$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a16325b-97f9-30bd-b166-f05a5a5c3830.roa File: 3a16325b-97f9-30bd-b166-f05a5a5c3830.roa (raw, json) Hash identifier: vpDQG7BUBBySu5bbByGnDgRCm79q81799DR/b2r6Tng= Subject key identifier: B6:08:0D:FC:04:56:D7:73:5B:5B:42:51:9B:A2:F8:BF:BC:A0:6B:EA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497F6C7B6B873563648A7D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a16325b-97f9-30bd-b166-f05a5a5c3830.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33668 IP address blocks: 2001:559:c45a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7f:6c:7b:6b:87:35:63:64:8a:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a139780e-8655-4b0c-877e-1428260794e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:91:95:0b:d4:9f:b8:85:28:33:6e:e5:31:e8: 42:b2:77:3c:36:1b:ff:e9:90:3e:98:0e:00:95:e8: 8b:e8:86:5a:75:99:cc:6c:cb:10:d0:a1:e8:d7:56: 7e:e6:bd:16:0e:36:79:fa:c9:a5:8e:3d:8a:90:32: d0:2d:25:74:24:44:86:47:27:67:11:db:f5:4c:85: 18:52:76:b1:99:ae:12:28:b2:18:8e:d7:b5:f7:eb: 8f:ca:02:3e:1b:4a:20:9f:a8:73:17:12:3f:ed:6d: 80:1c:c5:11:92:ae:d6:12:f8:69:01:53:83:6f:e0: cf:0e:9e:21:94:ef:e0:17:90:37:bc:8a:b2:91:41: 81:40:3d:5e:41:42:00:df:12:a7:63:9b:53:d7:73: 9e:6f:8a:61:c6:09:76:57:eb:37:07:6e:c2:fd:9c: df:d0:a9:89:69:27:70:09:0c:44:b2:c8:da:d9:30: 09:73:ca:5a:76:f2:24:bf:6a:16:93:b5:78:2a:d4: 63:42:fd:2a:78:7d:05:0b:0a:2d:a9:05:a1:03:13: b6:d8:10:3a:bc:e5:45:61:1a:24:d3:49:7b:bd:6a: a9:d2:a8:7e:15:84:ac:c9:a2:f2:24:6b:9d:a1:b6: 5d:7b:05:d2:bc:59:59:52:ba:07:ec:e4:e1:5c:f8: d2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:08:0D:FC:04:56:D7:73:5B:5B:42:51:9B:A2:F8:BF:BC:A0:6B:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a16325b-97f9-30bd-b166-f05a5a5c3830.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c45a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d6:c5:36:b8:d1:2b:25:5b:1e:02:7c:20:b6:73:b6:de:6c: 14:21:83:f2:ef:56:8d:f8:e8:e1:aa:10:d0:61:4c:56:63:88: e7:76:f7:0f:f0:02:3c:9f:78:b6:f8:48:83:16:03:49:57:bd: 1f:a8:ba:3e:1a:ad:28:51:23:59:92:34:37:9c:70:32:d5:ce: ae:dd:8d:6d:41:f7:4f:82:06:7a:5f:fe:76:b4:22:e6:cc:4c: f2:2e:ec:9b:94:fd:e9:17:3f:1e:a2:26:ff:69:a8:47:3e:79: 20:a4:ae:03:1b:4d:5a:e0:06:42:21:52:c2:bc:cd:e4:00:d8: 78:5c:99:e1:72:dc:ab:fc:66:63:ca:78:9b:32:01:5f:9a:b7: a0:01:6b:86:04:e0:b3:d7:ea:66:16:bc:b4:20:37:ef:55:39: 1b:1f:5d:14:ac:8f:3b:74:39:73:e9:5d:89:53:c3:8a:76:e5: 6e:9d:62:50:3f:08:c8:fb:31:93:f5:0d:8c:25:6b:13:5a:9d: e0:30:8a:9b:65:78:d6:24:06:6f:bb:ab:62:47:8a:d5:2a:e5: 38:05:02:2a:ee:23:65:e9:67:a4:0d:70:f9:44:90:da:73:13: e2:3e:4c:b7:4a:1f:c6:d3:c8:11:c0:0e:25:45:87:13:9d:2a: fa:05:78:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jf2x7a4c1Y2SKfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTEzOTc4MGUtODY1NS00YjBjLTg3N2UtMTQyODI2MDc5NGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZGVC9SfuIUoM27lMehCsnc8Nhv/6ZA+mA4A leiL6IZadZnMbMsQ0KHo11Z+5r0WDjZ5+smljj2KkDLQLSV0JESGRydnEdv1TIUY Unaxma4SKLIYjte19+uPygI+G0ogn6hzFxI/7W2AHMURkq7WEvhpAVODb+DPDp4h lO/gF5A3vIqykUGBQD1eQUIA3xKnY5tT13Oeb4phxgl2V+s3B27C/Zzf0KmJaSdw CQxEssja2TAJc8padvIkv2oWk7V4KtRjQv0qeH0FCwotqQWhAxO22BA6vOVFYRok 00l7vWqp0qh+FYSsyaLyJGudobZdewXSvFlZUroH7OThXPjSFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLYIDfwEVtdzW1tCUZui+L+8oGvqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ExNjMyNWItOTdmOS0z MGJkLWIxNjYtZjA1YTVhNWMzODMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcRa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJjWxTa40SslWx4CfCC2c7bebBQhg/LvVo346OGqENBhTFZjiOd2 9w/wAjyfeLb4SIMWA0lXvR+ouj4arShRI1mSNDeccDLVzq7djW1B90+CBnpf/na0 IubMTPIu7JuU/ekXPx6iJv9pqEc+eSCkrgMbTVrgBkIhUsK8zeQA2HhcmeFy3Kv8 ZmPKeJsyAV+at6ABa4YE4LPX6mYWvLQgN+9VORsfXRSsjzt0OXPpXYlTw4p25W6d YlA/CMj7MZP1DYwlaxNaneAwiptleNYkBm+7q2JHitUq5TgFAiruI2XpZ6QNcPlE kNpzE+I+TLdKH8bTyBHADiVFhxOdKvoFeJ4= -----END CERTIFICATE-----Generated at Sun Sep 27 01:18:20 2026 by rpki-client