPH7NvRfy1EsvCxek= Subject key identifier: B0:07:0E:8A:DF:C8:67:31:F2:78:2F:6F:CD:87:43:F1:35:B3:00:84 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE971D98CC327BE24BFF680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/170476b8-4860-35be-ac73-ad6f764c5d01.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 22909 IP address blocks: 2603:3009:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:71:d9:8c:c3:27:be:24:bf:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=acc0eba8-6452-481b-8ab8-b537d7ef93d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:38:0d:9f:5d:bc:b9:e9:e7:40:c2:37:aa: 43:9e:00:43:44:1d:b0:f0:7d:e5:c0:a6:8a:1a:5b: 2d:54:51:a8:4a:ac:c4:7d:16:24:0a:f2:83:5d:e4: 10:b1:e8:9d:74:05:07:f5:6c:e7:c5:17:10:e4:8f: 66:67:86:0a:9f:6b:9b:6b:96:01:6f:60:a1:35:f7: d4:43:7f:66:15:4c:b3:f6:6f:e4:dd:c5:66:7a:ca: 63:74:c1:f6:94:1a:b6:76:b9:a7:5e:f9:28:0d:39: 3e:89:10:37:da:57:50:dd:bf:39:0e:d8:5e:69:65: 1a:d8:a0:62:1c:68:f2:69:69:69:78:fc:94:08:a2: 50:0e:c9:ef:42:40:c3:36:01:0f:1e:89:76:56:3c: ab:c5:03:e0:fc:be:53:78:5b:ba:99:41:47:fa:a4: ba:37:37:70:32:67:5a:57:27:6c:61:31:82:e5:09: 80:74:7b:c5:c1:80:9f:2f:61:9c:f3:9c:3f:2a:85: 99:ae:50:8a:1d:cd:b9:70:ca:bf:05:12:b5:e5:84: 3b:5b:f1:53:6a:19:84:68:6c:d4:1e:b8:e4:66:84: 86:7b:b6:28:01:39:49:88:c2:ff:31:64:e1:74:53: 2e:4f:e7:6e:c8:f2:18:a3:37:7e:54:4b:07:74:86: d9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:07:0E:8A:DF:C8:67:31:F2:78:2F:6F:CD:87:43:F1:35:B3:00:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/170476b8-4860-35be-ac73-ad6f764c5d01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3009:500::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:21:93:e2:ea:1d:3e:e1:a4:9a:25:0e:56:05:3d:46:f3:a7: 36:f6:0e:8c:d8:5e:49:47:1f:1e:d3:59:55:52:93:cb:03:b4: a9:2e:e8:05:d6:6d:9d:b3:94:d5:60:4b:0f:5e:a9:ec:ff:2e: 2f:d4:12:8e:0c:bd:a3:20:25:a3:26:24:6c:e6:ec:8a:46:18: f3:ed:b8:6c:52:ac:94:25:0e:bc:4b:fa:e7:93:ab:b5:59:52: e0:55:ea:20:d2:be:35:38:ad:2b:9d:04:6f:7f:12:a7:3e:af: 89:8d:c3:90:b5:0c:21:5e:05:e3:e7:91:7f:2f:84:48:ac:ce: 8b:21:93:02:7e:c6:a7:53:f0:dc:f2:d9:61:8b:73:9b:3d:e2: 1c:18:6d:86:53:fd:3a:34:81:ff:85:8c:d9:7c:98:fd:69:83: ee:31:26:ca:19:1d:cf:3d:f7:f2:92:c3:04:c7:d4:8c:3a:4d: e3:8f:5d:a5:2f:96:e1:20:2f:07:8e:52:70:9a:8f:82:a3:11: d7:43:b9:74:fc:70:2a:a6:dc:9d:69:a3:8b:46:0d:11:0a:40: 34:23:a7:b8:ed:f5:f6:fc:45:98:d3:28:5e:b3:19:d8:6d:0d: 83:dd:f4:c0:c5:d2:65:d2:43:88:27:dd:4c:d0:be:d5:ca:09: b1:0f:80:e6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEz96XHZjMMnviS/9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YWNjMGViYTgtNjQ1Mi00ODFiLThhYjgtYjUzN2Q3ZWY5M2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXY4DZ9dvLnp50DCN6pDngBDRB2w8H3lwKaK GlstVFGoSqzEfRYkCvKDXeQQseiddAUH9WznxRcQ5I9mZ4YKn2uba5YBb2ChNffU Q39mFUyz9m/k3cVmespjdMH2lBq2drmnXvkoDTk+iRA32ldQ3b85DtheaWUa2KBi HGjyaWlpePyUCKJQDsnvQkDDNgEPHol2VjyrxQPg/L5TeFu6mUFH+qS6NzdwMmda VydsYTGC5QmAdHvFwYCfL2Gc85w/KoWZrlCKHc25cMq/BRK15YQ7W/FTahmEaGzU HrjkZoSGe7YoATlJiML/MWThdFMuT+duyPIYozd+VEsHdIbZfQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLAHDorfyGcx8ngvb82HQ/E1swCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTcwNDc2YjgtNDg2MC0z NWJlLWFjNzMtYWQ2Zjc2NGM1ZDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwCQUw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEA0iGT4uodPuGkmiUOVgU9RvOnNvYOjNheSUcfHtNZVVKTywO0qS7o BdZtnbOU1WBLD16p7P8uL9QSjgy9oyAloyYkbObsikYY8+24bFKslCUOvEv655Or tVlS4FXqINK+NTitK50Eb38Spz6viY3DkLUMIV4F4+eRfy+ESKzOiyGTAn7Gp1Pw 3PLZYYtzmz3iHBhthlP9OjSB/4WM2XyY/WmD7jEmyhkdzz338pLDBMfUjDpN449d pS+W4SAvB45ScJqPgqMR10O5dPxwKqbcnWmji0YNEQpANCOnuO319vxFmNMoXrMZ 2G0Ng930wMXSZdJDiCfdTNC+1coJsQ+A5g== -----END CERTIFICATE-----Generated at Sun Mar 1 19:08:18 2026 by rpki-client