$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dc29ffd-3494-37df-af40-2ac52b955896.roa File: 5dc29ffd-3494-37df-af40-2ac52b955896.roa (raw, json) Hash identifier: cq7jybUb0EKx1/5Y2CIl90ijPZZQU+6brstnxZQy+0A= Subject key identifier: D3:2A:A1:0D:2A:B2:70:BC:83:CE:83:C2:F8:3F:CE:A0:AC:96:82:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D8EF76D64AAC17C98DEE4C400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dc29ffd-3494-37df-af40-2ac52b955896.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 33287 IP address blocks: 2601:44:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f7:6d:64:aa:c1:7c:98:de:e4:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=f69b8b32-f5c7-497a-9972-02f4d7d914c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:34:e1:1a:53:ba:2d:29:0b:d5:00:8f:60:5a: 91:8c:43:d4:16:70:7a:f8:d1:fd:7f:61:c5:1e:35: 89:7d:1e:f8:24:9a:fa:26:82:f8:2a:8c:26:44:a8: 92:ca:a7:c9:18:e9:e6:60:d5:4f:6a:83:af:ab:2e: 45:53:d7:79:2a:ff:be:fb:22:7c:c7:cd:88:7a:85: 3f:09:c7:bd:93:ce:3e:81:b7:2d:95:b1:94:53:df: 5b:07:bd:ca:74:78:19:21:86:e8:d7:5f:be:82:2f: 6a:1e:37:7a:38:bd:58:8d:ad:27:46:5b:dc:2d:7d: e1:61:ad:75:9d:bd:ec:54:b7:00:72:21:c3:01:4f: 22:c9:07:76:bf:32:f1:59:15:3d:73:77:9f:e0:e2: 89:f7:57:8b:08:45:0e:f5:26:c1:f4:a0:28:32:0c: 3d:d1:a2:e9:71:43:f1:f5:56:fa:43:8e:e7:9f:d5: 0d:a1:e3:29:eb:ad:4d:11:52:d5:67:89:4a:42:c2: 71:30:1e:97:21:e2:1e:86:c6:1a:58:9f:b2:b8:14: c1:bb:04:22:be:4d:56:9c:74:e4:9f:bf:33:ab:95: 0a:70:e3:85:f6:ed:b4:a4:fe:09:1e:26:94:04:0c: 17:f2:11:84:cc:6d:d6:52:b9:64:7f:53:82:8f:d8: 36:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2A:A1:0D:2A:B2:70:BC:83:CE:83:C2:F8:3F:CE:A0:AC:96:82:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dc29ffd-3494-37df-af40-2ac52b955896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:44:c000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:0b:76:da:eb:c3:3c:d9:d7:78:6f:f5:07:92:64:fc:50:6a: a5:d5:fd:e6:46:0c:a6:23:dd:9b:48:41:76:c8:08:7a:3d:27: 9b:50:ec:b3:6c:4e:01:17:1f:77:97:18:69:c5:d4:14:98:a7: 2b:df:76:6c:c7:0b:7c:62:b0:bc:67:35:e5:25:99:50:4d:2c: 3c:27:73:8c:87:33:ce:05:91:30:0b:e2:98:4f:d7:13:44:3f: 70:f8:57:fd:c0:18:b5:6d:da:46:7e:ac:48:90:dd:a1:01:dd: f2:b8:33:59:57:de:ab:bc:e6:f7:0b:60:fb:70:a4:18:aa:43: 4b:18:27:d3:7b:d1:3e:8d:18:17:ac:c7:88:c1:7e:89:ee:d0: 4d:03:05:8c:fd:20:9d:d5:6f:a8:75:e8:b4:2f:63:95:a1:68: da:be:19:ef:5f:e6:8d:d8:aa:48:83:fb:f1:48:ed:9b:bd:e9: 32:51:41:56:fe:78:46:4d:fa:63:3b:f9:1b:62:30:fb:ba:54: fe:2b:70:50:ee:43:f4:9c:69:9b:fc:7f:4f:7d:b5:d9:8e:63: ad:18:bd:74:e7:5a:04:fb:b6:3d:cf:c8:ba:59:a4:02:af:77: af:8d:33:11:ce:05:c5:0c:9f:c9:2d:ff:8a:7d:2e:d2:41:66: a0:0d:2e:a1 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2O921kqsF8mN7kxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZjY5YjhiMzItZjVjNy00OTdhLTk5NzItMDJmNGQ3ZDkxNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDThGlO6LSkL1QCPYFqRjEPUFnB6+NH9f2HF HjWJfR74JJr6JoL4KowmRKiSyqfJGOnmYNVPaoOvqy5FU9d5Kv+++yJ8x82IeoU/ Cce9k84+gbctlbGUU99bB73KdHgZIYbo11++gi9qHjd6OL1Yja0nRlvcLX3hYa11 nb3sVLcAciHDAU8iyQd2vzLxWRU9c3ef4OKJ91eLCEUO9SbB9KAoMgw90aLpcUPx 9Vb6Q47nn9UNoeMp661NEVLVZ4lKQsJxMB6XIeIehsYaWJ+yuBTBuwQivk1WnHTk n78zq5UKcOOF9u20pP4JHiaUBAwX8hGEzG3WUrlkf1OCj9g2PQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFNMqoQ0qsnC8g86Dwvg/zqCsloJCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWRjMjlmZmQtMzQ5NC0z N2RmLWFmNDAtMmFjNTJiOTU1ODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEARMAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAogt22uvDPNnXeG/1B5Jk/FBqpdX95kYMpiPdm0hBdsgIej0nm1Ds s2xOARcfd5cYacXUFJinK992bMcLfGKwvGc15SWZUE0sPCdzjIczzgWRMAvimE/X E0Q/cPhX/cAYtW3aRn6sSJDdoQHd8rgzWVfeq7zm9wtg+3CkGKpDSxgn03vRPo0Y F6zHiMF+ie7QTQMFjP0gndVvqHXotC9jlaFo2r4Z71/mjdiqSIP78Ujtm73pMlFB Vv54Rk36Yzv5G2Iw+7pU/itwUO5D9Jxpm/x/T3212Y5jrRi9dOdaBPu2Pc/Iulmk Aq93r40zEc4FxQyfyS3/in0u0kFmoA0uoQ== -----END CERTIFICATE-----Generated at Tue Apr 21 19:22:59 2026 by rpki-client