$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a34f8a4-cad2-367b-aa5f-035a08efa4b9.roa File: 2a34f8a4-cad2-367b-aa5f-035a08efa4b9.roa (raw, json) Hash identifier: zdztqJQMoD9FXtTUT+kssHMa/WhHa9CA1Of4SG+KKUQ= Subject key identifier: C4:F1:AC:65:FF:58:F3:6B:00:9E:09:EE:8C:1C:A8:00:09:61:EA:7C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D5243947A976D29D8A75C1180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a34f8a4-cad2-367b-aa5f-035a08efa4b9.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 7016 IP address blocks: 2601:98d::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:94:7a:97:6d:29:d8:a7:5c:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=0a9aaebf-591e-4274-a711-c2d0d994d8e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b8:16:26:6f:6d:09:1f:84:a1:8d:27:64:47: cf:fa:0d:6a:20:77:c7:8c:cb:4f:90:52:7b:ed:b5: ac:39:25:d4:4b:bb:ea:fa:f1:4e:82:f8:10:e0:4e: 94:cc:6c:5c:db:79:9d:87:a4:00:d2:5c:6a:ef:4e: 29:b8:ff:fb:c2:90:9f:47:c9:4b:82:b8:1a:dd:c6: 58:c1:4f:8d:38:19:6e:77:64:7e:65:68:56:3e:21: ca:9a:30:2c:30:d1:08:b2:3b:3c:4b:b1:28:25:68: ce:bc:37:37:6f:27:31:d4:63:f6:95:17:6a:09:5e: 33:6e:08:d2:e9:b3:b1:26:3f:bd:a5:34:8e:6c:d7: 56:b5:3a:8a:44:13:07:54:fd:75:53:3a:14:9c:5b: 45:34:9e:7f:3c:56:3e:6c:76:de:01:c0:7d:d7:a2: 77:3d:35:ac:2a:9d:fa:73:e2:38:4e:8e:8b:4a:6b: 90:5a:91:42:61:13:86:de:9a:24:23:9a:57:09:7a: b9:8f:ff:36:ea:e1:bf:d7:ca:d3:f1:5c:4d:2a:aa: 11:45:b2:f8:73:b9:31:15:ae:17:19:da:48:d5:bb: 86:17:0f:7e:09:4b:70:91:c5:63:47:1c:13:d0:00: aa:44:1e:1f:8f:a8:08:b6:78:64:f2:24:21:bd:53: f4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F1:AC:65:FF:58:F3:6B:00:9E:09:EE:8C:1C:A8:00:09:61:EA:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a34f8a4-cad2-367b-aa5f-035a08efa4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:98d::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:48:9a:f5:6e:cd:cb:4a:02:ee:c4:3c:67:02:86:6e:47:60: 32:83:73:05:48:c2:95:d7:90:6f:9d:7a:4e:c9:bb:07:7f:b8: c5:17:eb:40:29:36:23:0e:38:2c:52:d5:60:6e:d8:01:d2:04: a0:44:7f:b1:84:9d:f7:7b:65:ef:66:c1:f4:89:93:46:86:10: 2f:f7:5d:bf:2c:d1:9d:1c:5c:87:17:40:bd:85:fe:f2:67:ae: 3f:3f:07:a2:f9:ff:1a:6d:91:8c:f6:65:76:75:80:c7:0b:f8: 48:bc:59:0d:3c:ea:a2:6d:69:d7:26:22:ad:4f:fe:49:aa:b6: 19:f9:b4:7a:03:eb:08:02:e8:ee:d2:25:b7:37:ba:2d:34:f0: c4:e3:bd:e5:d7:ef:fd:8d:98:56:03:fd:76:1d:19:13:90:7f: 26:eb:1e:2f:18:b0:7e:f4:7b:36:f5:d4:ca:fa:7f:ab:92:1a: 65:d2:45:12:f1:e2:7b:b5:5e:be:68:fe:8c:1e:77:71:98:ec: 1e:75:7d:87:de:85:ac:1c:dc:43:b2:a9:32:d1:5b:48:46:24: 45:a0:1c:53:e7:36:46:eb:dd:43:cd:3f:e1:07:4d:7a:63:98: 1d:40:85:cd:f2:35:dd:63:68:b3:4c:5e:9b:92:57:fd:d9:e0: 5b:ae:46:8c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1SQ5R6l20p2KdcEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk MGE5YWFlYmYtNTkxZS00Mjc0LWE3MTEtYzJkMGQ5OTRkOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrgWJm9tCR+EoY0nZEfP+g1qIHfHjMtPkFJ7 7bWsOSXUS7vq+vFOgvgQ4E6UzGxc23mdh6QA0lxq704puP/7wpCfR8lLgrga3cZY wU+NOBlud2R+ZWhWPiHKmjAsMNEIsjs8S7EoJWjOvDc3bycx1GP2lRdqCV4zbgjS 6bOxJj+9pTSObNdWtTqKRBMHVP11UzoUnFtFNJ5/PFY+bHbeAcB916J3PTWsKp36 c+I4To6LSmuQWpFCYROG3pokI5pXCXq5j/826uG/18rT8VxNKqoRRbL4c7kxFa4X GdpI1buGFw9+CUtwkcVjRxwT0ACqRB4fj6gItnhk8iQhvVP0VQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFMTxrGX/WPNrAJ4J7owcqAAJYep8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmEzNGY4YTQtY2FkMi0z NjdiLWFhNWYtMDM1YTA4ZWZhNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEJjQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAyUia9W7Ny0oC7sQ8ZwKGbkdgMoNzBUjCldeQb516Tsm7B3+4xRfr QCk2Iw44LFLVYG7YAdIEoER/sYSd93tl72bB9ImTRoYQL/ddvyzRnRxchxdAvYX+ 8meuPz8Hovn/Gm2RjPZldnWAxwv4SLxZDTzqom1p1yYirU/+Saq2Gfm0egPrCALo 7tIltze6LTTwxOO95dfv/Y2YVgP9dh0ZE5B/JuseLxiwfvR7NvXUyvp/q5IaZdJF EvHie7Vevmj+jB53cZjsHnV9h96FrBzcQ7KpMtFbSEYkRaAcU+c2RuvdQ80/4QdN emOYHUCFzfI13WNos0xem5JX/dngW65GjA== -----END CERTIFICATE-----Generated at Sun Apr 19 13:00:44 2026 by rpki-client