$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf7aa6f5-b38e-3a63-ae83-e8310a60a1b6.roa File: bf7aa6f5-b38e-3a63-ae83-e8310a60a1b6.roa (raw, json) Hash identifier: 0w2ZpH16AN+6FCKu6OzjzFN1PUEw2AFvcBckBw8qAEE= Subject key identifier: 1A:48:F9:1A:CD:C8:A0:EF:15:AF:D5:5F:71:7C:C7:A5:17:78:2A:59 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58BC74D5FC9C07E5115980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf7aa6f5-b38e-3a63-ae83-e8310a60a1b6.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 2603:2648:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:bc:74:d5:fc:9c:07:e5:11:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b0737fc6-76cb-48c2-93bc-5c445624c93d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7f:80:ab:91:78:b0:ba:89:32:09:3d:64:c0: e8:e3:ee:81:99:7b:16:c1:88:47:39:0b:5b:43:b2: 55:e0:7a:00:a8:25:ff:53:14:7c:96:9a:f5:e2:5d: 2d:ef:50:8c:2f:6a:65:16:a6:d3:75:d2:f4:b2:00: 9c:c6:9d:ba:18:ce:8e:c9:8e:86:e4:0e:b1:68:63: 53:1a:5a:80:68:ea:bf:ae:37:af:7f:90:5b:6d:9e: be:67:a6:91:fc:6b:94:85:ad:13:e3:18:b1:9c:c5: f9:60:8a:08:cd:c5:80:80:2e:f3:9a:fc:ac:c4:b7: 14:df:c6:51:05:87:9a:19:ee:32:63:03:91:f1:33: 3e:72:60:c8:dc:1c:90:8c:e7:62:c1:3d:c4:6d:81: 90:40:92:e5:06:98:20:6c:93:19:1d:65:4d:6a:3b: 75:bd:c7:ad:6a:db:02:47:ce:d1:ac:e0:d0:40:19: 44:56:6c:c7:d3:e2:68:cb:2f:41:63:6b:9a:07:23: 88:c5:c2:89:af:59:89:1e:5d:e9:cb:59:c0:67:6c: be:da:91:09:95:64:94:66:8b:30:8b:7b:64:a9:e4: 8d:80:a7:30:7e:c9:5e:f7:5b:fc:48:bb:a6:64:c0: 31:15:29:58:14:da:97:a7:3a:57:fd:e7:f0:54:9b: d0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:48:F9:1A:CD:C8:A0:EF:15:AF:D5:5F:71:7C:C7:A5:17:78:2A:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf7aa6f5-b38e-3a63-ae83-e8310a60a1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2648:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:15:30:bb:ee:50:d4:9b:dd:cb:7e:3b:4c:78:54:7b:06:ec: ec:ec:00:68:6c:e7:06:c6:f3:b7:da:72:76:f4:2a:97:e5:4c: 80:4b:cd:05:8a:c6:38:48:4f:1b:c7:1a:b6:9c:eb:4c:16:f8: e4:e4:04:0e:25:d9:98:4f:d4:31:31:f2:fd:84:16:77:03:68: b6:58:b6:95:e1:0c:e9:d5:15:66:a1:03:27:94:77:98:e3:ee: 55:92:4b:32:4b:fb:cc:ec:44:ae:26:2b:39:35:d5:a3:85:58: 71:cc:45:d3:c4:82:00:21:c4:14:aa:e1:ad:ec:da:57:df:38: b7:de:09:cb:22:93:24:33:41:f5:4c:f6:91:27:16:4a:88:c7: db:5d:85:aa:83:39:1a:7f:89:62:56:e4:e0:40:d6:2b:e8:e2: a5:64:57:85:34:9c:c1:02:a1:da:24:63:14:9e:1d:a1:b7:2e: ad:c7:2d:d3:fa:61:8c:2b:8e:ab:30:09:6e:c7:c8:b9:6e:04: 2b:8d:95:a2:68:0f:aa:7a:dd:d7:8d:4f:27:d0:00:22:3b:a8: 4f:7c:dd:e1:ae:55:7a:f8:c4:04:28:37:ca:f2:7f:8d:89:2a: e6:a8:7e:56:17:50:73:55:d0:06:75:25:be:30:64:f3:48:0b: d6:3a:49:9b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuWLx01fycB+URWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjA3MzdmYzYtNzZjYi00OGMyLTkzYmMtNWM0NDU2MjRjOTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH+Aq5F4sLqJMgk9ZMDo4+6BmXsWwYhHOQtb Q7JV4HoAqCX/UxR8lpr14l0t71CML2plFqbTddL0sgCcxp26GM6OyY6G5A6xaGNT GlqAaOq/rjevf5BbbZ6+Z6aR/GuUha0T4xixnMX5YIoIzcWAgC7zmvysxLcU38ZR BYeaGe4yYwOR8TM+cmDI3ByQjOdiwT3EbYGQQJLlBpggbJMZHWVNajt1vcetatsC R87RrODQQBlEVmzH0+Joyy9BY2uaByOIxcKJr1mJHl3py1nAZ2y+2pEJlWSUZosw i3tkqeSNgKcwfsle91v8SLumZMAxFSlYFNqXpzpX/efwVJvQvQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFBpI+RrNyKDvFa/VX3F8x6UXeCpZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY3YWE2ZjUtYjM4ZS0z YTYzLWFlODMtZTgzMTBhNjBhMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMmSMAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAEhUwu+5Q1Jvdy347THhUewbs7OwAaGznBsbzt9pydvQql+VMgEvN BYrGOEhPG8catpzrTBb45OQEDiXZmE/UMTHy/YQWdwNotli2leEM6dUVZqEDJ5R3 mOPuVZJLMkv7zOxEriYrOTXVo4VYccxF08SCACHEFKrhrezaV984t94JyyKTJDNB 9Uz2kScWSojH212FqoM5Gn+JYlbk4EDWK+jipWRXhTScwQKh2iRjFJ4dobcurcct 0/phjCuOqzAJbsfIuW4EK42VomgPqnrd141PJ9AAIjuoT3zd4a5VevjEBCg3yvJ/ jYkq5qh+VhdQc1XQBnUlvjBk80gL1jpJmw== -----END CERTIFICATE-----Generated at Sun Mar 1 18:28:23 2026 by rpki-client