$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24979a0e-611c-3ae1-9546-9939393901e3.roa File: 24979a0e-611c-3ae1-9546-9939393901e3.roa (raw, json) Hash identifier: 32FKW9IloF3Itj1JB+sF1hEtAyVhtEinGxU6G5vD2B0= Subject key identifier: 28:99:DE:C9:FF:A8:58:3E:6D:03:33:70:49:AA:93:81:03:CB:89:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B71D297014E7E98D20EA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24979a0e-611c-3ae1-9546-9939393901e3.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 2603:300f::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:71:d2:97:01:4e:7e:98:d2:0e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=50d85ed0-37ae-4555-9ceb-3862f5db6b23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b3:04:9e:02:41:c7:25:e8:71:6f:e3:5f:5c: 1c:20:dc:10:e7:43:a1:5f:8d:71:a4:56:44:26:3b: 59:d8:71:f7:7a:af:53:7a:6c:c7:dd:81:fb:de:a7: a4:0d:7a:86:83:59:5e:25:1e:b6:81:3a:1c:78:32: db:71:68:71:21:fa:eb:f8:44:ce:5b:0f:b8:a6:e3: b1:3d:ff:69:b0:c9:f4:4c:51:34:44:21:bf:01:5b: 62:45:e6:80:9a:b0:48:ef:42:ac:05:38:1a:c7:d9: b7:4d:ad:b3:86:eb:2d:f3:64:c7:6c:96:d4:21:6b: 23:76:3a:e9:be:b0:ac:58:b0:54:ba:fe:40:73:d7: 56:4e:74:a5:e3:65:22:36:e9:bc:81:b9:b2:8d:69: ef:05:a6:60:62:c6:78:9a:cd:58:e4:a6:5b:28:80: 51:01:fe:6d:6f:0a:86:38:fc:04:53:00:d7:e7:03: 23:05:fa:c6:20:6e:77:2c:e7:5d:03:7b:26:4f:80: b6:2c:15:5a:90:41:af:dc:fe:14:9d:b5:08:40:17: 22:11:1b:9c:df:0b:7a:fb:1f:5b:ed:b3:e5:5d:52: 9a:b1:70:5d:bd:7d:0a:f1:a6:5c:d3:15:d4:5f:a1: d6:0b:32:c3:d2:ee:a2:fd:bc:c0:ce:4b:6c:87:e7: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:99:DE:C9:FF:A8:58:3E:6D:03:33:70:49:AA:93:81:03:CB:89:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24979a0e-611c-3ae1-9546-9939393901e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:300f::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:f1:af:89:9e:09:9c:02:b5:89:96:e1:0f:3a:28:a1:3e:3e: c3:0e:60:34:c8:e9:07:cb:e5:a8:72:bf:f6:36:bf:76:f6:ed: 65:43:19:e0:ab:9a:5d:15:a0:6c:af:7f:8f:33:5e:a4:7d:59: 10:4c:e1:b4:d5:8a:19:52:ff:fd:f3:35:1e:ee:a4:b7:ce:c4: 3e:4b:dd:7b:30:20:4d:a0:39:c6:e5:0c:52:97:f6:ca:13:5f: 11:75:c8:f5:46:63:c4:c0:5f:6f:50:a9:6b:0a:bf:92:5c:e4: a2:c4:4a:7c:40:aa:5d:44:95:26:fe:55:13:fc:24:73:5f:c9: 09:f5:c8:2f:0d:55:17:7e:ff:b2:e7:7d:95:72:eb:e2:d3:16: fe:c1:6f:05:3d:ba:65:b1:a7:0c:59:27:14:a8:7e:e5:2b:f2: cd:58:25:27:6a:d4:57:7d:ad:4a:ef:f2:39:ae:90:a4:af:b3: 98:22:ed:57:0e:98:fd:07:ef:a6:3b:4a:ca:e6:91:fe:2f:62: 3d:f6:22:b2:7c:32:5b:ba:8a:5f:f4:b0:f0:32:64:4f:a9:25: 52:e7:92:fa:62:1d:b4:5d:18:19:ef:1f:43:24:32:ab:da:a9: bf:36:85:a2:ca:43:2a:0b:dd:93:67:d1:92:b8:c1:eb:a4:4d: 8a:7a:5b:fd -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuW3HSlwFOfpjSDqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTBkODVlZDAtMzdhZS00NTU1LTljZWItMzg2MmY1ZGI2YjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibMEngJBxyXocW/jX1wcINwQ50OhX41xpFZE JjtZ2HH3eq9TemzH3YH73qekDXqGg1leJR62gToceDLbcWhxIfrr+ETOWw+4puOx Pf9psMn0TFE0RCG/AVtiReaAmrBI70KsBTgax9m3Ta2zhust82THbJbUIWsjdjrp vrCsWLBUuv5Ac9dWTnSl42UiNum8gbmyjWnvBaZgYsZ4ms1Y5KZbKIBRAf5tbwqG OPwEUwDX5wMjBfrGIG53LOddA3smT4C2LBVakEGv3P4UnbUIQBciERuc3wt6+x9b 7bPlXVKasXBdvX0K8aZc0xXUX6HWCzLD0u6i/bzAzktsh+c8PwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCiZ3sn/qFg+bQMzcEmqk4EDy4lvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQ5NzlhMGUtNjExYy0z YWUxLTk1NDYtOTkzOTM5MzkwMWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAwPGviZ4JnAK1iZbhDzoooT4+ww5gNMjpB8vlqHK/9ja/dvbtZUMZ 4KuaXRWgbK9/jzNepH1ZEEzhtNWKGVL//fM1Hu6kt87EPkvdezAgTaA5xuUMUpf2 yhNfEXXI9UZjxMBfb1Cpawq/klzkosRKfECqXUSVJv5VE/wkc1/JCfXILw1VF37/ sud9lXLr4tMW/sFvBT26ZbGnDFknFKh+5SvyzVglJ2rUV32tSu/yOa6QpK+zmCLt Vw6Y/QfvpjtKyuaR/i9iPfYisnwyW7qKX/Sw8DJkT6klUueS+mIdtF0YGe8fQyQy q9qpvzaFospDKgvdk2fRkrjB66RNinpb/Q== -----END CERTIFICATE-----Generated at Mon Mar 2 12:27:59 2026 by rpki-client