$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/955c0b08-0c65-3458-a01c-ac612529af7d.roa File: 955c0b08-0c65-3458-a01c-ac612529af7d.roa (raw, json) Hash identifier: ha0bMeC7lZVjXZ/SonjY2FMALAUv7h6Lv7VsONj26/4= Subject key identifier: 8C:02:2C:5A:79:1C:DC:41:76:3C:7E:AA:84:B3:0E:73:C6:A9:F1:F3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4981564C4BF72007B7E86600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/955c0b08-0c65-3458-a01c-ac612529af7d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33668 IP address blocks: 2001:559:82bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:56:4c:4b:f7:20:07:b7:e8:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=eb1daa78-6816-4778-9f05-7df1f9430fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b4:45:17:21:33:18:a3:ac:01:46:8f:f5:1b: 63:2c:df:ff:e8:99:8b:b1:a5:ab:cd:d2:ac:de:3e: 0c:a6:16:76:02:51:60:f4:18:e5:cc:af:dc:b5:d6: f6:5b:ad:5b:d8:54:1d:45:1c:62:af:76:69:44:7b: 47:66:93:07:33:cb:7a:fd:f0:b9:f9:d0:1e:4b:b2: ab:0f:e4:2a:d4:ba:5b:52:d3:29:50:91:36:dc:d7: 67:17:9e:f0:60:81:89:62:1e:d1:99:fc:ea:82:5f: 16:85:3c:6b:e7:a1:97:ba:1b:49:48:c7:44:3b:89: ba:b2:df:34:51:a5:24:b5:fc:53:4e:18:c9:14:51: cc:38:a9:d6:62:fd:cc:4b:54:b3:23:14:d0:23:93: 9e:0f:be:e7:75:6b:9f:9c:2f:e9:36:b0:cd:59:3d: ee:93:87:25:ec:61:dd:0e:cd:ec:6a:d4:1d:29:7b: 2d:71:9d:eb:76:93:05:35:ec:46:88:0c:aa:72:91: e8:84:59:b3:ce:44:3f:bf:3a:0c:c3:9f:51:ca:d3: 51:54:ed:98:52:1d:21:c2:20:95:b8:08:c5:7b:9e: 6a:33:80:bf:7f:16:ee:c3:d9:34:56:92:2d:97:53: 6d:44:fc:60:98:34:d5:bf:38:10:cd:35:82:cd:6b: 3b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:02:2C:5A:79:1C:DC:41:76:3C:7E:AA:84:B3:0E:73:C6:A9:F1:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/955c0b08-0c65-3458-a01c-ac612529af7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:82bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:6b:b4:6b:46:7d:4e:40:83:b5:42:7d:a2:e1:88:0c:a1:c0: 45:31:74:83:40:00:2f:8a:98:82:4b:86:38:aa:55:ee:88:ed: 72:1d:23:81:1a:3e:84:ef:a6:3b:10:51:8a:91:65:8b:72:f8: 06:25:2e:6d:4a:84:4e:28:e7:b2:df:43:57:ae:50:ee:2e:9a: cb:65:b0:5b:b6:7e:38:94:bb:79:f4:ab:48:09:b7:53:60:83: e4:a9:b8:4a:49:c3:d6:ac:7b:de:8e:55:c7:e1:1d:74:7a:f7: 79:fe:eb:37:54:04:2f:93:70:4f:2f:0c:a0:5d:91:fe:dc:c9: f9:26:87:82:18:57:98:3b:fa:6b:ae:37:cb:bd:48:c7:d3:37: 92:87:04:d3:57:0b:df:25:a7:0c:f5:64:7e:9e:f9:b9:09:ab: 93:c7:2a:9e:22:2b:d9:17:65:38:27:04:0f:4e:ee:8e:d6:6b: 5a:c2:23:09:85:6f:b3:bf:27:32:3b:46:c5:37:ef:ae:b6:8a: 6a:52:6a:64:22:31:66:ea:c4:d0:ce:5c:e2:91:b2:0e:45:eb: bb:f7:bd:59:11:51:b8:dd:6c:c1:10:7d:0d:f2:07:c1:00:44: c4:67:ee:be:24:d8:5b:cd:77:ec:40:fb:3a:0a:28:56:bf:32: fe:68:7b:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgVZMS/cgB7foZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWIxZGFhNzgtNjgxNi00Nzc4LTlmMDUtN2RmMWY5NDMwZmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bRFFyEzGKOsAUaP9RtjLN//6JmLsaWrzdKs 3j4MphZ2AlFg9BjlzK/ctdb2W61b2FQdRRxir3ZpRHtHZpMHM8t6/fC5+dAeS7Kr D+Qq1LpbUtMpUJE23NdnF57wYIGJYh7Rmfzqgl8WhTxr56GXuhtJSMdEO4m6st80 UaUktfxTThjJFFHMOKnWYv3MS1SzIxTQI5OeD77ndWufnC/pNrDNWT3uk4cl7GHd Ds3satQdKXstcZ3rdpMFNexGiAyqcpHohFmzzkQ/vzoMw59RytNRVO2YUh0hwiCV uAjFe55qM4C/fxbuw9k0VpItl1NtRPxgmDTVvzgQzTWCzWs7xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIwCLFp5HNxBdjx+qoSzDnPGqfHzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU1YzBiMDgtMGM2NS0z NDU4LWEwMWMtYWM2MTI1MjlhZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYK9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANNrtGtGfU5Ag7VCfaLhiAyhwEUxdINAAC+KmIJLhjiqVe6I7XId I4EaPoTvpjsQUYqRZYty+AYlLm1KhE4o57LfQ1euUO4umstlsFu2fjiUu3n0q0gJ t1Ngg+SpuEpJw9ase96OVcfhHXR693n+6zdUBC+TcE8vDKBdkf7cyfkmh4IYV5g7 +muuN8u9SMfTN5KHBNNXC98lpwz1ZH6e+bkJq5PHKp4iK9kXZTgnBA9O7o7Wa1rC IwmFb7O/JzI7RsU37662impSamQiMWbqxNDOXOKRsg5F67v3vVkRUbjdbMEQfQ3y B8EARMRn7r4k2FvNd+xA+zoKKFa/Mv5oe5U= -----END CERTIFICATE-----Generated at Sat Sep 26 16:12:19 2026 by rpki-client