$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f25167ad-d6e3-31d7-a6c8-216485abd9f5.roa File: f25167ad-d6e3-31d7-a6c8-216485abd9f5.roa (raw, json) Hash identifier: aGPqi0PEfmErQMu8BpTr3/CQ0YwzXIWp43H4vlyok0c= Subject key identifier: 86:FB:72:FA:8A:59:00:00:04:57:09:A4:B8:CA:46:34:5A:0E:7D:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57FC7484B18817045F4FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f25167ad-d6e3-31d7-a6c8-216485abd9f5.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33491 IP address blocks: 2603:300f:f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:fc:74:84:b1:88:17:04:5f:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=f8dc21c2-034c-48f6-aa93-5de190204f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cb:c7:0a:91:7b:98:b4:62:20:81:49:8f:88: bb:f0:98:92:cc:d3:25:3e:26:ef:09:55:5d:de:4b: c9:db:c4:4a:1f:f4:99:52:69:50:3e:38:fe:92:a4: 52:dd:76:c4:06:d2:f6:ef:62:33:54:95:33:e7:fb: f4:d4:19:92:34:10:0d:32:2d:1b:90:48:e5:d0:0e: 7a:29:fe:7d:a0:25:fe:39:e1:1e:fe:00:92:46:d9: 30:87:c9:73:4b:f6:fa:bd:bb:b8:92:fc:91:e7:6e: cf:c2:97:4f:49:3f:a4:80:ce:5f:0a:1f:bc:98:7e: 38:29:22:79:b5:13:74:cd:f9:68:b2:a1:0a:4d:e3: a2:3a:01:46:0c:a0:ce:26:81:7f:02:aa:52:b1:9d: 03:c0:e3:01:de:df:7d:71:3e:7a:05:9c:20:25:36: a7:19:1c:b7:93:e7:55:21:87:0d:fe:1a:bf:39:51: 3d:15:bb:f7:4e:a6:73:bf:df:44:4e:a2:62:f9:50: 69:56:35:ec:22:ef:ae:23:88:d6:6f:bd:10:28:f4: 25:26:11:55:33:71:ce:f2:87:86:34:4e:e3:8f:f6: 36:00:99:07:7a:a9:68:e3:72:a1:f0:9f:6d:bc:9d: 22:7e:2f:08:45:ec:07:1a:20:49:16:1c:eb:03:a5: c3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FB:72:FA:8A:59:00:00:04:57:09:A4:B8:CA:46:34:5A:0E:7D:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f25167ad-d6e3-31d7-a6c8-216485abd9f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:300f:f00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:cb:e9:18:be:b6:43:1b:b4:73:a5:ba:20:8c:48:b0:df:85: 12:0f:14:8b:35:c3:7b:ef:88:d6:e6:fa:6d:f8:9f:7b:5d:29: ec:b0:fb:c3:68:6f:e3:9d:98:a9:f4:98:b1:aa:21:21:5d:f7: b6:69:8f:bc:91:dc:f3:38:3d:a1:88:d8:df:f9:d9:c7:6b:8b: 09:04:ef:a0:58:c6:41:7e:59:1d:6a:b1:76:88:da:ac:72:36: c6:3f:2c:e2:19:5d:f3:3d:45:17:ab:12:2a:e8:3c:59:c8:5c: cd:fc:98:83:38:0f:1e:78:36:e2:30:c9:20:e0:af:85:2a:e4: d8:5a:59:d0:8d:21:fe:77:d4:71:5d:ff:62:1e:ba:cd:2b:27: 8b:7d:27:32:92:82:20:10:27:99:c9:4e:b7:d2:ac:29:41:1d: 3a:6b:76:c3:4a:3b:7d:9e:64:46:11:ea:77:cd:83:f3:be:69: cb:c9:c4:8c:8e:f2:26:5e:a9:19:ea:02:7f:03:2e:bf:0f:20: 23:43:cb:39:a9:be:1d:18:29:00:48:9f:7b:36:30:45:40:50: 97:2f:59:30:55:9e:76:8b:cb:17:30:6b:ae:5e:60:74:21:99: d5:b9:93:d7:1d:72:70:93:d3:8f:fd:c1:ef:9b:f8:98:14:ba: f5:27:ce:38 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuV/x0hLGIFwRfT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZjhkYzIxYzItMDM0Yy00OGY2LWFhOTMtNWRlMTkwMjA0ZjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8vHCpF7mLRiIIFJj4i78JiSzNMlPibvCVVd 3kvJ28RKH/SZUmlQPjj+kqRS3XbEBtL272IzVJUz5/v01BmSNBANMi0bkEjl0A56 Kf59oCX+OeEe/gCSRtkwh8lzS/b6vbu4kvyR527PwpdPST+kgM5fCh+8mH44KSJ5 tRN0zflosqEKTeOiOgFGDKDOJoF/AqpSsZ0DwOMB3t99cT56BZwgJTanGRy3k+dV IYcN/hq/OVE9Fbv3TqZzv99ETqJi+VBpVjXsIu+uI4jWb70QKPQlJhFVM3HO8oeG NE7jj/Y2AJkHeqlo43Kh8J9tvJ0ifi8IRewHGiBJFhzrA6XDLQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFIb7cvqKWQAABFcJpLjKRjRaDn3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjI1MTY3YWQtZDZlMy0z MWQ3LWE2YzgtMjE2NDg1YWJkOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDw8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAGsvpGL62Qxu0c6W6IIxIsN+FEg8UizXDe++I1ub6bfife10p7LD7 w2hv452YqfSYsaohIV33tmmPvJHc8zg9oYjY3/nZx2uLCQTvoFjGQX5ZHWqxdoja rHI2xj8s4hld8z1FF6sSKug8WchczfyYgzgPHng24jDJIOCvhSrk2FpZ0I0h/nfU cV3/Yh66zSsni30nMpKCIBAnmclOt9KsKUEdOmt2w0o7fZ5kRhHqd82D875py8nE jI7yJl6pGeoCfwMuvw8gI0PLOam+HRgpAEifezYwRUBQly9ZMFWedovLFzBrrl5g dCGZ1bmT1x1ycJPTj/3B75v4mBS69SfOOA== -----END CERTIFICATE-----Generated at Sun Mar 1 19:03:04 2026 by rpki-client