$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2ae860-e04d-3caf-96a6-57d2517ea834.roa File: 5b2ae860-e04d-3caf-96a6-57d2517ea834.roa (raw, json) Hash identifier: sRyBYxS9DsgCtxTgl9c925jq4gE1jMqIcvw+5CJJJ0o= Subject key identifier: F5:B4:8D:68:6F:13:82:FD:D0:EC:19:AB:A5:CA:37:93:36:45:2B:44 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49829B86E5673A52A438C280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2ae860-e04d-3caf-96a6-57d2517ea834.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 2001:559:3d7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:9b:86:e5:67:3a:52:a4:38:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6f4dd450-1628-44f2-b08d-5b7531a2594c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4c:98:bd:c9:82:98:33:29:3b:1c:d5:12:10: 8b:b7:e4:09:f0:a8:31:7a:af:4f:18:fc:1c:b5:47: 22:b5:60:65:2b:6c:e0:6b:b2:a1:cb:de:7f:ac:e5: 15:b4:02:52:c1:ba:88:58:d6:3a:64:62:7a:9a:8a: 57:0e:8e:19:bb:56:83:b4:f3:fd:64:ba:e7:bb:ef: 29:1a:24:49:87:40:01:6c:d4:97:b5:38:d8:05:d6: 9d:34:1c:a1:d0:00:13:23:ef:f5:09:2b:19:ca:e7: de:e1:df:da:04:5a:76:0b:08:28:0b:43:44:ff:18: 04:16:d6:85:de:d6:41:f8:4c:81:f4:26:0a:d4:82: 9d:68:9d:5e:e9:04:6e:1b:44:29:e2:12:e5:01:9e: 50:61:d5:9b:d9:7b:e2:52:60:3e:bf:c5:d7:35:df: 9c:83:1f:c3:83:dd:94:96:3e:7e:36:95:2b:7e:44: 0e:27:00:eb:b4:99:e3:1d:10:b2:69:06:db:08:c4: eb:0b:4c:b7:f8:67:47:fb:6a:49:7e:c9:9c:cc:be: e3:f2:75:c7:86:e5:51:ac:29:65:94:a2:09:0a:75: fb:d5:3d:0f:de:7a:65:ff:55:f5:46:73:d9:cc:a5: 92:10:2a:a9:7b:c2:16:f4:e0:a0:c0:60:80:dd:07: 8a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:B4:8D:68:6F:13:82:FD:D0:EC:19:AB:A5:CA:37:93:36:45:2B:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b2ae860-e04d-3caf-96a6-57d2517ea834.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:3d7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:7a:4e:df:d1:a3:65:8f:c5:a1:d8:9e:6f:ee:5f:fa:95:ed: 50:d0:62:3e:ae:d8:b6:43:e6:04:2a:80:ba:b9:f5:96:80:8d: 82:b2:f6:21:75:92:5f:37:eb:71:fd:23:21:41:14:77:c1:19: da:a3:a0:cd:6c:2a:2b:bf:4b:46:93:ba:ad:a6:84:4a:ad:f4: 51:9e:ac:70:74:e1:e6:52:4e:89:cc:7a:c0:9e:a5:fe:cb:e9: 68:9f:a8:98:ed:97:b0:e2:fa:25:c6:04:fe:4a:8d:6c:f5:6f: 76:56:fc:23:a5:87:d3:e7:d7:2b:f7:47:4d:39:34:59:92:60: a2:05:89:66:30:d4:be:01:0e:c8:e5:89:f2:04:fb:2f:3d:31: fe:aa:f1:14:98:3f:82:3e:9f:ad:1f:48:48:d6:13:39:b9:22: 9e:e3:1a:e4:d6:4f:37:01:17:cd:6d:d9:34:73:b7:93:c2:59: 54:e4:0e:68:f9:e6:b8:b5:db:d3:db:80:e8:27:9d:89:35:29: 05:82:69:0b:5f:16:61:c2:6c:87:67:44:35:82:d0:cd:7d:71: 3a:19:63:60:8a:d9:e8:1a:84:a3:3f:70:17:97:4d:7d:ea:15: a0:cf:78:29:09:fd:7a:7c:e3:81:e5:c3:c6:93:a9:9e:92:54: ac:0a:24:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgpuG5Wc6UqQ4woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmY0ZGQ0NTAtMTYyOC00NGYyLWIwOGQtNWI3NTMxYTI1OTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikyYvcmCmDMpOxzVEhCLt+QJ8Kgxeq9PGPwc tUcitWBlK2zga7Khy95/rOUVtAJSwbqIWNY6ZGJ6mopXDo4Zu1aDtPP9ZLrnu+8p GiRJh0ABbNSXtTjYBdadNByh0AATI+/1CSsZyufe4d/aBFp2CwgoC0NE/xgEFtaF 3tZB+EyB9CYK1IKdaJ1e6QRuG0Qp4hLlAZ5QYdWb2XviUmA+v8XXNd+cgx/Dg92U lj5+NpUrfkQOJwDrtJnjHRCyaQbbCMTrC0y3+GdH+2pJfsmczL7j8nXHhuVRrCll lKIJCnX71T0P3npl/1X1RnPZzKWSECqpe8IW9OCgwGCA3QeKMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPW0jWhvE4L90OwZq6XKN5M2RStEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWIyYWU4NjAtZTA0ZC0z Y2FmLTk2YTYtNTdkMjUxN2VhODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQPX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHB6Tt/Ro2WPxaHYnm/uX/qV7VDQYj6u2LZD5gQqgLq59ZaAjYKy 9iF1kl8363H9IyFBFHfBGdqjoM1sKiu/S0aTuq2mhEqt9FGerHB04eZSTonMesCe pf7L6WifqJjtl7Di+iXGBP5KjWz1b3ZW/COlh9Pn1yv3R005NFmSYKIFiWYw1L4B DsjlifIE+y89Mf6q8RSYP4I+n60fSEjWEzm5Ip7jGuTWTzcBF81t2TRzt5PCWVTk Dmj55ri129PbgOgnnYk1KQWCaQtfFmHCbIdnRDWC0M19cToZY2CK2egahKM/cBeX TX3qFaDPeCkJ/Xp844Hlw8aTqZ6SVKwKJHA= -----END CERTIFICATE-----Generated at Fri Sep 25 09:10:46 2026 by rpki-client