$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c28bf52-3847-383c-80d8-b4056870b8da.roa File: 4c28bf52-3847-383c-80d8-b4056870b8da.roa (raw, json) Hash identifier: PF5+DvOQMnC8tXzR+qvwrqdo9yhDIYGA/pfZ1lJV5Ao= Subject key identifier: FA:E4:F6:44:74:4C:B8:B5:BD:30:58:49:42:55:4D:AC:C6:B2:42:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF76FDEE51CAA7EBBFEF5A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c28bf52-3847-383c-80d8-b4056870b8da.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 2603:301d:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:6f:de:e5:1c:aa:7e:bb:fe:f5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=03791d2e-495b-46ad-98f0-435eaaf14556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:03:0b:53:82:95:69:4d:29:21:23:c9:0f:a1: 84:8a:58:5e:9e:df:3f:a0:14:63:b1:b3:32:1d:55: e7:04:35:39:cd:c9:96:a9:b5:cc:86:05:9a:39:40: 82:5d:49:ce:ff:26:d5:e9:bb:a8:55:1f:df:15:fd: 3e:84:db:47:f5:eb:da:f8:0f:d5:f2:d4:e4:10:17: 24:82:5b:ab:9f:34:ea:64:77:ae:0d:e8:4b:ae:0b: 22:ef:47:48:59:20:d3:a0:46:58:f5:15:71:53:d1: 7d:8a:72:99:93:b0:1d:2f:12:48:cd:85:b7:b6:26: 5a:b1:00:bc:ef:93:5e:ea:5a:02:f7:5d:b4:72:07: 71:e0:5f:a3:6e:d2:9d:7a:c1:c4:0a:c9:31:67:19: 6a:92:00:37:b0:b8:8e:2e:42:c6:4e:7b:bf:8b:7d: 99:51:3e:ae:cf:82:87:ff:6a:66:93:db:94:b9:c1: 5b:4b:4c:7f:70:ed:10:6e:f4:17:53:e1:e7:8b:44: 7f:86:7c:e9:b4:12:0e:14:92:30:52:98:a0:ed:bb: 27:e0:b3:ff:8d:56:d0:65:a3:db:da:67:ec:2a:77: 31:66:c2:ba:ec:70:85:06:81:94:aa:b0:12:db:ed: 73:07:b1:f3:22:3a:2a:0d:a2:7e:27:ae:d9:bc:91: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E4:F6:44:74:4C:B8:B5:BD:30:58:49:42:55:4D:AC:C6:B2:42:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c28bf52-3847-383c-80d8-b4056870b8da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:301d:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:60:70:72:cb:46:5b:b7:df:00:fd:33:cf:fa:33:32:4d:e1: 7a:64:79:c3:8e:7c:f9:00:11:5d:c7:e2:7a:1a:f9:4c:82:db: 5b:fb:36:78:42:19:fc:98:8e:9e:16:f3:8b:df:08:2b:fc:c1: 8f:aa:6e:ff:59:1e:21:f6:b5:e3:eb:be:f5:6f:a6:33:ab:09: be:c4:42:0c:81:05:a7:d4:d8:50:39:8b:5e:2e:06:8e:88:8d: c1:17:cd:e6:79:57:84:11:5c:f1:9b:f6:b8:24:bf:aa:24:9b: 1d:39:7d:9e:cb:af:f0:ed:9a:a0:91:5a:24:81:6b:10:1e:88: 05:75:16:85:35:bb:64:d8:3a:ef:ee:10:3c:c2:96:06:1d:4c: 65:05:e4:38:84:aa:81:d0:2d:3a:83:c9:62:5a:e1:02:ef:44: c0:eb:75:b3:26:5c:55:4f:f1:be:27:9a:ef:5d:0e:f4:ac:f4: 5d:8b:c2:71:d5:00:c0:e1:95:b1:d4:c6:30:56:53:4e:c4:1b: 72:58:73:d3:8d:f9:84:42:6f:a4:dd:32:05:7c:d7:2b:88:4c: 3f:cd:74:b1:b1:9d:ec:a8:73:e3:6b:14:8b:05:60:6c:1e:64: c1:4b:71:bd:cc:6a:5a:29:2d:08:01:58:de:f0:d0:71:03:c6: 59:6e:f4:4b -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O92/e5Ryqfrv+9aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MDM3OTFkMmUtNDk1Yi00NmFkLTk4ZjAtNDM1ZWFhZjE0NTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQMLU4KVaU0pISPJD6GEilhent8/oBRjsbMy HVXnBDU5zcmWqbXMhgWaOUCCXUnO/ybV6buoVR/fFf0+hNtH9eva+A/V8tTkEBck glurnzTqZHeuDehLrgsi70dIWSDToEZY9RVxU9F9inKZk7AdLxJIzYW3tiZasQC8 75Ne6loC9120cgdx4F+jbtKdesHECskxZxlqkgA3sLiOLkLGTnu/i32ZUT6uz4KH /2pmk9uUucFbS0x/cO0QbvQXU+Hni0R/hnzptBIOFJIwUpig7bsn4LP/jVbQZaPb 2mfsKncxZsK67HCFBoGUqrAS2+1zB7HzIjoqDaJ+J67ZvJHVmQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFPrk9kR0TLi1vTBYSUJVTazGskIOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGMyOGJmNTItMzg0Ny0z ODNjLTgwZDgtYjQwNTY4NzBiOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwHQgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAqmBwcstGW7ffAP0zz/ozMk3hemR5w458+QARXcfiehr5TILbW/s2 eEIZ/JiOnhbzi98IK/zBj6pu/1keIfa14+u+9W+mM6sJvsRCDIEFp9TYUDmLXi4G joiNwRfN5nlXhBFc8Zv2uCS/qiSbHTl9nsuv8O2aoJFaJIFrEB6IBXUWhTW7ZNg6 7+4QPMKWBh1MZQXkOISqgdAtOoPJYlrhAu9EwOt1syZcVU/xviea710O9Kz0XYvC cdUAwOGVsdTGMFZTTsQbclhz0435hEJvpN0yBXzXK4hMP810sbGd7Khz42sUiwVg bB5kwUtxvcxqWiktCAFY3vDQcQPGWW70Sw== -----END CERTIFICATE-----Generated at Tue Apr 21 19:28:45 2026 by rpki-client