$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35c47736-b4d5-3526-8060-67d5c2aa6a03.roa File: 35c47736-b4d5-3526-8060-67d5c2aa6a03.roa (raw, json) Hash identifier: UABcQ4nkl6h+nF9ooW4a9ixrts5fqpPb7r4s1tHtfeU= Subject key identifier: 1F:D4:D1:36:1C:F4:BE:87:5A:1D:B9:BC:57:84:A0:E4:AC:19:80:33 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498298CC18C0F9AB5F3EF480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35c47736-b4d5-3526-8060-67d5c2aa6a03.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 2001:559:126::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:98:cc:18:c0:f9:ab:5f:3e:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=871b3905-6e99-4541-969c-1e30904ea35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:af:e4:13:29:35:b8:6b:de:27:13:17:2a:89: d4:2e:24:5e:40:ac:b2:a3:16:7a:29:c2:4b:6f:7f: 84:07:c6:d6:9d:2f:d9:bd:76:aa:1c:3f:13:87:6d: 85:10:07:03:56:86:e8:9b:18:30:5f:68:79:73:bc: 28:46:e2:ae:c8:e7:84:bb:3f:b4:0a:8e:79:91:a3: 46:be:9a:07:81:53:38:42:bd:e3:2a:ad:6b:7a:29: bb:ca:2a:1c:54:4b:e7:b7:69:7a:a4:08:3d:8a:17: 95:4f:b7:64:f1:49:8f:a6:1d:4d:67:12:04:78:c8: 6c:7c:61:64:04:0a:88:0a:22:c9:38:07:b2:c5:a5: 36:13:c7:d4:48:88:23:45:67:cb:4e:c6:f1:ce:e6: 89:94:fd:18:c9:b6:a6:88:a1:68:42:d3:54:39:ff: a0:ba:c6:6a:28:13:52:e3:9f:6d:45:8e:53:45:d0: 78:9e:d4:ec:e1:d1:40:82:22:b6:99:b7:30:35:ab: d9:5e:49:fe:15:a0:18:9c:7e:1d:e1:87:38:36:a8: 9a:fd:25:a2:48:4b:3d:32:74:7b:67:a6:9e:9e:e9: 8f:a0:6a:2d:66:e6:dd:60:9d:60:b1:76:0b:7c:96: a4:28:de:21:9e:6b:25:5c:27:3a:9b:1a:c7:36:bc: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:D4:D1:36:1C:F4:BE:87:5A:1D:B9:BC:57:84:A0:E4:AC:19:80:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35c47736-b4d5-3526-8060-67d5c2aa6a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:126::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:bb:90:b4:c7:f7:9a:79:19:0b:82:ac:45:aa:42:6b:20:62: 7a:ff:44:62:b1:bb:dc:8b:26:e0:65:a0:61:26:48:5e:c3:e9: 79:29:cf:a1:aa:34:45:b8:50:15:86:d5:31:28:ca:ff:62:24: 16:73:83:cb:fb:27:ff:e8:0c:7e:66:24:24:69:aa:01:a4:93: c9:17:d9:a7:5c:59:37:e2:05:63:7f:4e:7f:bc:d7:48:f5:df: a5:7f:0b:2d:96:e1:73:44:61:94:d5:db:53:c9:3a:20:cc:c5: 18:af:92:ef:86:20:46:a0:57:3d:37:a2:72:2c:c2:ae:98:a8: 5f:b5:49:b6:14:d1:e5:7f:c0:bb:42:04:9c:c1:36:ce:84:e6: 9f:b2:bd:4f:e7:ab:a3:e1:62:07:9f:c7:04:74:d5:2a:7d:d4: 2d:a4:d3:98:ce:f8:06:b7:14:7c:e8:f8:44:51:89:5a:ce:4c: b7:5e:86:de:c2:ae:6c:d8:38:fe:f6:8c:f9:00:98:9c:df:00: c0:6e:c5:dd:6b:6d:c9:a3:58:03:0c:45:c7:fd:02:60:81:73: 64:05:b3:1b:21:2b:cb:4a:ac:cc:c3:8c:fe:27:da:3b:01:ad: 24:2c:f4:9c:b5:71:aa:47:c4:f1:01:8e:10:33:45:b3:10:dd: 3e:a3:cd:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgpjMGMD5q18+9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODcxYjM5MDUtNmU5OS00NTQxLTk2OWMtMWUzMDkwNGVhMzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia/kEyk1uGveJxMXKonULiReQKyyoxZ6KcJL b3+EB8bWnS/ZvXaqHD8Th22FEAcDVobomxgwX2h5c7woRuKuyOeEuz+0Co55kaNG vpoHgVM4Qr3jKq1reim7yiocVEvnt2l6pAg9iheVT7dk8UmPph1NZxIEeMhsfGFk BAqICiLJOAeyxaU2E8fUSIgjRWfLTsbxzuaJlP0YybamiKFoQtNUOf+gusZqKBNS 459tRY5TRdB4ntTs4dFAgiK2mbcwNavZXkn+FaAYnH4d4Yc4Nqia/SWiSEs9MnR7 Z6aenumPoGotZubdYJ1gsXYLfJakKN4hnmslXCc6mxrHNrwD8QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB/U0TYc9L6HWh25vFeEoOSsGYAzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVjNDc3MzYtYjRkNS0z NTI2LTgwNjAtNjdkNWMyYWE2YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQEm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACW7kLTH95p5GQuCrEWqQmsgYnr/RGKxu9yLJuBloGEmSF7D6Xkp z6GqNEW4UBWG1TEoyv9iJBZzg8v7J//oDH5mJCRpqgGkk8kX2adcWTfiBWN/Tn+8 10j136V/Cy2W4XNEYZTV21PJOiDMxRivku+GIEagVz03onIswq6YqF+1SbYU0eV/ wLtCBJzBNs6E5p+yvU/nq6PhYgefxwR01Sp91C2k05jO+Aa3FHzo+ERRiVrOTLde ht7CrmzYOP72jPkAmJzfAMBuxd1rbcmjWAMMRcf9AmCBc2QFsxshK8tKrMzDjP4n 2jsBrSQs9Jy1capHxPEBjhAzRbMQ3T6jzcg= -----END CERTIFICATE-----Generated at Sun Sep 27 03:00:11 2026 by rpki-client