$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07c87b11-790d-38d1-b206-088d7fa6983e.roa File: 07c87b11-790d-38d1-b206-088d7fa6983e.roa (raw, json) Hash identifier: zNeW6W7ng57g6gALrbbmlKJQjNLy1jESpJqgQ7vhaCA= Subject key identifier: 0A:A3:88:37:FA:88:BC:F8:AA:FA:6F:EE:0C:27:2E:0C:C2:E9:13:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4978812BC5687FFCB54F0000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07c87b11-790d-38d1-b206-088d7fa6983e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33650 IP address blocks: 2001:558:a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:81:2b:c5:68:7f:fc:b5:4f:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ffe0798c-4693-4ec1-b388-96ef72e6be0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c9:79:20:73:65:0b:94:ef:ad:c7:45:6c:c5: d5:a1:c4:55:d7:7f:7e:85:d0:78:85:55:7d:64:cb: b6:26:60:f3:d7:ad:10:96:08:10:06:5f:dc:22:b6: df:22:74:5e:43:90:4e:1e:9e:73:d0:71:b7:e9:99: a1:93:07:fe:7f:af:bf:97:b7:7a:20:2b:75:50:51: 13:a0:20:12:fd:d7:a5:22:b9:c3:bd:40:f8:13:0b: b3:4f:3b:2d:c5:d4:31:74:c9:fb:12:f3:9a:68:ab: d6:1a:a4:3d:e3:36:2c:ca:c2:b9:e1:f7:1b:0d:b8: be:f5:ca:c8:8e:53:df:0a:f7:6f:b3:04:a1:d3:ea: 28:09:12:9e:35:3d:62:ac:ed:32:a9:c3:c7:a3:a7: 57:13:81:0c:59:71:a2:e3:35:b3:01:7a:fe:fc:8a: a9:50:a0:cb:98:e9:0e:0e:f9:7c:0a:a1:b3:9f:19: 3b:ed:73:a7:f5:75:c8:f9:e2:56:2a:7b:0a:8b:a9: c9:4c:86:d4:67:37:dd:70:19:5a:5d:76:4c:0b:93: e4:65:3a:df:47:ad:1e:44:1f:1e:f4:55:9a:7b:4f: ba:05:c6:bf:53:b7:00:57:e3:99:b4:56:00:05:6c: d2:23:0c:6a:87:53:5b:ac:77:ff:5c:99:a3:1a:7d: b5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A3:88:37:FA:88:BC:F8:AA:FA:6F:EE:0C:27:2E:0C:C2:E9:13:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/07c87b11-790d-38d1-b206-088d7fa6983e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fa:da:17:ff:ef:10:45:fb:63:31:42:43:d2:a0:af:56:72: 1c:7c:69:94:3c:fa:60:f5:df:dc:44:5a:ef:0c:d3:79:6f:30: 6d:ae:b9:3d:06:d7:ef:b2:6a:85:65:19:a6:cf:bf:be:93:26: d6:6e:af:00:4c:ba:ad:cc:f7:0c:9b:ae:2c:f0:68:70:67:30: d0:a2:6a:b4:b0:bd:1e:88:76:25:e1:8d:b1:2a:db:ba:92:0d: 8a:3f:c0:cd:68:02:61:c3:b4:d6:d1:3c:16:4a:06:5f:cc:1d: d5:30:ee:1d:dd:cd:a5:72:68:62:f6:87:21:67:54:58:4d:25: 27:07:43:1f:41:2c:08:46:85:06:61:c4:ce:49:9f:66:2f:b1: 20:9f:0e:81:b5:39:9b:b0:81:dc:e2:80:a3:2a:a1:87:5b:d7: 6a:5e:3d:84:f6:0a:c5:7f:29:96:05:fc:7a:d3:a6:4e:94:d8: 86:9b:52:f5:57:ef:9d:4f:ed:80:af:58:7b:46:27:3e:31:99: 44:aa:97:cf:d6:1d:bd:16:d3:db:21:3c:f1:1f:56:43:cb:5d: de:05:c5:e4:76:71:65:48:bf:3e:10:8b:af:1c:b6:f7:78:0a: 63:be:8f:3e:71:1b:9b:34:15:0b:ce:4c:85:59:bb:5d:48:4a: 17:83:07:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JeIErxWh//LVPAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmZlMDc5OGMtNDY5My00ZWMxLWIzODgtOTZlZjcyZTZiZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncl5IHNlC5TvrcdFbMXVocRV139+hdB4hVV9 ZMu2JmDz160QlggQBl/cIrbfInReQ5BOHp5z0HG36Zmhkwf+f6+/l7d6ICt1UFET oCAS/delIrnDvUD4EwuzTzstxdQxdMn7EvOaaKvWGqQ94zYsysK54fcbDbi+9crI jlPfCvdvswSh0+ooCRKeNT1irO0yqcPHo6dXE4EMWXGi4zWzAXr+/IqpUKDLmOkO Dvl8CqGznxk77XOn9XXI+eJWKnsKi6nJTIbUZzfdcBlaXXZMC5PkZTrfR60eRB8e 9FWae0+6Bca/U7cAV+OZtFYABWzSIwxqh1NbrHf/XJmjGn21XwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAqjiDf6iLz4qvpv7gwnLgzC6ROHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDdjODdiMTEtNzkwZC0z OGQxLWIyMDYtMDg4ZDdmYTY5ODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFWACg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAED62hf/7xBF+2MxQkPSoK9Wchx8aZQ8+mD139xEWu8M03lvMG2u uT0G1++yaoVlGabPv76TJtZurwBMuq3M9wybrizwaHBnMNCiarSwvR6IdiXhjbEq 27qSDYo/wM1oAmHDtNbRPBZKBl/MHdUw7h3dzaVyaGL2hyFnVFhNJScHQx9BLAhG hQZhxM5Jn2YvsSCfDoG1OZuwgdzigKMqoYdb12pePYT2CsV/KZYF/HrTpk6U2Iab UvVX751P7YCvWHtGJz4xmUSql8/WHb0W09shPPEfVkPLXd4FxeR2cWVIvz4Qi68c tvd4CmO+jz5xG5s0FQvOTIVZu11ISheDB+c= -----END CERTIFICATE-----Generated at Fri Sep 25 18:12:16 2026 by rpki-client