$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0696b770-3090-391b-954f-f2a5f35c322a.roa File: 0696b770-3090-391b-954f-f2a5f35c322a.roa (raw, json) Hash identifier: 66rBR5/YonyYR/meNcARxuTGlhKYiFFvR4vV3WgJIfE= Subject key identifier: 95:6F:B8:BA:8E:10:90:5B:7B:67:29:11:4E:89:AE:30:D8:77:EB:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4979C88621B14B5ACFB27E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0696b770-3090-391b-954f-f2a5f35c322a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 2001:559:ad::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:c8:86:21:b1:4b:5a:cf:b2:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=19cd46f0-6017-4883-b5f0-822237728e9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a9:82:70:b9:60:50:4e:ed:3a:fa:92:03:15: 43:d8:ca:78:88:32:98:d2:be:dc:05:6b:f0:f8:d8: 98:42:7c:e9:fa:34:29:86:ba:8f:e4:fc:a6:5a:90: a9:b7:1d:78:c1:f4:97:2c:85:ec:59:95:d3:69:6e: 48:d3:0a:03:af:86:13:2d:5a:b1:e6:21:4e:50:51: 17:ac:94:4b:7f:cf:41:bd:30:9a:53:4b:d9:9d:7f: 72:f9:51:8c:16:83:df:37:0a:1e:88:32:61:57:eb: d4:9c:51:6e:14:ad:f1:02:bc:27:2e:a2:ff:5c:7d: da:d4:02:f8:5d:16:36:9f:57:95:c6:35:56:13:53: ab:51:23:60:e1:41:64:83:79:69:3d:a9:fc:e4:e4: 84:bd:68:72:a1:53:fe:e6:a0:c5:6c:11:6d:4b:18: 9b:b7:b4:2d:92:98:4d:5a:ce:8f:d6:fe:b8:e1:6b: 21:25:48:ca:2e:83:35:84:fc:f9:a8:f7:21:38:48: 95:7a:9c:68:00:f5:fa:3d:89:8e:09:61:0f:cb:18: 55:e9:47:3b:ec:bc:f6:e6:38:8f:34:39:5b:7d:49: b3:51:7e:46:39:9c:86:8e:a7:3f:2f:7a:35:9d:e0: 8c:01:82:d1:51:af:f4:64:a1:7d:3c:dc:d8:ca:60: 6e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6F:B8:BA:8E:10:90:5B:7B:67:29:11:4E:89:AE:30:D8:77:EB:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0696b770-3090-391b-954f-f2a5f35c322a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:ad::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:30:c3:43:24:3d:bc:9d:74:8b:f0:2d:ce:b3:80:e1:07:4a: 5c:a5:32:c9:fa:cf:35:7c:7b:65:34:b2:7f:2a:9b:fb:2d:d6: 96:7a:31:71:b4:d0:43:f8:f2:09:ed:53:5d:ee:3c:cb:59:94: 4d:cb:36:3b:56:d9:13:c8:52:c9:14:15:92:a0:07:cc:cf:11: 04:11:24:07:85:aa:c9:f1:65:44:ab:7b:a3:41:c3:f3:15:f2: 6d:2e:0c:6e:83:47:c1:8c:ef:20:f3:c8:3d:8a:0d:f1:30:d6: dc:82:f3:85:ab:9d:3e:de:ba:53:86:51:08:ec:c8:02:e0:8e: 62:60:12:23:fa:32:ae:fe:e4:a4:0e:73:bc:d3:fd:87:96:a6: 4a:65:83:1b:72:95:ad:6e:5c:17:1d:d1:d4:87:90:1f:38:62: ca:2c:24:26:0c:f8:5d:80:6b:76:fc:80:04:44:77:5e:30:50: 42:a1:4c:81:81:db:ca:d4:29:d0:ff:05:21:68:40:46:cd:68: 11:c3:f5:7c:22:44:54:8f:98:33:2b:a8:37:df:1b:7d:e3:45: b1:a3:fd:e7:cc:02:fb:5f:8e:4c:a9:61:da:fe:f5:84:71:10: 56:d6:58:2a:e7:11:c2:e9:23:89:41:1e:b5:77:14:b5:13:2e: 5d:1b:9f:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JeciGIbFLWs+yfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTljZDQ2ZjAtNjAxNy00ODgzLWI1ZjAtODIyMjM3NzI4ZTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqmCcLlgUE7tOvqSAxVD2Mp4iDKY0r7cBWvw +NiYQnzp+jQphrqP5PymWpCptx14wfSXLIXsWZXTaW5I0woDr4YTLVqx5iFOUFEX rJRLf89BvTCaU0vZnX9y+VGMFoPfNwoeiDJhV+vUnFFuFK3xArwnLqL/XH3a1AL4 XRY2n1eVxjVWE1OrUSNg4UFkg3lpPan85OSEvWhyoVP+5qDFbBFtSxibt7QtkphN Ws6P1v644WshJUjKLoM1hPz5qPchOEiVepxoAPX6PYmOCWEPyxhV6Uc77Lz25jiP NDlbfUmzUX5GOZyGjqc/L3o1neCMAYLRUa/0ZKF9PNzYymBuTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJVvuLqOEJBbe2cpEU6JrjDYd+vmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDY5NmI3NzAtMzA5MC0z OTFiLTk1NGYtZjJhNWYzNWMzMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQCt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAoww0MkPbyddIvwLc6zgOEHSlylMsn6zzV8e2U0sn8qm/st1pZ6 MXG00EP48gntU13uPMtZlE3LNjtW2RPIUskUFZKgB8zPEQQRJAeFqsnxZUSre6NB w/MV8m0uDG6DR8GM7yDzyD2KDfEw1tyC84WrnT7eulOGUQjsyALgjmJgEiP6Mq7+ 5KQOc7zT/YeWpkplgxtyla1uXBcd0dSHkB84YsosJCYM+F2Aa3b8gAREd14wUEKh TIGB28rUKdD/BSFoQEbNaBHD9XwiRFSPmDMrqDffG33jRbGj/efMAvtfjkypYdr+ 9YRxEFbWWCrnEcLpI4lBHrV3FLUTLl0bn7w= -----END CERTIFICATE-----Generated at Mon Sep 28 06:11:49 2026 by rpki-client