$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f57ef9a0-f393-384a-9f9a-af35f69cfa29.roa File: f57ef9a0-f393-384a-9f9a-af35f69cfa29.roa (raw, json) Hash identifier: SX55+p37nvE8+hGIkhoiuNZ+m58vpVFBd+NsYQ5sx5s= Subject key identifier: 29:02:68:01:5C:64:8F:21:B9:9F:DA:B6:6B:26:09:A8:3E:BD:F1:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57E4F78649AFEE67CBA300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f57ef9a0-f393-384a-9f9a-af35f69cfa29.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33287 IP address blocks: 2601:4a::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:e4:f7:86:49:af:ee:67:cb:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=af27d3f3-7d9e-4cdc-8630-c10112f38885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:30:a4:0c:e5:db:ca:53:da:a9:ca:9e:0f: 9e:d7:1c:03:fb:07:05:59:a9:d9:78:5c:21:2e:53: 63:4a:38:eb:34:de:ec:14:6c:3f:68:35:98:f7:d2: 2d:1e:fa:be:b5:b9:26:fa:95:5a:d9:33:05:56:2f: 31:4a:6e:50:88:59:22:2f:9f:0c:af:98:ab:ca:93: a7:09:91:63:9f:68:9e:9f:40:15:08:3d:29:e1:c4: b2:de:a6:b3:36:b9:0d:75:f7:3a:9e:38:2c:40:58: bb:94:c0:e2:c4:08:2d:ca:b0:d7:60:4f:a4:d0:6e: 54:d4:e5:41:31:58:95:69:b8:45:96:c1:12:f4:bd: e2:a8:23:df:a4:aa:49:1a:25:01:b3:fd:17:a3:e6: 02:f2:11:b6:98:2f:9e:67:b9:df:29:c3:60:9c:18: 67:1c:eb:31:6f:d4:e7:f5:b9:9f:c0:58:e8:e6:95: 65:ab:a9:d3:8d:06:8f:20:cb:6d:6b:33:c3:6e:51: 4f:82:8f:b2:e5:3f:77:33:5c:69:8a:d1:17:15:62: db:4b:1e:12:d8:2c:0a:10:69:ee:bc:83:38:ef:45: c5:d4:71:f3:cb:22:32:3f:1d:e9:07:37:44:ae:36: 8d:b3:44:07:40:00:af:0e:8a:46:76:bd:5e:d0:71: 32:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:02:68:01:5C:64:8F:21:B9:9F:DA:B6:6B:26:09:A8:3E:BD:F1:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f57ef9a0-f393-384a-9f9a-af35f69cfa29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:4a::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:3a:29:18:8e:91:40:3b:25:34:4e:29:79:af:f5:6c:87:c5: 11:c4:30:28:ac:1d:1e:98:89:f1:be:a5:48:fc:5f:a1:71:d8: c5:fb:72:01:8b:cf:1f:a0:be:00:e8:66:1e:d5:a0:89:7e:5e: d8:cf:f2:b6:84:81:a2:35:ce:ba:35:8c:65:48:3b:ac:a2:77: d7:90:9a:5d:34:be:5c:4b:a0:11:02:72:55:ef:3d:3e:25:45: 1d:ec:e3:b0:54:90:79:20:20:d7:ec:9f:c7:12:20:f7:f5:2e: f0:28:94:fc:20:b4:b0:c8:93:26:5c:4d:58:21:03:ba:f5:86: c7:e7:f4:f8:9f:84:0d:4b:f5:fa:86:26:77:92:ca:d8:cd:86: 1c:72:fa:a8:fc:4b:38:66:d5:b8:9d:06:0d:ce:c5:d3:28:a4: b6:c5:10:fc:d7:06:60:82:1e:60:53:a4:de:d1:a6:85:fc:01: 1a:aa:9b:81:6b:1c:d5:02:94:69:5c:62:5d:1a:1d:37:17:71: 48:60:e7:22:dc:22:23:c1:61:af:d6:dd:6a:84:dd:60:0c:71: 5c:35:ac:99:61:98:6a:a5:eb:21:eb:8c:12:8a:5c:a3:31:ed: 0d:2e:61:8c:15:d6:4b:3b:20:d4:7d:ce:8e:76:ce:63:5a:86: cc:96:ce:62 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuV+T3hkmv7mfLowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YWYyN2QzZjMtN2Q5ZS00Y2RjLTg2MzAtYzEwMTEyZjM4ODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgcwpAzl28pT2qnKng+e1xwD+wcFWanZeFwh LlNjSjjrNN7sFGw/aDWY99ItHvq+tbkm+pVa2TMFVi8xSm5QiFkiL58Mr5irypOn CZFjn2ien0AVCD0p4cSy3qazNrkNdfc6njgsQFi7lMDixAgtyrDXYE+k0G5U1OVB MViVabhFlsES9L3iqCPfpKpJGiUBs/0Xo+YC8hG2mC+eZ7nfKcNgnBhnHOsxb9Tn 9bmfwFjo5pVlq6nTjQaPIMttazPDblFPgo+y5T93M1xpitEXFWLbSx4S2CwKEGnu vIM470XF1HHzyyIyPx3pBzdErjaNs0QHQACvDopGdr1e0HEyrQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFCkCaAFcZI8huZ/atmsmCag+vfFaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjU3ZWY5YTAtZjM5My0z ODRhLTlmOWEtYWYzNWY2OWNmYTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEASgAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEACTopGI6RQDslNE4pea/1bIfFEcQwKKwdHpiJ8b6lSPxfoXHYxfty AYvPH6C+AOhmHtWgiX5e2M/ytoSBojXOujWMZUg7rKJ315CaXTS+XEugEQJyVe89 PiVFHezjsFSQeSAg1+yfxxIg9/Uu8CiU/CC0sMiTJlxNWCEDuvWGx+f0+J+EDUv1 +oYmd5LK2M2GHHL6qPxLOGbVuJ0GDc7F0yiktsUQ/NcGYIIeYFOk3tGmhfwBGqqb gWsc1QKUaVxiXRodNxdxSGDnItwiI8Fhr9bdaoTdYAxxXDWsmWGYaqXrIeuMEopc ozHtDS5hjBXWSzsg1H3OjnbOY1qGzJbOYg== -----END CERTIFICATE-----Generated at Sun Mar 1 19:08:51 2026 by rpki-client