$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7db97684-770f-3d4a-b5d9-3e6ab249c18f.roa File: 7db97684-770f-3d4a-b5d9-3e6ab249c18f.roa (raw, json) Hash identifier: HrFuEgsKYegMKMy6mOu7o2VgrbZFRgcUyoyPsM6cHmI= Subject key identifier: DC:4D:95:56:D0:84:E8:55:14:A7:A5:FB:3A:01:09:36:AB:FE:E0:2A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57E4674F9C9370A3F6CD40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7db97684-770f-3d4a-b5d9-3e6ab249c18f.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 2601:45::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:e4:67:4f:9c:93:70:a3:f6:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=fc6a0d26-e281-4891-a5fc-30ad2b47a613 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:57:82:aa:83:ec:68:2d:ac:7d:da:70:55: 68:ed:d7:f2:e5:9a:8e:7f:3d:55:b2:3a:c1:ab:60: 26:79:36:87:e5:d7:b2:a5:82:08:b1:20:45:75:1a: d0:6c:fc:4f:9b:02:ee:da:cf:66:3c:69:50:18:23: 16:f8:9f:9e:a5:60:e8:19:5b:a4:a4:49:72:12:34: 2d:d1:69:3c:8f:a6:fa:6b:d1:47:84:95:06:1d:66: f1:a4:f3:1f:2d:58:16:20:3a:99:f5:12:67:78:f6: 39:27:6f:8a:81:60:13:e5:28:62:7c:59:83:a3:74: be:fa:84:f1:b4:8e:d4:3b:2c:f4:cf:df:a3:e6:42: 2b:88:75:f2:b7:b8:f1:81:a8:a5:bb:0e:79:fd:c9: c2:60:e8:32:b1:ea:89:d5:0c:16:7e:92:3f:28:3d: 39:49:f3:6e:73:58:74:df:39:6a:0c:9e:4b:29:0f: 9f:98:d0:4b:81:4f:04:5f:4a:a9:27:bd:40:ce:c1: 0f:39:7c:45:a0:8a:13:10:4e:36:1d:10:26:35:74: be:b2:d7:32:51:49:ab:94:9e:4e:f0:44:a6:3f:3e: 0a:7f:63:dd:de:c4:f5:f0:c5:c0:76:19:72:54:90: 44:d3:0d:43:fd:cd:b6:c5:df:41:d2:e8:be:7e:ab: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4D:95:56:D0:84:E8:55:14:A7:A5:FB:3A:01:09:36:AB:FE:E0:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7db97684-770f-3d4a-b5d9-3e6ab249c18f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:45::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:76:03:0b:28:5e:1e:35:3b:6c:ef:6a:6e:b5:6d:78:08:44: a9:3f:60:5c:65:ef:f7:82:00:9e:6a:1d:82:89:09:79:ce:6e: af:af:53:a6:0f:23:a5:64:2d:18:06:4a:5f:f4:9c:36:02:01: 04:da:a2:f9:46:63:99:8f:8f:55:e6:31:8a:3a:38:2f:45:c3: 5a:a3:fb:e3:87:76:63:de:ef:df:60:3c:16:45:b1:e8:90:37: 7d:d0:19:1f:0d:47:13:2f:f4:a8:3c:25:26:00:f1:3c:ff:00: 83:db:46:a8:b4:2e:cd:d5:11:c9:8a:2d:e0:b9:4b:23:12:f5: 5e:56:57:8c:29:54:81:a7:fd:e3:05:c3:39:57:d8:26:c3:88: 8a:dd:25:f7:80:e9:73:0c:e0:60:0b:3c:04:7f:42:66:bf:c1: 9c:bf:a3:37:c7:a5:4c:a8:25:46:4e:1e:32:95:6c:97:1c:f5: 53:6d:62:63:7a:34:fe:20:a1:49:c9:53:79:5f:7f:22:aa:c1: c8:df:73:91:6d:9d:a4:a6:f8:db:fc:a6:27:04:6b:9a:68:eb: f1:84:77:56:93:b0:94:0f:8d:9e:6d:4f:44:b5:62:8d:10:c0: 09:4f:68:76:83:dd:58:2d:78:b3:77:2d:bf:77:24:1b:76:e3: e7:3c:8f:07 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuV+RnT5yTcKP2zUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmM2YTBkMjYtZTI4MS00ODkxLWE1ZmMtMzBhZDJiNDdhNjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbpXgqqD7GgtrH3acFVo7dfy5ZqOfz1VsjrB q2AmeTaH5deypYIIsSBFdRrQbPxPmwLu2s9mPGlQGCMW+J+epWDoGVukpElyEjQt 0Wk8j6b6a9FHhJUGHWbxpPMfLVgWIDqZ9RJnePY5J2+KgWAT5ShifFmDo3S++oTx tI7UOyz0z9+j5kIriHXyt7jxgailuw55/cnCYOgyseqJ1QwWfpI/KD05SfNuc1h0 3zlqDJ5LKQ+fmNBLgU8EX0qpJ71AzsEPOXxFoIoTEE42HRAmNXS+stcyUUmrlJ5O 8ESmPz4Kf2Pd3sT18MXAdhlyVJBE0w1D/c22xd9B0ui+fqvuawIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNxNlVbQhOhVFKel+zoBCTar/uAqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2RiOTc2ODQtNzcwZi0z ZDRhLWI1ZDktM2U2YWIyNDljMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEARQAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEANnYDCyheHjU7bO9qbrVteAhEqT9gXGXv94IAnmodgokJec5ur69T pg8jpWQtGAZKX/ScNgIBBNqi+UZjmY+PVeYxijo4L0XDWqP744d2Y97v32A8FkWx 6JA3fdAZHw1HEy/0qDwlJgDxPP8Ag9tGqLQuzdURyYot4LlLIxL1XlZXjClUgaf9 4wXDOVfYJsOIit0l94DpcwzgYAs8BH9CZr/BnL+jN8elTKglRk4eMpVslxz1U21i Y3o0/iChSclTeV9/IqrByN9zkW2dpKb42/ymJwRrmmjr8YR3VpOwlA+Nnm1PRLVi jRDACU9odoPdWC14s3ctv3ckG3bj5zyPBw== -----END CERTIFICATE-----Generated at Sun Mar 1 23:10:39 2026 by rpki-client