$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e845d7a-934f-3476-9551-cae7de64daa8.roa File: 2e845d7a-934f-3476-9551-cae7de64daa8.roa (raw, json) Hash identifier: s2U0tdH/kdHSMd/fJbH9Qx0yPFxyAo99gpm1iukIC9s= Subject key identifier: 0D:80:ED:CA:6C:7E:40:2C:09:BE:6F:AE:6B:91:59:23:FC:1B:5A:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF5D9AA58C52849565F6EA8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e845d7a-934f-3476-9551-cae7de64daa8.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 2601:89:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:d9:aa:58:c5:28:49:56:5f:6e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=0bbf2bfb-11cb-412f-a6f1-31481e94bfba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c1:d2:04:8b:c6:1e:7c:fa:9c:a9:6c:ae:83: 11:fc:43:94:e9:b4:44:02:5e:3f:f1:8a:6f:03:93: 45:b6:a3:a9:aa:18:ca:a7:d9:7c:b4:a9:ad:08:1d: 83:87:61:c9:16:ed:57:fc:60:de:23:ba:cc:ac:37: b9:30:c8:3b:7a:e0:5c:14:b7:f0:6c:8d:d6:14:f9: 56:20:b1:ea:d1:8c:d3:ca:62:3d:ff:30:86:9b:50: 92:2f:bd:8e:f2:85:4b:e6:eb:14:b7:b7:7b:9a:7e: f9:99:5c:3b:54:3e:ee:07:ab:38:0d:fa:eb:9e:28: 9f:ad:2b:ce:a9:2f:49:73:58:29:fd:91:93:6d:d5: 51:ad:6a:9d:c3:5f:68:69:5f:e9:61:1f:0c:ca:0d: 93:98:0f:5f:1d:d9:e6:6a:37:e0:e1:8a:e9:18:ae: 6e:fe:72:f7:0f:4b:6a:b4:d3:66:9d:c5:d4:86:5e: 59:4a:26:08:26:30:27:85:53:b5:6c:c4:23:7e:db: 0a:67:dd:1a:b2:1e:e8:20:65:c0:0f:1d:ef:0e:15: 5e:58:70:17:ef:9b:66:95:45:f3:dc:b1:e4:1a:a8: a3:f4:61:5b:94:17:13:68:d3:4b:f8:63:ec:0e:57: d9:0e:32:d3:78:2a:ea:be:56:2c:81:91:9a:04:05: b4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:80:ED:CA:6C:7E:40:2C:09:BE:6F:AE:6B:91:59:23:FC:1B:5A:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e845d7a-934f-3476-9551-cae7de64daa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:89:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:21:f6:24:de:a3:98:ad:f7:62:65:8f:db:d1:33:30:69:4c: fb:03:41:70:e8:d0:85:66:f7:67:f7:f8:17:3d:b7:e8:5c:dc: 91:8e:a4:4d:65:41:19:8d:0b:90:2c:41:2e:38:29:57:d2:1d: d3:7f:fe:7c:20:b5:a3:5b:39:ee:65:90:1a:27:e5:82:9b:6e: ed:3b:fe:bf:e8:8d:35:91:56:2c:be:f7:4e:59:2d:66:c5:3f: 82:d3:3b:a2:5e:bd:40:ec:73:97:24:82:60:30:89:94:b5:c0: ed:71:69:ce:3a:09:30:e8:5a:01:6c:a6:d8:7e:e6:8d:91:6b: 3b:11:50:c3:db:e1:5a:b6:1a:8a:b2:51:04:d6:43:6a:d5:68: 83:7c:8c:fb:0e:2c:3d:1f:d0:5f:aa:25:c6:89:c9:87:ee:9f: c5:97:94:59:ff:66:6d:84:97:48:71:63:7f:4f:73:fe:67:34: ee:89:5c:6e:05:95:25:07:1c:d4:93:1f:23:de:bb:36:7a:ad: a7:bf:99:ea:61:9a:17:57:8c:41:98:6c:de:b3:b5:d1:fe:df: 3c:a0:4d:dd:8b:87:8f:f9:2e:65:ba:46:c6:18:42:53:a8:f9: 57:5c:64:f2:6c:eb:33:ef:68:d8:a4:54:65:9b:7b:ee:f4:a2: c7:13:69:32 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O9dmqWMUoSVZfbqgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MGJiZjJiZmItMTFjYi00MTJmLWE2ZjEtMzE0ODFlOTRiZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcHSBIvGHnz6nKlsroMR/EOU6bREAl4/8Ypv A5NFtqOpqhjKp9l8tKmtCB2Dh2HJFu1X/GDeI7rMrDe5MMg7euBcFLfwbI3WFPlW ILHq0YzTymI9/zCGm1CSL72O8oVL5usUt7d7mn75mVw7VD7uB6s4DfrrniifrSvO qS9Jc1gp/ZGTbdVRrWqdw19oaV/pYR8Myg2TmA9fHdnmajfg4YrpGK5u/nL3D0tq tNNmncXUhl5ZSiYIJjAnhVO1bMQjftsKZ90ash7oIGXADx3vDhVeWHAX75tmlUXz 3LHkGqij9GFblBcTaNNL+GPsDlfZDjLTeCrqvlYsgZGaBAW0DQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFA2A7cpsfkAsCb5vrmuRWSP8G1q/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU4NDVkN2EtOTM0Zi0z NDc2LTk1NTEtY2FlN2RlNjRkYWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAiUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAfCH2JN6jmK33YmWP29EzMGlM+wNBcOjQhWb3Z/f4Fz236FzckY6k TWVBGY0LkCxBLjgpV9Id03/+fCC1o1s57mWQGiflgptu7Tv+v+iNNZFWLL73Tlkt ZsU/gtM7ol69QOxzlySCYDCJlLXA7XFpzjoJMOhaAWym2H7mjZFrOxFQw9vhWrYa irJRBNZDatVog3yM+w4sPR/QX6olxonJh+6fxZeUWf9mbYSXSHFjf09z/mc07olc bgWVJQcc1JMfI967Nnqtp7+Z6mGaF1eMQZhs3rO10f7fPKBN3YuHj/kuZbpGxhhC U6j5V1xk8mzrM+9o2KRUZZt77vSixxNpMg== -----END CERTIFICATE-----Generated at Tue Apr 21 19:19:31 2026 by rpki-client