$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/543cfae5-eada-3197-a529-2342069bc6ca.roa File: 543cfae5-eada-3197-a529-2342069bc6ca.roa (raw, json) Hash identifier: 6X/4odlSj8JzRzRygjcSlKoKsI+nyBmgN9IeLAfkWww= Subject key identifier: 61:5F:A3:83:22:7B:4C:8D:13:6B:32:66:D0:9C:8A:D4:9F:11:1E:88 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF73D9E4E5B009F8A89A540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/543cfae5-eada-3197-a529-2342069bc6ca.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33659 IP address blocks: 2603:301b:1a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:3d:9e:4e:5b:00:9f:8a:89:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=22b34eca-6c7c-4875-b2d4-2146b44be3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d7:92:c4:9f:36:c6:0d:3a:c0:94:dd:b0:0e: 96:30:c2:c7:d2:d1:80:c3:e5:f4:9f:9a:14:2d:28: 15:d0:2a:26:7e:0b:01:a9:d3:a9:0d:ed:cd:34:17: 87:77:b1:b3:88:70:13:27:88:2d:70:56:c8:65:e7: d6:19:b9:9f:b2:51:e8:e5:d8:40:c6:df:be:96:0e: ab:7b:1a:eb:03:2b:75:15:bb:c9:bb:9b:cb:92:9f: b0:b8:e8:8b:2b:fd:f7:7f:11:99:0d:e8:b2:93:ee: f4:32:18:d7:b3:74:2e:4a:a3:22:d5:bf:ed:ea:d5: 18:81:0a:b8:bc:a2:13:42:87:a6:43:ed:4c:c6:6a: 4e:00:5b:b0:9d:c0:cd:5c:b8:d3:38:c5:46:4d:e1: 84:a7:ed:10:4a:c0:3e:25:34:34:84:14:d8:9c:44: c7:f6:c2:14:cb:16:20:0a:c3:87:25:d0:79:9d:d0: 9f:3a:0b:d5:b9:2e:a7:43:31:47:ac:79:a1:2b:70: 9d:57:ad:4c:e5:27:21:83:a8:a9:a5:67:4b:76:74: 55:bb:fe:f3:07:62:34:73:cb:d9:2b:f0:b1:83:b2: 93:64:25:1b:a6:d6:32:aa:72:3a:a4:9f:5e:52:e1: c3:45:aa:86:86:ba:9b:ec:06:0c:bd:c1:f1:ee:17: 4b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5F:A3:83:22:7B:4C:8D:13:6B:32:66:D0:9C:8A:D4:9F:11:1E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/543cfae5-eada-3197-a529-2342069bc6ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:301b:1a00::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:9f:f3:6f:1b:f6:44:77:69:1e:36:d3:47:a3:e7:92:50:c5: f0:be:c3:15:12:22:54:9a:57:9d:b2:b4:57:16:b6:13:4a:88: eb:96:9d:b7:e5:18:50:64:a9:84:07:24:b5:b5:38:40:be:5d: 4d:ca:6b:67:b1:72:c1:fc:94:fd:da:a3:b5:13:ed:f4:1a:d5: d7:3e:73:94:c4:8f:d6:3e:62:8b:77:30:55:05:03:38:a3:b8: 3e:4d:7e:99:c6:4a:e1:81:d8:35:4d:8a:f9:06:d6:ff:ad:e8: c5:70:6d:94:1f:90:7e:44:e0:ce:89:95:3b:95:e8:de:f9:ba: 9d:7c:7a:41:23:65:cc:49:46:08:4f:6a:44:5d:ac:0a:34:75: 0e:70:24:84:cb:05:36:61:16:e9:6f:09:73:a1:48:c1:5a:51: 85:8d:1c:93:70:80:d1:9b:2d:ae:57:7f:97:06:15:36:99:c6: e9:22:a1:dc:f2:b8:a0:34:5b:57:5d:20:50:99:fb:e0:47:ef: 8c:bd:71:b7:f9:47:84:f4:4c:31:99:17:dd:17:1f:40:0a:77: e3:32:f2:36:61:59:0f:55:d8:7d:f5:3e:e6:4d:a0:7a:d3:ef: a3:dc:00:ae:97:43:70:60:69:e5:82:69:1d:ac:68:a4:f8:43: fa:e6:96:75 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O9z2eTlsAn4qJpUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MjJiMzRlY2EtNmM3Yy00ODc1LWIyZDQtMjE0NmI0NGJlM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyteSxJ82xg06wJTdsA6WMMLH0tGAw+X0n5oU LSgV0ComfgsBqdOpDe3NNBeHd7GziHATJ4gtcFbIZefWGbmfslHo5dhAxt++lg6r exrrAyt1FbvJu5vLkp+wuOiLK/33fxGZDeiyk+70MhjXs3QuSqMi1b/t6tUYgQq4 vKITQoemQ+1MxmpOAFuwncDNXLjTOMVGTeGEp+0QSsA+JTQ0hBTYnETH9sIUyxYg CsOHJdB5ndCfOgvVuS6nQzFHrHmhK3CdV61M5Schg6ippWdLdnRVu/7zB2I0c8vZ K/Cxg7KTZCUbptYyqnI6pJ9eUuHDRaqGhrqb7AYMvcHx7hdL/QIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFGFfo4Mie0yNE2syZtCcitSfER6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQzY2ZhZTUtZWFkYS0z MTk3LWE1MjktMjM0MjA2OWJjNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwGxow VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAh5/zbxv2RHdpHjbTR6PnklDF8L7DFRIiVJpXnbK0Vxa2E0qI65ad t+UYUGSphAcktbU4QL5dTcprZ7FywfyU/dqjtRPt9BrV1z5zlMSP1j5ii3cwVQUD OKO4Pk1+mcZK4YHYNU2K+QbW/63oxXBtlB+QfkTgzomVO5Xo3vm6nXx6QSNlzElG CE9qRF2sCjR1DnAkhMsFNmEW6W8Jc6FIwVpRhY0ck3CA0Zstrld/lwYVNpnG6SKh 3PK4oDRbV10gUJn74EfvjL1xt/lHhPRMMZkX3RcfQAp34zLyNmFZD1XYffU+5k2g etPvo9wArpdDcGBp5YJpHaxopPhD+uaWdQ== -----END CERTIFICATE-----Generated at Wed Apr 22 00:21:22 2026 by rpki-client