$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497425c9-ab16-3597-a620-6e1e432a2039.roa File: 497425c9-ab16-3597-a620-6e1e432a2039.roa (raw, json) Hash identifier: +V3HWNj8wSUkfsqq6fLDZRoaUfzNJ8tzkhJKsatla3Y= Subject key identifier: 75:CE:31:A5:11:1C:6C:26:28:57:70:39:B5:A7:80:3D:A5:40:54:18 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4978F447DAA86EAAD5350AC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497425c9-ab16-3597-a620-6e1e432a2039.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33668 IP address blocks: 2001:559:451::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:f4:47:da:a8:6e:aa:d5:35:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b8ebdde-fd11-4fda-8564-23e44b26a4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:76:bd:39:07:f3:cc:b2:9b:11:f3:ba:43: f1:4a:0a:18:33:08:3c:40:83:f6:ca:67:f1:a6:fb: 6e:ba:c7:6b:2d:7e:af:a6:25:24:11:3c:6a:2f:14: 51:b5:84:ea:ef:bc:69:c8:65:9d:ad:ef:0b:2f:f3: 2f:d2:01:58:82:48:9a:cf:cd:d8:12:0b:2a:31:45: 33:0e:d4:26:5f:52:cc:95:da:6b:a6:75:50:04:c0: 6d:17:29:e1:ad:4a:55:d8:60:6f:14:85:1f:6a:f3: 38:0c:8d:21:32:4a:da:76:b6:38:16:72:2b:8d:74: 7a:2f:4a:11:8e:df:d9:a0:07:ed:97:67:12:16:7f: 1d:7a:aa:70:20:09:fd:9d:1b:d9:e4:f9:a2:47:1d: c4:91:87:5a:79:cd:21:54:ba:59:1c:27:76:33:c7: 6f:3c:4b:62:d2:e0:7c:de:43:57:3b:8e:81:d2:89: e3:08:de:f9:6b:4a:53:c4:1e:e0:f1:7e:91:c5:2c: 51:36:b5:1d:a2:70:75:95:e0:33:ae:3d:23:b3:92: 5f:35:c9:4f:57:9b:93:c5:1a:5e:27:d9:b5:c8:e2: bc:5e:29:d3:cd:9a:34:9e:02:70:4f:c3:b3:51:d1: 28:3c:8f:c2:d6:f3:ba:04:68:61:8a:c8:56:f4:7c: 8a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CE:31:A5:11:1C:6C:26:28:57:70:39:B5:A7:80:3D:A5:40:54:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497425c9-ab16-3597-a620-6e1e432a2039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:451::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7d:9e:76:df:87:c9:85:84:f5:06:c9:b4:7c:89:ac:a3:0e: 4b:9d:a7:1d:10:a0:3f:8c:24:eb:f1:7d:5c:f4:01:9e:dd:bd: c4:2b:71:7a:39:cc:cb:08:2f:3e:19:45:dd:b7:3f:b9:0c:ee: 85:59:c3:28:69:9b:77:58:91:b5:15:8e:21:51:f8:32:32:92: 38:e3:71:91:28:8e:d4:42:53:b9:af:12:41:e7:9d:6c:e0:00: c3:a3:1a:41:c0:b2:5e:6a:6f:a4:1b:19:6a:83:88:10:ec:08: fc:c4:67:4e:63:81:47:c1:7c:11:7b:27:25:7b:70:fd:14:f1: 3d:a7:c1:c6:ea:16:56:f4:47:87:fa:0f:66:53:f9:3c:aa:30: f9:75:9d:1c:91:94:02:93:0e:04:76:2f:8e:dd:2d:7f:46:1d: 16:ea:68:37:41:03:27:1e:e6:11:27:4c:40:05:5e:63:52:7c: 56:a4:96:21:e6:97:41:56:86:45:82:c2:ef:c2:28:4e:f5:70: 7e:28:04:d9:d2:df:90:ce:f3:4f:f2:a7:ca:5a:58:a1:1d:55: 8c:e8:7c:ed:27:c3:a7:c5:74:3b:bc:86:60:7a:aa:44:cd:00: 97:8f:8b:d8:f8:5d:9e:00:85:c7:32:56:3a:32:53:ca:e3:99: 80:73:0d:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JePRH2qhuqtU1CsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGI4ZWJkZGUtZmQxMS00ZmRhLTg1NjQtMjNlNDRiMjZhNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlV2vTkH88yymxHzukPxSgoYMwg8QIP2ymfx pvtuusdrLX6vpiUkETxqLxRRtYTq77xpyGWdre8LL/Mv0gFYgkiaz83YEgsqMUUz DtQmX1LMldprpnVQBMBtFynhrUpV2GBvFIUfavM4DI0hMkradrY4FnIrjXR6L0oR jt/ZoAftl2cSFn8deqpwIAn9nRvZ5PmiRx3EkYdaec0hVLpZHCd2M8dvPEti0uB8 3kNXO46B0onjCN75a0pTxB7g8X6RxSxRNrUdonB1leAzrj0js5JfNclPV5uTxRpe J9m1yOK8XinTzZo0ngJwT8OzUdEoPI/C1vO6BGhhishW9HyKSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHXOMaURHGwmKFdwObWngD2lQFQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDk3NDI1YzktYWIxNi0z NTk3LWE2MjAtNmUxZTQzMmEyMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQRR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJ9nnbfh8mFhPUGybR8iayjDkudpx0QoD+MJOvxfVz0AZ7dvcQr cXo5zMsILz4ZRd23P7kM7oVZwyhpm3dYkbUVjiFR+DIykjjjcZEojtRCU7mvEkHn nWzgAMOjGkHAsl5qb6QbGWqDiBDsCPzEZ05jgUfBfBF7JyV7cP0U8T2nwcbqFlb0 R4f6D2ZT+TyqMPl1nRyRlAKTDgR2L47dLX9GHRbqaDdBAyce5hEnTEAFXmNSfFak liHml0FWhkWCwu/CKE71cH4oBNnS35DO80/yp8paWKEdVYzofO0nw6fFdDu8hmB6 qkTNAJePi9j4XZ4AhccyVjoyU8rjmYBzDUk= -----END CERTIFICATE-----Generated at Sat Oct 10 17:19:17 2026 by rpki-client