$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f000528-528f-3d72-8fca-e9ce68075228.roa File: 3f000528-528f-3d72-8fca-e9ce68075228.roa (raw, json) Hash identifier: onkjUH/O9gswR2O/vULd0/LkP9ykqxJ85L1ZgSArEUE= Subject key identifier: 99:23:76:0C:D2:1F:A2:FF:E4:9A:1D:C7:FA:F8:AF:18:A2:39:64:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B685D1007C56238C09A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f000528-528f-3d72-8fca-e9ce68075228.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 2601:801:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:68:5d:10:07:c5:62:38:c0:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=0ccf0a17-0282-4e06-8d3f-e2577b17f459 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:48:64:9a:f0:53:0d:0b:1e:27:05:00:8a:4d: 1e:48:dd:d1:66:24:7b:fc:0c:64:46:89:1d:07:0b: 44:e6:b9:c6:7d:cf:b8:84:a5:dc:3f:04:04:a7:82: 4f:1a:83:cc:82:3a:31:bc:bf:1e:40:f0:b7:ce:08: b7:cd:c3:00:28:c1:e4:5d:3c:2b:26:52:6d:94:b5: 37:2c:1e:fb:d4:ca:af:80:0f:45:1b:02:b5:cc:0c: a8:3a:e7:a4:a7:c8:b4:9d:25:30:d3:db:92:e7:d6: f8:a7:c2:da:5d:56:c2:0d:53:a1:fc:c6:c4:57:5f: 6c:c0:3e:13:ba:e0:d1:4c:24:92:ed:d9:86:0c:6d: ab:0f:af:49:7c:99:a2:a6:6e:88:95:9e:c6:a1:5f: 81:ed:9a:31:a2:9a:1e:5a:8a:6d:35:e3:90:8f:95: c6:0d:30:cc:b0:0f:f4:21:04:f2:6a:65:88:af:38: 1f:4d:92:c0:a5:8b:03:b8:09:e6:db:5d:de:b0:a6: 06:27:b6:02:88:38:1d:50:d9:8b:9b:7d:26:a9:ab: 8d:1b:c9:88:f3:d5:f9:99:5c:e4:12:e2:d6:fb:a6: 28:ed:64:50:f2:99:8f:d7:67:c5:cc:c6:b5:19:cd: e3:89:43:c6:c9:c6:bc:7b:96:f1:5a:26:9e:73:92: c1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:23:76:0C:D2:1F:A2:FF:E4:9A:1D:C7:FA:F8:AF:18:A2:39:64:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f000528-528f-3d72-8fca-e9ce68075228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:801:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:21:81:8c:c7:ac:e4:20:5e:7f:02:66:60:b1:5c:46:c8:d3: 7c:fd:21:f4:4b:dc:02:8d:bd:ea:3e:d1:3a:9a:1e:ae:24:bb: ff:c3:5a:3f:61:f1:d1:9f:21:ee:21:50:71:bd:56:ce:b5:48: 48:22:58:ce:56:c3:65:3a:a4:a8:28:28:fe:e1:a9:94:a5:94: e8:f1:82:f8:b4:8b:31:95:10:6c:50:85:f7:e4:c5:f8:78:44: d1:15:56:3d:b9:43:14:14:55:60:21:e6:6b:38:2a:33:ef:23: 33:a5:1a:f4:a7:a6:92:c5:4a:43:1f:3d:4d:9e:9f:1f:a3:7c: 43:70:f7:66:c8:f3:a4:a1:6a:c7:fd:f5:89:a1:53:3c:35:e4: a4:03:c5:89:ba:23:56:2f:b0:09:85:2e:d6:31:79:e8:d1:73: 78:24:38:97:c3:83:64:e0:7b:e9:4d:7b:d9:fb:8e:4a:a6:b0: 04:ae:64:2f:83:9a:a4:1e:42:99:1a:cc:4f:03:5f:bc:41:ce: 7e:d4:7b:67:44:59:88:a3:6d:b1:a0:11:96:71:c9:63:0e:a1: 38:9a:40:35:b1:b8:10:7b:d5:15:59:c7:cb:e6:25:c6:06:8b: 8f:94:34:79:04:4c:a2:a4:fd:db:db:f8:cd:02:a2:37:eb:3e: b5:3e:87:7c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuW2hdEAfFYjjAmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk MGNjZjBhMTctMDI4Mi00ZTA2LThkM2YtZTI1NzdiMTdmNDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0hkmvBTDQseJwUAik0eSN3RZiR7/AxkRokd BwtE5rnGfc+4hKXcPwQEp4JPGoPMgjoxvL8eQPC3zgi3zcMAKMHkXTwrJlJtlLU3 LB771MqvgA9FGwK1zAyoOuekp8i0nSUw09uS59b4p8LaXVbCDVOh/MbEV19swD4T uuDRTCSS7dmGDG2rD69JfJmipm6IlZ7GoV+B7ZoxopoeWoptNeOQj5XGDTDMsA/0 IQTyamWIrzgfTZLApYsDuAnm213esKYGJ7YCiDgdUNmLm30mqauNG8mI89X5mVzk EuLW+6Yo7WRQ8pmP12fFzMa1Gc3jiUPGyca8e5bxWiaec5LBVQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFJkjdgzSH6L/5Jodx/r4rxiiOWR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2YwMDA1MjgtNTI4Zi0z ZDcyLThmY2EtZTljZTY4MDc1MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEIAcAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEApSGBjMes5CBefwJmYLFcRsjTfP0h9EvcAo296j7ROpoeriS7/8Na P2Hx0Z8h7iFQcb1WzrVISCJYzlbDZTqkqCgo/uGplKWU6PGC+LSLMZUQbFCF9+TF +HhE0RVWPblDFBRVYCHmazgqM+8jM6Ua9KemksVKQx89TZ6fH6N8Q3D3ZsjzpKFq x/31iaFTPDXkpAPFibojVi+wCYUu1jF56NFzeCQ4l8ODZOB76U172fuOSqawBK5k L4OapB5CmRrMTwNfvEHOftR7Z0RZiKNtsaARlnHJYw6hOJpANbG4EHvVFVnHy+Yl xgaLj5Q0eQRMoqT929v4zQKiN+s+tT6HfA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:29:36 2026 by rpki-client