$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/963d5aa5-d65e-30a9-93f6-4a99bf55f261.roa File: 963d5aa5-d65e-30a9-93f6-4a99bf55f261.roa (raw, json) Hash identifier: xl8/Qbc8EtZvphKxP7Oxa1KRbAy4qCrjTlUewaGhkSs= Subject key identifier: 3A:F8:3F:CC:14:76:2F:68:E7:4F:D7:37:BC:A4:0D:A6:46:C9:AE:7C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5B350E7A8ABDAC6C2CA980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/963d5aa5-d65e-30a9-93f6-4a99bf55f261.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 2603:2040:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5b:35:0e:7a:8a:bd:ac:6c:2c:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=78e686f6-8e4e-4bfb-8aec-7a55909078d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:7d:1f:d8:80:19:8d:c0:07:16:62:89:cb: be:0b:79:23:f9:09:c8:d1:cb:3e:3c:0a:f2:84:68: 43:a8:25:1c:e7:2d:67:cb:30:32:d7:cc:79:79:5a: 2f:65:b5:cb:34:d6:d5:0d:de:76:15:69:36:d6:ea: d2:27:a5:d0:45:1a:fc:99:6c:88:c3:59:f0:54:86: 6c:04:d6:ac:ba:a6:92:41:6e:9b:64:62:ad:79:bb: c3:f0:76:ba:c0:d3:d3:ab:76:2b:9d:49:80:db:2d: bf:c3:0b:ac:f4:7e:b1:15:8a:76:3a:a6:e0:1b:af: 79:df:e0:51:11:90:d4:24:ca:8f:35:54:bc:89:ef: 73:ad:3c:4e:71:ee:9a:51:a6:bd:b3:5a:57:b6:09: 20:5f:fb:51:25:30:a8:af:02:3d:46:37:41:b0:3d: 26:a1:f2:41:01:2c:c4:11:67:73:3e:df:59:f4:10: cc:8e:0b:de:f2:23:6d:86:7f:dd:07:24:6b:92:4a: 30:ce:d9:db:87:21:d7:4e:e5:c8:76:31:ab:c5:0c: 29:99:b4:fa:ad:8a:71:25:e8:87:5a:0e:ff:41:fb: 80:3b:02:cc:a1:85:29:61:ad:f9:a0:0e:9f:b4:a6: ad:c8:72:7f:85:94:69:65:63:4f:35:e3:90:d0:a1: e3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F8:3F:CC:14:76:2F:68:E7:4F:D7:37:BC:A4:0D:A6:46:C9:AE:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/963d5aa5-d65e-30a9-93f6-4a99bf55f261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2040:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:82:dc:4c:e8:31:5a:99:82:eb:55:79:e8:27:69:d3:bc:d4: dc:81:e8:1e:b1:25:73:97:16:bc:16:fb:e5:48:e4:72:b2:d5: a9:a3:23:32:50:74:3b:48:2f:e0:db:4c:74:bf:ab:96:93:6a: bf:48:dc:5a:46:6f:a3:78:e1:1f:3d:2d:8d:9e:65:10:07:47: 45:de:19:96:df:af:00:7c:a1:7c:8a:12:aa:28:e8:e1:c2:b4: 35:22:1a:38:e3:3c:ab:02:c4:0f:6a:b3:be:18:39:e0:e8:82: 3d:49:c3:61:11:b1:bf:3d:4d:26:a4:c0:9c:41:e8:dd:fd:a3: 8a:23:79:4e:6a:29:73:c5:db:1e:11:92:8d:57:ca:8f:d3:fe: 9e:90:5a:3c:8b:1e:75:ae:e8:72:62:b1:6c:61:bb:0f:3c:d9: 2d:37:9c:c9:00:67:38:6c:a4:58:17:80:c1:3d:fc:51:f2:05: b7:d3:83:4e:34:9f:64:86:60:cb:c6:42:73:6e:fe:d3:9d:31: ef:e2:85:3e:e2:bc:40:bb:fa:f6:e7:62:d7:11:35:9e:26:a6: be:0a:d7:5e:88:da:93:ff:40:9e:58:32:91:26:ad:64:2e:56: a4:84:71:e0:e3:d7:e9:51:76:bc:27:3c:05:31:68:0f:b9:e4: d5:eb:17:6a -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuWzUOeoq9rGwsqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NzhlNjg2ZjYtOGU0ZS00YmZiLThhZWMtN2E1NTkwOTA3OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL99H9iAGY3ABxZiicu+C3kj+QnI0cs+PAry hGhDqCUc5y1nyzAy18x5eVovZbXLNNbVDd52FWk21urSJ6XQRRr8mWyIw1nwVIZs BNasuqaSQW6bZGKtebvD8Ha6wNPTq3YrnUmA2y2/wwus9H6xFYp2OqbgG6953+BR EZDUJMqPNVS8ie9zrTxOce6aUaa9s1pXtgkgX/tRJTCorwI9RjdBsD0mofJBASzE EWdzPt9Z9BDMjgve8iNthn/dByRrkkowztnbhyHXTuXIdjGrxQwpmbT6rYpxJeiH Wg7/QfuAOwLMoYUpYa35oA6ftKatyHJ/hZRpZWNPNeOQ0KHjqQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFDr4P8wUdi9o50/XN7ykDaZGya58MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTYzZDVhYTUtZDY1ZS0z MGE5LTkzZjYtNGE5OWJmNTVmMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMgQMAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAloLcTOgxWpmC61V56Cdp07zU3IHoHrElc5cWvBb75UjkcrLVqaMj MlB0O0gv4NtMdL+rlpNqv0jcWkZvo3jhHz0tjZ5lEAdHRd4Zlt+vAHyhfIoSqijo 4cK0NSIaOOM8qwLED2qzvhg54OiCPUnDYRGxvz1NJqTAnEHo3f2jiiN5Tmopc8Xb HhGSjVfKj9P+npBaPIseda7ocmKxbGG7DzzZLTecyQBnOGykWBeAwT38UfIFt9OD TjSfZIZgy8ZCc27+050x7+KFPuK8QLv69udi1xE1niamvgrXXojak/9AnlgykSat ZC5WpIRx4OPX6VF2vCc8BTFoD7nk1esXag== -----END CERTIFICATE-----Generated at Sun Mar 1 22:48:43 2026 by rpki-client