$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfda8eaa-c675-3f7f-a543-4e82299d3b47.roa File: bfda8eaa-c675-3f7f-a543-4e82299d3b47.roa (raw, json) Hash identifier: hhCWCA9zCWQ6MEpiF1IyMO769zN82/MFTOJSjn9mmb8= Subject key identifier: 1F:6A:1C:A0:C5:55:8B:7B:B7:B9:1C:A1:67:EB:19:4E:BB:5D:66:CF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE5A960033D92C84AAB0DB00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfda8eaa-c675-3f7f-a543-4e82299d3b47.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 2603:2085:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5a:96:00:33:d9:2c:84:aa:b0:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=89ef9617-943d-4229-a755-401598950496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:47:0a:55:71:51:ff:fd:37:13:d5:64:c6:fa: 7a:60:1f:00:92:c1:87:b3:e5:22:bb:b3:53:62:59: 3b:ff:93:7f:41:d9:90:4d:9f:dd:31:79:21:3f:df: f3:97:0c:ab:d9:e8:76:c7:a2:b4:93:03:6d:b2:ca: af:60:09:ba:5c:91:7a:62:c9:9a:e4:bf:28:70:9a: 77:f2:27:59:ea:3c:04:07:20:94:d6:aa:af:b3:3b: 5f:a7:18:24:e7:44:06:c3:1f:34:2c:91:c3:f3:38: 48:e0:82:62:09:78:c4:75:84:1f:44:a9:42:77:c9: 5b:55:39:67:40:bc:94:af:7a:51:a3:f4:9a:cb:12: 53:ff:ef:ab:a3:11:1b:32:2d:ad:f5:70:96:e9:04: 45:82:f1:7e:cf:f8:71:eb:ab:f7:7b:44:97:36:4d: bb:86:b9:a6:27:d9:86:62:0c:f9:37:d9:98:ab:56: b6:78:e8:21:d0:22:06:8c:5e:5d:37:2e:93:72:5e: a3:8d:43:9c:11:6c:1e:f5:93:e0:3b:c7:73:07:1d: f9:08:c9:ca:e6:d9:6a:b5:71:87:75:da:ef:20:7e: be:ef:4d:bc:ad:4e:b6:10:d2:eb:c6:6c:58:85:91: 12:16:f9:70:ed:46:e4:eb:ba:ef:dd:e2:83:0e:48: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:6A:1C:A0:C5:55:8B:7B:B7:B9:1C:A1:67:EB:19:4E:BB:5D:66:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfda8eaa-c675-3f7f-a543-4e82299d3b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:2085:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:af:34:b8:a8:d8:a9:c0:36:d1:a3:28:f7:aa:47:eb:71:f3: 05:1d:7f:cd:7d:7a:2f:fc:e0:7a:0c:ff:67:10:7a:aa:8e:91: 7f:85:3f:3e:1f:de:7a:b7:7a:df:af:e9:a3:40:09:ca:12:78: d9:53:17:74:39:00:57:25:9c:22:e2:2b:62:a8:b5:dc:46:56: 6f:19:bb:76:7f:68:89:bd:20:c7:18:66:06:e8:04:8e:97:f6: 06:c7:09:c6:f7:39:04:27:bb:11:54:d4:0d:0e:91:fe:f9:ac: 85:95:44:1d:a3:6e:76:f2:4f:69:64:4e:49:9b:cc:80:be:8d: 1f:d9:94:31:24:82:88:fa:f2:d4:4e:ff:dc:a2:85:7c:6a:e3: f3:bf:7e:aa:33:81:d6:1a:f2:9a:29:51:01:97:4e:d6:aa:38: db:83:24:42:36:84:14:c3:d5:6e:36:df:fc:1d:e9:ad:5b:29: 48:02:7f:9c:8a:30:ba:2e:03:1e:8d:7b:5a:90:b7:80:c0:86: 4b:14:16:1b:65:1f:27:15:01:61:83:8d:a4:7f:f4:31:6d:6a: 0d:70:51:95:cb:88:fd:90:cc:f7:78:65:cf:da:ee:b7:6c:71: d9:33:a3:6c:6c:bc:89:e2:7e:3d:8e:11:67:c0:0e:2e:80:66: 31:b4:57:26 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuWpYAM9kshKqw2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODllZjk2MTctOTQzZC00MjI5LWE3NTUtNDAxNTk4OTUwNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEcKVXFR//03E9Vkxvp6YB8AksGHs+Uiu7NT Ylk7/5N/QdmQTZ/dMXkhP9/zlwyr2eh2x6K0kwNtssqvYAm6XJF6Ysma5L8ocJp3 8idZ6jwEByCU1qqvsztfpxgk50QGwx80LJHD8zhI4IJiCXjEdYQfRKlCd8lbVTln QLyUr3pRo/SayxJT/++roxEbMi2t9XCW6QRFgvF+z/hx66v3e0SXNk27hrmmJ9mG Ygz5N9mYq1a2eOgh0CIGjF5dNy6Tcl6jjUOcEWwe9ZPgO8dzBx35CMnK5tlqtXGH ddrvIH6+7028rU62ENLrxmxYhZESFvlw7Ubk67rv3eKDDkgLJwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFB9qHKDFVYt7t7kcoWfrGU67XWbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZkYThlYWEtYzY3NS0z ZjdmLWE1NDMtNGU4MjI5OWQzYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgMghUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAKa80uKjYqcA20aMo96pH63HzBR1/zX16L/zgegz/ZxB6qo6Rf4U/ Ph/eerd636/po0AJyhJ42VMXdDkAVyWcIuIrYqi13EZWbxm7dn9oib0gxxhmBugE jpf2BscJxvc5BCe7EVTUDQ6R/vmshZVEHaNudvJPaWROSZvMgL6NH9mUMSSCiPry 1E7/3KKFfGrj879+qjOB1hrymilRAZdO1qo424MkQjaEFMPVbjbf/B3prVspSAJ/ nIowui4DHo17WpC3gMCGSxQWG2UfJxUBYYONpH/0MW1qDXBRlcuI/ZDM93hlz9ru t2xx2TOjbGy8ieJ+PY4RZ8AOLoBmMbRXJg== -----END CERTIFICATE-----Generated at Sun Mar 1 18:28:32 2026 by rpki-client