$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd435d6d-e613-3789-8969-ce5e1e5fab93.roa File: dd435d6d-e613-3789-8969-ce5e1e5fab93.roa (raw, json) Hash identifier: NpHqTm/5pOQIaXUXirRm8cj98GNVaYxcKCDL31loq0Q= Subject key identifier: 46:C9:BA:57:35:F5:78:73:96:C8:1B:B8:D1:DE:E7:29:4A:86:63:30 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BA541F769E85839C5B5840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd435d6d-e613-3789-8969-ce5e1e5fab93.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33490 IP address blocks: 2603:3004::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:54:1f:76:9e:85:83:9c:5b:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=bacb1b42-1a6c-4a3a-8a1f-8bbe7a2433c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5c:b1:c1:9d:9f:64:3c:65:70:9c:6c:9f:0a: 37:1c:af:76:ef:d0:49:f8:be:74:54:c6:00:68:fb: b8:0e:b7:85:c2:d7:59:45:ff:d2:cf:fb:a5:38:b8: 7a:e5:56:dc:28:fe:8a:47:70:36:cb:7f:5e:39:e0: 36:2d:66:e4:25:40:be:bc:53:87:86:9d:2e:5f:7f: d9:b3:81:a1:34:46:2e:7c:24:7a:84:29:8f:74:5f: cc:60:bf:cc:ea:3f:71:53:94:fa:a5:9c:e4:45:99: 19:f7:c2:d9:4e:a7:14:ae:07:46:15:99:e4:54:e2: 6c:64:8d:86:04:02:02:27:8a:ba:41:59:5f:ed:39: 8a:05:17:fc:9c:a5:dc:51:2c:fb:65:e2:67:55:df: 91:f6:5e:34:75:cc:2a:3d:1a:9b:41:a7:77:cd:51: 3d:7a:e4:4b:a3:57:e9:43:9d:e0:10:9d:53:3f:49: 34:74:31:bf:e1:81:44:b8:59:d9:ec:b7:e7:6e:08: be:1e:05:e7:9b:a3:ce:4e:93:76:b8:1a:99:67:07: b9:7c:b0:7f:75:63:f8:9b:7e:b5:b6:82:11:e9:1c: a4:db:e1:a9:95:99:44:c7:de:9e:91:13:b1:b9:5a: 89:d8:5a:6a:39:45:c2:4c:80:55:57:d8:23:b9:7e: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C9:BA:57:35:F5:78:73:96:C8:1B:B8:D1:DE:E7:29:4A:86:63:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd435d6d-e613-3789-8969-ce5e1e5fab93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3004::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2b:57:f4:5a:7d:b9:78:05:aa:73:84:ec:47:9f:1a:a5:4c: ab:cb:61:79:1e:d1:23:b7:6e:ce:58:ca:aa:d9:a3:f9:82:81: 13:13:1a:d1:b2:ca:bb:bb:9a:f9:14:68:41:84:f3:8a:1c:76: f5:ba:54:15:fc:6d:ab:04:f8:ec:f7:cf:82:d2:2c:e2:e0:e1: 20:49:b8:60:c1:f9:66:60:aa:fa:d0:5f:9f:d8:f5:57:94:98: 2a:55:e7:ce:41:84:1b:ac:65:61:55:99:e9:7e:a5:98:2b:ef: fe:e5:a7:fe:6a:28:7b:b5:6a:98:fb:cd:d4:36:f6:b7:af:3e: 26:82:11:3d:81:94:3b:a2:ad:e8:a7:f9:c1:cf:b5:89:a6:d2: d3:a2:bd:b9:37:11:01:3c:ad:9a:2e:e7:56:94:9f:63:3f:20: 08:39:de:05:f2:07:fd:61:3d:49:10:23:75:17:d2:eb:81:4e: a4:67:a3:7d:1a:47:5d:87:d9:5c:41:76:21:73:09:be:37:f1: 25:ba:85:fe:36:7d:60:bb:92:e9:b9:4f:a3:60:9a:17:dd:dd: da:14:aa:85:1b:f5:f1:db:7d:bd:ae:bf:4f:9d:71:b9:37:f4: 82:0e:05:00:f7:aa:9e:d9:06:80:72:b3:84:11:36:06:f2:74: c3:ee:9d:69 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1VulQfdp6Fg5xbWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YmFjYjFiNDItMWE2Yy00YTNhLThhMWYtOGJiZTdhMjQzM2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1yxwZ2fZDxlcJxsnwo3HK9279BJ+L50VMYA aPu4DreFwtdZRf/Sz/ulOLh65VbcKP6KR3A2y39eOeA2LWbkJUC+vFOHhp0uX3/Z s4GhNEYufCR6hCmPdF/MYL/M6j9xU5T6pZzkRZkZ98LZTqcUrgdGFZnkVOJsZI2G BAICJ4q6QVlf7TmKBRf8nKXcUSz7ZeJnVd+R9l40dcwqPRqbQad3zVE9euRLo1fp Q53gEJ1TP0k0dDG/4YFEuFnZ7Lfnbgi+HgXnm6POTpN2uBqZZwe5fLB/dWP4m361 toIR6Ryk2+GplZlEx96ekROxuVqJ2FpqOUXCTIBVV9gjuX6dzQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFEbJulc19XhzlsgbuNHe5ylKhmMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQ0MzVkNmQtZTYxMy0z Nzg5LTg5NjktY2U1ZTFlNWZhYjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwBAAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAgCtX9Fp9uXgFqnOE7EefGqVMq8theR7RI7duzljKqtmj+YKBExMa 0bLKu7ua+RRoQYTzihx29bpUFfxtqwT47PfPgtIs4uDhIEm4YMH5ZmCq+tBfn9j1 V5SYKlXnzkGEG6xlYVWZ6X6lmCvv/uWn/mooe7VqmPvN1Db2t68+JoIRPYGUO6Kt 6Kf5wc+1iabS06K9uTcRATytmi7nVpSfYz8gCDneBfIH/WE9SRAjdRfS64FOpGej fRpHXYfZXEF2IXMJvjfxJbqF/jZ9YLuS6blPo2CaF93d2hSqhRv18dt9va6/T51x uTf0gg4FAPeqntkGgHKzhBE2BvJ0w+6daQ== -----END CERTIFICATE-----Generated at Fri Apr 17 12:58:30 2026 by rpki-client