$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cddf7f78-b844-3101-b25e-04a2714b6f1b.roa File: cddf7f78-b844-3101-b25e-04a2714b6f1b.roa (raw, json) Hash identifier: 2MPe62dcOpUTVnr/OnuHCLLlXYjad26pIa0JWAZ1OLg= Subject key identifier: 7B:44:33:3A:1E:5E:95:37:F1:82:BE:4E:99:1C:FF:64:F5:83:F0:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE58BD1177DFD9E36F457614 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cddf7f78-b844-3101-b25e-04a2714b6f1b.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33651 IP address blocks: 2603:3024:1e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:58:bd:11:77:df:d9:e3:6f:45:76:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=92e3838d-5c99-4d5d-a288-5aa42703a9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:54:96:24:fe:50:a6:82:7b:90:9e:7b:a1: 50:ad:15:82:2c:1f:5f:7f:e6:16:fb:d4:ea:7c:90: af:7d:c7:be:df:4c:92:05:5a:e0:07:a4:fb:b3:ff: 19:f3:59:25:a3:ce:68:95:2d:f9:6f:7f:a1:2a:75: 2f:12:ba:ba:3a:50:2d:12:df:02:19:e7:48:f4:16: 58:2e:98:38:3e:07:53:6c:f4:3e:d7:fc:eb:c4:0f: da:2e:fb:42:d7:14:44:00:5a:c2:2e:be:83:c3:e6: 8b:cb:f1:fa:62:0c:13:47:14:d4:21:12:9c:b8:73: a5:ca:4c:90:82:9f:0e:b6:e4:7c:22:7a:17:93:2e: c7:f0:bd:a3:ef:2c:02:b9:e5:8d:4c:48:4a:26:d2: 81:29:89:c0:24:e0:82:68:57:1f:dc:eb:1d:d1:59: 52:29:e5:f2:22:b3:b9:71:ab:02:13:30:b8:5d:5e: 86:90:81:68:94:2d:43:50:22:9d:a4:a8:30:a5:c1: 33:f1:39:7f:d5:94:92:fd:a8:42:97:60:f1:cf:ee: e7:4a:d7:e4:9a:15:b4:d3:6c:6f:43:f0:e9:37:bf: d9:37:e8:ff:b6:0d:c6:37:8a:4f:ff:bf:34:2f:ef: cd:5c:9a:27:a4:3f:04:51:21:ea:28:71:55:b7:1d: 06:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:44:33:3A:1E:5E:95:37:F1:82:BE:4E:99:1C:FF:64:F5:83:F0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cddf7f78-b844-3101-b25e-04a2714b6f1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3024:1e00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:75:53:a0:30:d2:e3:af:a1:23:78:0d:a8:bb:5a:36:ab:af: 2a:89:2b:2e:8e:b6:75:a8:4b:02:9f:fc:16:58:12:99:80:8c: 20:4f:44:a9:c4:c9:a2:06:66:d1:70:17:2b:0c:6d:a4:02:af: 18:cb:fa:0c:c6:a9:f9:f6:6a:90:6b:6e:1a:af:53:e4:7c:41: 66:60:24:df:1f:ce:42:72:e9:c1:55:19:7c:f2:eb:b1:d0:c6: b5:4d:c3:86:bd:0c:0c:0b:c0:70:39:a7:5f:22:ed:b7:7b:ab: 18:3e:86:ef:7b:56:2a:1e:5f:ce:0f:1c:ba:e2:ad:dc:0a:dd: ed:ad:ef:1b:67:f9:92:7b:60:da:6a:82:5e:df:e7:d3:5f:e2: 30:42:e7:0a:bb:f5:37:a7:63:35:7d:32:5c:3d:d3:62:1d:f4: a1:c6:ff:c4:65:0c:b2:17:af:6b:7f:45:85:b2:b0:bb:d0:54: 28:88:45:96:19:dc:58:5c:93:82:f9:3b:db:f1:72:b6:e6:9f: 7f:e9:c7:2b:33:98:bf:88:39:97:08:5c:b7:40:8a:db:3a:49: 2c:5a:d4:66:b5:a5:d6:6b:34:c9:73:41:8f:6e:e2:30:5e:f6: b9:cc:09:e8:6f:8c:68:db:4e:cd:29:08:5d:0a:3a:24:a5:82: 52:f3:54:28 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuWL0Rd9/Z429FdhQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OTJlMzgzOGQtNWM5OS00ZDVkLWEyODgtNWFhNDI3MDNhOWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoypUliT+UKaCe5Cee6FQrRWCLB9ff+YW+9Tq fJCvfce+30ySBVrgB6T7s/8Z81klo85olS35b3+hKnUvErq6OlAtEt8CGedI9BZY Lpg4PgdTbPQ+1/zrxA/aLvtC1xREAFrCLr6Dw+aLy/H6YgwTRxTUIRKcuHOlykyQ gp8OtuR8InoXky7H8L2j7ywCueWNTEhKJtKBKYnAJOCCaFcf3Osd0VlSKeXyIrO5 casCEzC4XV6GkIFolC1DUCKdpKgwpcEz8Tl/1ZSS/ahCl2Dxz+7nStfkmhW002xv Q/DpN7/ZN+j/tg3GN4pP/780L+/NXJonpD8EUSHqKHFVtx0GzwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFHtEMzoeXpU38YK+Tpkc/2T1g/DGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2RkZjdmNzgtYjg0NC0z MTAxLWIyNWUtMDRhMjcxNGI2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwJB4w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAuHVToDDS46+hI3gNqLtaNquvKokrLo62dahLAp/8FlgSmYCMIE9E qcTJogZm0XAXKwxtpAKvGMv6DMap+fZqkGtuGq9T5HxBZmAk3x/OQnLpwVUZfPLr sdDGtU3Dhr0MDAvAcDmnXyLtt3urGD6G73tWKh5fzg8cuuKt3Ard7a3vG2f5kntg 2mqCXt/n01/iMELnCrv1N6djNX0yXD3TYh30ocb/xGUMsheva39FhbKwu9BUKIhF lhncWFyTgvk72/Fytuaff+nHKzOYv4g5lwhct0CK2zpJLFrUZrWl1ms0yXNBj27i MF72ucwJ6G+MaNtOzSkIXQo6JKWCUvNUKA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:40:47 2026 by rpki-client