$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08f3cc12-570b-327c-86a0-70f960eb943e.roa File: 08f3cc12-570b-327c-86a0-70f960eb943e.roa (raw, json) Hash identifier: NrD06ShUDrNr+qWBDZ9487NZWQmAnZIeV5T9mmy+WE8= Subject key identifier: 76:81:63:C9:75:09:02:55:D3:D7:3E:3B:4C:CE:A6:75:CB:7A:C2:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4978F66FB57EDD65C59AB3C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08f3cc12-570b-327c-86a0-70f960eb943e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33668 IP address blocks: 2001:559:c3aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:f6:6f:b5:7e:dd:65:c5:9a:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=73d0dce5-ea11-4e6d-9cde-d517aa7cdeca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e6:dc:93:10:77:ef:20:f8:6f:d8:7d:83:ea: c2:9c:d1:33:2d:86:8b:b0:e3:3d:ea:7a:ea:3c:54: 38:8a:63:77:68:f0:d5:b7:81:f0:d0:8d:52:0b:80: 4a:61:2b:23:de:e6:65:c1:66:95:6a:a4:f3:8a:76: cd:71:cc:9a:b6:ce:d7:57:ff:02:38:46:36:b0:33: e2:06:57:3f:b3:04:7e:63:53:e6:02:7a:7c:9d:e9: ee:b1:61:d8:18:da:ae:3a:26:0e:d4:f2:ec:26:56: df:0f:2d:db:a1:0d:2c:8a:21:48:96:2e:fe:84:db: 9b:2e:a0:bc:e2:eb:39:41:8d:8d:f1:d0:92:ec:52: d4:e1:4b:c7:00:a3:a3:e5:a5:57:b2:b3:7f:22:78: 09:72:a4:a2:9a:f3:a8:f4:85:20:ab:e8:4d:dd:5b: 1d:7b:89:88:0a:35:01:ca:dd:05:37:dc:49:3f:3e: d7:b1:ed:24:8f:12:14:f9:6b:00:70:d2:c3:63:91: 94:76:bf:f6:27:7e:b1:69:69:37:48:7b:77:0e:63: 5f:6c:d8:56:7a:73:b3:0b:cc:da:3e:2e:83:d2:9a: c9:55:2f:1e:5c:36:93:e3:b8:d3:04:e9:da:4b:0a: d6:78:60:46:16:66:2d:1b:5e:2a:c0:1f:4e:5a:68: cf:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:81:63:C9:75:09:02:55:D3:D7:3E:3B:4C:CE:A6:75:CB:7A:C2:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08f3cc12-570b-327c-86a0-70f960eb943e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:65:53:e3:1b:9c:5e:88:2a:6c:94:b9:bf:bc:7d:d3:50:65: 85:37:2c:37:6c:ef:3d:d1:2f:1f:0d:ba:9a:ec:f5:40:61:15: 02:f9:6a:30:18:fd:c3:95:96:43:7c:9f:52:27:ba:9f:eb:a1: 1f:f8:55:d3:7c:74:d9:8b:70:f7:d6:6f:c1:e0:27:5b:2b:28: 0c:a0:08:74:45:5f:ef:91:df:43:04:f1:7a:77:5b:f6:1a:7c: 0f:a7:1b:07:1d:af:c7:89:a0:81:36:35:5a:16:8e:d7:03:8d: 48:30:97:76:8d:d4:a1:49:28:c7:9d:bb:73:93:02:70:88:f5: 40:2e:cd:22:a0:14:95:3b:aa:0f:12:eb:c4:17:1d:ac:68:b3: 31:07:7e:f4:9f:e9:eb:9e:f2:a8:f8:3f:8d:47:c7:f4:bb:fa: 93:5a:60:3f:36:d7:4b:88:40:72:80:8c:e5:8f:b4:d5:51:a2: bc:f5:9a:ba:e9:c5:f8:0d:c4:8e:d4:1d:c7:2c:79:5a:d0:bb: 21:cd:15:57:c1:98:e0:ff:66:62:03:75:20:62:a6:56:e7:83: fc:15:e4:57:11:61:ed:79:83:fe:f3:99:da:cd:ba:1e:72:96: 3a:0a:b0:40:d5:d5:d4:de:55:b7:8e:f0:82:0e:6e:f6:b0:7a: cc:f6:f3:be -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JePZvtX7dZcWas8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzNkMGRjZTUtZWExMS00ZTZkLTljZGUtZDUxN2FhN2NkZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhubckxB37yD4b9h9g+rCnNEzLYaLsOM96nrq PFQ4imN3aPDVt4Hw0I1SC4BKYSsj3uZlwWaVaqTzinbNccyats7XV/8COEY2sDPi Blc/swR+Y1PmAnp8nenusWHYGNquOiYO1PLsJlbfDy3boQ0siiFIli7+hNubLqC8 4us5QY2N8dCS7FLU4UvHAKOj5aVXsrN/IngJcqSimvOo9IUgq+hN3Vsde4mICjUB yt0FN9xJPz7Xse0kjxIU+WsAcNLDY5GUdr/2J36xaWk3SHt3DmNfbNhWenOzC8za Pi6D0prJVS8eXDaT47jTBOnaSwrWeGBGFmYtG14qwB9OWmjPYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHaBY8l1CQJV09c+O0zOpnXLesJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDhmM2NjMTItNTcwYi0z MjdjLTg2YTAtNzBmOTYwZWI5NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcOq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAItlU+MbnF6IKmyUub+8fdNQZYU3LDds7z3RLx8Nuprs9UBhFQL5 ajAY/cOVlkN8n1Inup/roR/4VdN8dNmLcPfWb8HgJ1srKAygCHRFX++R30ME8Xp3 W/YafA+nGwcdr8eJoIE2NVoWjtcDjUgwl3aN1KFJKMedu3OTAnCI9UAuzSKgFJU7 qg8S68QXHaxoszEHfvSf6eue8qj4P41Hx/S7+pNaYD8210uIQHKAjOWPtNVRorz1 mrrpxfgNxI7UHccseVrQuyHNFVfBmOD/ZmIDdSBiplbng/wV5FcRYe15g/7zmdrN uh5yljoKsEDV1dTeVbeO8IIObvawesz2874= -----END CERTIFICATE-----Generated at Fri Sep 25 23:55:56 2026 by rpki-client