$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa File: 4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa (raw, json) Hash identifier: LQ3WLU55eO+mfIJQwZ3d9Iu6KsQYg0llgIfpw7kBxEM= Subject key identifier: 2D:A9:D4:06:D9:A5:8C:85:3B:68:C8:39:13:45:8B:8B:80:36:A8:EC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4E57FEC9ABB02C578A94C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 33668 IP address blocks: 2603:3015:2d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:57:fe:c9:ab:b0:2c:57:8a:94:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=6fe1b14d-25b7-4929-9436-3d4f420691ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fc:5b:1b:4f:e0:11:81:db:4f:87:96:7c:db: 5a:ef:e1:d5:5e:29:5f:3e:3e:da:57:08:26:2f:d6: d5:3f:15:39:39:30:94:f7:51:3e:32:dd:7e:ff:d7: b1:ff:f5:07:96:13:d3:e5:47:f3:9e:f4:66:48:19: 17:e1:1b:96:0a:4d:58:38:2c:cd:b7:00:72:84:77: 31:42:d2:c7:b7:aa:b2:ad:d9:7a:bb:80:a7:90:cf: eb:91:1e:ca:94:a7:7f:b0:23:74:20:11:db:0f:16: fe:4e:83:55:87:6d:0d:c8:5c:d9:02:57:78:0f:30: d2:5c:9f:02:37:ec:9a:02:75:89:2b:5c:1b:f6:5c: a1:53:97:e7:87:06:e2:06:f1:c4:06:99:0f:71:b7: cf:44:b5:3b:42:4d:17:2a:71:85:42:47:61:07:a6: 01:71:62:c7:90:96:0d:a5:a4:19:6e:1b:76:5b:1b: 20:f8:fa:21:eb:f7:e5:63:12:5c:e8:e1:ba:c0:a3: 59:d7:62:19:be:c7:d9:03:d3:c2:ce:f6:87:73:54: 73:c6:57:3e:eb:ad:8a:c2:a7:50:14:73:2c:c6:3d: df:c4:44:66:01:7b:cc:9d:65:85:fb:09:85:8b:15: 58:85:ea:77:c0:52:5e:20:fb:75:ba:b1:e8:39:d0: eb:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A9:D4:06:D9:A5:8C:85:3B:68:C8:39:13:45:8B:8B:80:36:A8:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4120d1f3-5c1e-3a56-bacc-5e3f245ccb90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3015:2d00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:00:64:79:6e:b0:68:7f:63:bf:e3:13:0a:1d:45:06:74:d6: 5e:2e:64:7e:ce:33:38:fa:e8:7c:50:80:3f:7a:c8:2b:71:8f: bc:53:80:d9:14:0b:c1:17:cc:38:f4:d1:06:8d:27:cb:20:c6: f8:88:66:bd:87:63:99:ac:4a:3b:63:8c:05:3d:7e:e0:90:1a: 5f:53:a9:14:ad:5f:bd:fd:68:93:f6:6c:ee:ad:6e:41:18:fd: ff:53:e8:b9:4d:ff:84:4d:9f:1d:b6:07:be:2b:10:3e:38:ab: f3:a3:24:d7:8a:c6:9f:fe:f3:d0:f6:e4:0e:60:b9:fc:36:7f: 77:03:3a:8a:c7:bb:bc:ac:c6:7c:c3:08:1c:4a:3f:dc:f1:22: 64:22:4e:f9:a0:6a:5f:a8:73:87:27:8c:4e:e8:37:de:ff:c2: d2:31:6a:6f:40:55:f3:b8:3c:49:29:36:7a:2a:4a:6e:11:93: a4:b9:0a:25:7e:78:87:27:fd:fc:54:c1:3b:e4:ca:61:87:b8: e7:e5:fa:cd:a8:08:b6:57:9e:64:06:e5:df:de:43:2a:ea:26: ff:4a:96:d2:4e:53:90:82:b9:6d:28:39:43:6a:17:b0:e9:2f: 46:52:e6:b5:7b:48:4b:77:9c:eb:58:c9:e8:22:00:9c:9f:81: 65:d3:22:0c -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE96Tlf+yauwLFeKlMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NmZlMWIxNGQtMjViNy00OTI5LTk0MzYtM2Q0ZjQyMDY5MWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPxbG0/gEYHbT4eWfNta7+HVXilfPj7aVwgm L9bVPxU5OTCU91E+Mt1+/9ex//UHlhPT5UfznvRmSBkX4RuWCk1YOCzNtwByhHcx QtLHt6qyrdl6u4CnkM/rkR7KlKd/sCN0IBHbDxb+ToNVh20NyFzZAld4DzDSXJ8C N+yaAnWJK1wb9lyhU5fnhwbiBvHEBpkPcbfPRLU7Qk0XKnGFQkdhB6YBcWLHkJYN paQZbht2Wxsg+Poh6/flYxJc6OG6wKNZ12IZvsfZA9PCzvaHc1Rzxlc+662KwqdQ FHMsxj3fxERmAXvMnWWF+wmFixVYhep3wFJeIPt1urHoOdDrlwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFC2p1AbZpYyFO2jIORNFi4uANqjsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDEyMGQxZjMtNWMxZS0z YTU2LWJhY2MtNWUzZjI0NWNjYjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwFS0w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZABkeW6waH9jv+MTCh1FBnTWXi5kfs4zOProfFCAP3rIK3GPvFOA 2RQLwRfMOPTRBo0nyyDG+IhmvYdjmaxKO2OMBT1+4JAaX1OpFK1fvf1ok/Zs7q1u QRj9/1PouU3/hE2fHbYHvisQPjir86Mk14rGn/7z0PbkDmC5/DZ/dwM6ise7vKzG fMMIHEo/3PEiZCJO+aBqX6hzhyeMTug33v/C0jFqb0BV87g8SSk2eipKbhGTpLkK JX54hyf9/FTBO+TKYYe45+X6zagItleeZAbl395DKuom/0qW0k5TkIK5bSg5Q2oX sOkvRlLmtXtIS3ec61jJ6CIAnJ+BZdMiDA== -----END CERTIFICATE-----Generated at Sun Oct 25 14:15:48 2026 by rpki-client