$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c17c9b5-bb6f-3c3e-8e6d-063b98e12543.roa File: 8c17c9b5-bb6f-3c3e-8e6d-063b98e12543.roa (raw, json) Hash identifier: 0qShyKZAnJzkgHY+C7g8mhZPxO9/WC8cVKCz0Ia1hRY= Subject key identifier: 9E:C0:6C:97:40:96:92:07:06:12:F0:F1:A1:57:92:6E:C6:D9:1F:8E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DA6B0233E539098FC9F85E080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c17c9b5-bb6f-3c3e-8e6d-063b98e12543.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 33657 IP address blocks: 2001:559:a023::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 17 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:23:3e:53:90:98:fc:9f:85:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=7e147628-0cf9-4be6-895a-5b3ae25c5e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5c:01:6d:8a:30:63:16:bf:3a:d9:b7:ae:20: 4f:77:eb:35:7a:76:f4:35:34:f0:9f:6c:9f:7c:54: 4d:8a:6d:ff:a5:db:c1:a5:44:c5:cb:b1:cc:c7:8f: d4:f5:8e:02:d5:27:42:bf:af:9c:ce:89:da:32:96: 85:f2:22:b8:bb:d3:40:8d:f6:71:08:f1:fe:6c:93: d4:1b:90:96:e2:31:f0:71:fb:22:b4:3f:9d:0e:bb: 1a:11:59:f6:e9:84:12:87:70:3a:3e:e3:15:c7:09: d1:15:e2:61:5e:0e:35:19:bc:a1:d8:09:22:d8:35: 29:4b:e0:2a:dc:df:4b:ce:f2:86:c1:48:1c:3b:50: bf:58:bc:80:e3:20:43:fb:84:29:7b:ee:e3:07:fb: a9:a5:d6:ba:68:b6:32:5f:5b:0c:f7:32:13:f1:27: fa:6b:44:6f:8f:0b:ff:1e:a5:5f:3e:5a:68:3a:f0: 99:57:fb:c8:70:ca:5e:e6:2f:ce:55:38:78:77:04: b0:f4:7c:4e:62:4a:d8:5f:63:af:5e:63:17:53:4c: 6c:ff:4e:d4:c1:25:5c:a4:35:bc:39:66:ac:0c:ad: ae:f4:c2:f6:c7:3c:ae:91:db:93:ea:09:a0:02:3a: f6:9d:13:19:f6:17:1b:bc:90:2d:e2:b3:e3:31:3e: 1a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C0:6C:97:40:96:92:07:06:12:F0:F1:A1:57:92:6E:C6:D9:1F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c17c9b5-bb6f-3c3e-8e6d-063b98e12543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a023::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:22:94:5d:ab:11:b0:f5:a1:8a:38:23:de:e0:49:21:c7:89: 27:09:0a:ed:d4:2c:1b:2c:94:5c:7f:b7:0b:99:93:d3:ae:49: 04:c3:75:37:44:ef:38:cb:88:fa:5e:ad:16:5d:86:0e:91:01: cd:c6:fa:da:f2:0e:f7:86:18:87:29:92:4a:cf:9a:55:16:72: 54:75:06:91:2e:4e:f8:a5:d4:87:3c:f6:d3:32:b7:91:65:87: 97:8c:63:0b:67:c0:4a:ea:5f:90:68:84:01:1e:a9:b2:15:40: 0d:d8:3d:ce:0d:09:db:e2:aa:c9:72:d9:09:55:9b:eb:ec:39: 56:fe:cf:7d:07:d9:38:5b:07:de:2e:d2:99:bb:2b:49:29:23: 94:ce:39:e3:4a:e7:18:85:50:5e:ba:c7:c5:93:15:71:e4:5b: 1f:39:ee:01:88:66:60:08:f2:0c:ee:b5:41:f1:a9:16:5c:75: 48:7d:34:77:27:95:4b:97:57:37:d5:9a:df:c1:ba:41:d1:fb: f5:95:11:81:3a:7b:72:25:b5:e7:00:82:a4:e4:1c:2f:a7:a4: fe:71:23:3a:82:03:35:6c:25:68:0f:4d:1f:1c:35:ed:98:ca: bb:a5:8d:7e:bf:32:78:93:57:f1:a1:a5:eb:83:68:6d:46:0a: bf:0d:58:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msCM+U5CY/J+F4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk N2UxNDc2MjgtMGNmOS00YmU2LTg5NWEtNWIzYWUyNWM1ZTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglwBbYowYxa/Otm3riBPd+s1enb0NTTwn2yf fFRNim3/pdvBpUTFy7HMx4/U9Y4C1SdCv6+czonaMpaF8iK4u9NAjfZxCPH+bJPU G5CW4jHwcfsitD+dDrsaEVn26YQSh3A6PuMVxwnRFeJhXg41Gbyh2Aki2DUpS+Aq 3N9LzvKGwUgcO1C/WLyA4yBD+4Qpe+7jB/uppda6aLYyX1sM9zIT8Sf6a0Rvjwv/ HqVfPlpoOvCZV/vIcMpe5i/OVTh4dwSw9HxOYkrYX2OvXmMXU0xs/07UwSVcpDW8 OWasDK2u9ML2xzyukduT6gmgAjr2nRMZ9hcbvJAt4rPjMT4arQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ7AbJdAlpIHBhLw8aFXkm7G2R+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGMxN2M5YjUtYmI2Zi0z YzNlLThlNmQtMDYzYjk4ZTEyNTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANkilF2rEbD1oYo4I97gSSHHiScJCu3ULBsslFx/twuZk9OuSQTD dTdE7zjLiPperRZdhg6RAc3G+tryDveGGIcpkkrPmlUWclR1BpEuTvil1Ic89tMy t5Flh5eMYwtnwErqX5BohAEeqbIVQA3YPc4NCdviqsly2QlVm+vsOVb+z30H2Thb B94u0pm7K0kpI5TOOeNK5xiFUF66x8WTFXHkWx857gGIZmAI8gzutUHxqRZcdUh9 NHcnlUuXVzfVmt/BukHR+/WVEYE6e3IltecAgqTkHC+npP5xIzqCAzVsJWgPTR8c Ne2YyruljX6/MniTV/GhpeuDaG1GCr8NWFE= -----END CERTIFICATE-----Generated at Fri May 15 11:22:54 2026 by rpki-client