$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fff549fc-752a-3818-a072-8852fba1a3e7.roa File: fff549fc-752a-3818-a072-8852fba1a3e7.roa (raw, json) Hash identifier: Owj5szDe76BxRdGMbKze0YFwE7emQZj0GT2K4J/wmn8= Subject key identifier: A3:D7:B7:E9:FE:E0:58:FE:C8:84:63:70:2D:18:40:D2:CC:ED:A4:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CAE57AAF2884B433E3FFB9580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fff549fc-752a-3818-a072-8852fba1a3e7.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 33659 IP address blocks: 2601:84:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:aa:f2:88:4b:43:3e:3f:fb:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=da994baf-a428-4a68-9cfd-0bfe72285838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:67:1d:17:19:7d:b6:cf:7a:3c:34:61:cc:f7: 73:50:d2:cd:26:41:72:a7:8e:ce:35:14:31:8f:ca: 28:76:cb:1f:e0:0d:49:41:8e:06:f2:c8:5d:04:1c: 24:65:e2:19:ec:ea:b9:06:a5:75:43:7b:35:ac:6e: 7a:d8:b9:49:3f:8d:2c:33:60:e6:39:d5:ad:13:52: 95:50:0c:04:ae:a0:ce:25:5b:14:0f:35:54:95:75: a7:56:2d:4d:3a:c9:49:ad:76:bb:b1:03:92:a0:21: 00:d8:93:9a:59:e8:b8:81:aa:7a:c9:8a:90:a9:ce: df:6f:d1:44:8b:5c:a2:c8:34:50:17:a9:4f:f9:cc: 56:ed:34:e8:7d:dc:94:09:b8:c5:e9:ff:04:5a:e1: 43:50:3e:f6:26:9d:b7:75:c5:dd:41:24:89:cc:c7: 92:07:4b:7f:dd:f0:a5:0c:8f:78:6c:28:4d:df:42: 1e:c0:65:2c:2b:32:e0:33:ca:ec:8c:5f:72:06:b3: e7:f7:c5:62:58:40:ee:33:1e:62:d6:98:a3:6c:f0: 63:35:9b:aa:1b:fd:b8:11:fd:9e:39:46:63:0e:54: a6:e1:fb:39:eb:b9:5e:82:09:ea:0b:36:7b:07:9d: 04:dc:ea:7a:03:ac:08:87:a5:8e:24:65:18:39:70: 43:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D7:B7:E9:FE:E0:58:FE:C8:84:63:70:2D:18:40:D2:CC:ED:A4:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fff549fc-752a-3818-a072-8852fba1a3e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:84:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:56:e6:45:8c:9e:21:21:c2:03:9b:22:84:7f:2f:0d:87:5c: 14:f4:57:08:86:63:e6:ab:2d:3a:eb:40:72:d1:00:26:ce:82: 20:31:f1:15:59:0e:17:5c:7a:69:df:85:62:e5:36:49:70:1b: 7f:57:e6:5c:9e:38:69:1b:58:8b:4d:d3:db:0b:50:ad:7e:1d: 2c:f0:5d:a1:66:91:60:f5:6a:d5:dc:60:38:2b:92:f1:8f:a6: 36:bc:8e:0a:e0:f8:2c:c9:5e:ad:42:fd:b0:a6:c5:5a:8a:29: bf:66:69:8d:f7:98:ee:2b:25:2c:f0:f7:53:3a:0d:dd:94:e4: 7a:2c:12:27:cd:31:1c:f3:37:07:92:de:aa:4b:87:67:ab:8f: 22:5d:15:ef:66:a5:c1:c4:43:11:4d:4e:7c:52:65:70:0a:fe: a5:05:a0:a7:a6:bc:81:4c:e9:39:ed:43:7a:64:50:79:0a:14: 3e:3f:68:05:56:f2:c3:c5:da:f4:c9:ec:5f:00:2c:ac:1d:85: e1:27:53:86:96:45:12:9d:48:7c:11:d8:76:36:b8:51:0c:0c: 9b:61:29:6f:d4:ed:f8:7c:48:28:24:78:b8:ea:16:75:aa:2b: 63:bc:6c:e3:d4:78:51:12:fd:c8:b6:42:f6:a4:ed:6a:ce:6b: 63:64:eb:04 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuV6ryiEtDPj/7lYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZGE5OTRiYWYtYTQyOC00YTY4LTljZmQtMGJmZTcyMjg1ODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2cdFxl9ts96PDRhzPdzUNLNJkFyp47ONRQx j8oodssf4A1JQY4G8shdBBwkZeIZ7Oq5BqV1Q3s1rG562LlJP40sM2DmOdWtE1KV UAwErqDOJVsUDzVUlXWnVi1NOslJrXa7sQOSoCEA2JOaWei4gap6yYqQqc7fb9FE i1yiyDRQF6lP+cxW7TTofdyUCbjF6f8EWuFDUD72Jp23dcXdQSSJzMeSB0t/3fCl DI94bChN30IewGUsKzLgM8rsjF9yBrPn98ViWEDuMx5i1pijbPBjNZuqG/24Ef2e OUZjDlSm4fs567leggnqCzZ7B50E3Op6A6wIh6WOJGUYOXBDsQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFKPXt+n+4Fj+yIRjcC0YQNLM7aRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmZmNTQ5ZmMtNzUyYS0z ODE4LWEwNzItODg1MmZiYTFhM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAhIAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAR1bmRYyeISHCA5sihH8vDYdcFPRXCIZj5qstOutActEAJs6CIDHx FVkOF1x6ad+FYuU2SXAbf1fmXJ44aRtYi03T2wtQrX4dLPBdoWaRYPVq1dxgOCuS 8Y+mNryOCuD4LMlerUL9sKbFWoopv2ZpjfeY7islLPD3UzoN3ZTkeiwSJ80xHPM3 B5LeqkuHZ6uPIl0V72alwcRDEU1OfFJlcAr+pQWgp6a8gUzpOe1DemRQeQoUPj9o BVbyw8Xa9MnsXwAsrB2F4SdThpZFEp1IfBHYdja4UQwMm2Epb9Tt+HxIKCR4uOoW daorY7xs49R4URL9yLZC9qTtas5rY2TrBA== -----END CERTIFICATE-----Generated at Mon Mar 2 02:53:20 2026 by rpki-client