$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a655ff64-47a3-37eb-aeb6-300fd73c4305.roa File: a655ff64-47a3-37eb-aeb6-300fd73c4305.roa (raw, json) Hash identifier: wshuLJsE9vZRLFHJlJbxvewszbPWAibgT+S1Fq+lm6Y= Subject key identifier: F3:B0:C9:9C:34:F2:48:0D:C1:34:04:94:EA:65:F0:4F:D0:D1:19:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4980A02E7FEBD21B07440F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a655ff64-47a3-37eb-aeb6-300fd73c4305.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21508 IP address blocks: 2001:559:c1ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:a0:2e:7f:eb:d2:1b:07:44:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9c6538e7-5eda-40f5-b99c-6066b3120940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:49:6c:19:23:cb:7c:86:db:04:d2:82:66:58: af:56:b8:1b:b2:2e:1f:6d:12:56:4b:f7:4e:69:da: df:71:05:6d:dc:83:fb:28:ad:bf:e5:3a:e5:2e:b7: 29:0c:8c:0d:2f:e8:78:e2:02:76:b0:9b:e3:3e:9d: 5e:6e:dd:32:8c:b0:67:da:bb:af:07:be:02:9b:ce: 75:bd:42:4c:65:11:1d:97:07:b6:34:dd:eb:2d:fe: c0:54:eb:30:04:1b:ae:fe:03:81:bd:e6:44:fb:00: cd:72:3b:95:c7:22:13:e0:9d:a0:9d:c0:de:37:d6: ea:df:25:2e:34:dd:f9:53:5c:4d:a4:a8:13:83:bc: cd:af:6d:d1:0b:23:49:20:c7:3d:ee:52:00:fb:23: 74:fb:1d:36:ac:91:cc:48:be:08:1f:c4:c4:e2:ea: 64:ef:1f:9c:57:db:fb:7a:59:f9:36:eb:f8:3f:f3: 7d:aa:43:0a:20:7e:cc:c4:f4:a5:31:ec:09:d1:a6: ec:eb:79:c9:ea:28:a8:1e:84:cc:3b:6d:ca:d5:02: cf:28:51:1d:fc:9d:33:79:d2:0b:ef:01:e5:3d:9c: 7d:eb:14:35:2d:fb:fd:fb:eb:ea:f0:e2:dc:98:e4: f7:82:d9:3b:12:3c:0c:de:1d:3e:88:14:f3:81:33: 33:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B0:C9:9C:34:F2:48:0D:C1:34:04:94:EA:65:F0:4F:D0:D1:19:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a655ff64-47a3-37eb-aeb6-300fd73c4305.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c1ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c4:b2:20:44:63:5c:c7:6f:84:bc:ca:df:3b:c9:9f:c2:c3: 14:1c:54:83:b8:28:6f:8b:17:6b:2d:f0:1e:5e:1e:be:85:4c: 2f:4f:aa:fb:61:85:e7:cd:2a:f2:5f:32:34:fd:93:09:fc:95: 4f:56:8f:25:8d:44:be:97:20:15:b5:43:28:d2:74:61:1a:ef: 2e:ae:33:fa:5d:66:18:db:c3:a5:8d:60:1e:e9:e5:15:0d:8b: 63:59:92:fa:84:d0:e3:fa:1c:db:31:c3:5b:1e:95:98:75:bb: 14:b7:97:53:02:91:ab:b6:88:50:45:e1:a4:f6:48:36:e6:ea: bf:62:79:d0:88:a1:cd:d9:2e:99:5a:44:c1:a3:8a:be:d3:81: 32:91:0a:de:83:5b:d5:e2:28:6b:5a:e7:4b:22:49:dd:2e:52: bf:2e:ac:7a:0d:78:79:69:35:f8:a0:83:13:d4:b0:8f:11:de: 60:e2:59:f8:4e:df:ef:20:35:23:4e:95:2d:4d:84:d7:02:23: b2:5f:b2:3a:39:0e:5e:2c:9c:e1:68:e4:c4:d1:66:a3:30:a2: 88:5d:f9:84:69:b9:d4:99:6d:5b:ef:26:01:05:9b:8e:90:9d: 3f:bf:d3:f4:97:c4:ed:bc:96:81:e6:67:4c:2f:62:3c:15:d2: 43:3d:66:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgKAuf+vSGwdEDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWM2NTM4ZTctNWVkYS00MGY1LWI5OWMtNjA2NmIzMTIwOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnElsGSPLfIbbBNKCZlivVrgbsi4fbRJWS/dO adrfcQVt3IP7KK2/5TrlLrcpDIwNL+h44gJ2sJvjPp1ebt0yjLBn2ruvB74Cm851 vUJMZREdlwe2NN3rLf7AVOswBBuu/gOBveZE+wDNcjuVxyIT4J2gncDeN9bq3yUu NN35U1xNpKgTg7zNr23RCyNJIMc97lIA+yN0+x02rJHMSL4IH8TE4upk7x+cV9v7 eln5Nuv4P/N9qkMKIH7MxPSlMewJ0abs63nJ6iioHoTMO23K1QLPKFEd/J0zedIL 7wHlPZx96xQ1Lfv9++vq8OLcmOT3gtk7EjwM3h0+iBTzgTMz0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPOwyZw08kgNwTQElOpl8E/Q0RniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTY1NWZmNjQtNDdhMy0z N2ViLWFlYjYtMzAwZmQ3M2M0MzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcHK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACrEsiBEY1zHb4S8yt87yZ/CwxQcVIO4KG+LF2st8B5eHr6FTC9P qvthhefNKvJfMjT9kwn8lU9WjyWNRL6XIBW1QyjSdGEa7y6uM/pdZhjbw6WNYB7p 5RUNi2NZkvqE0OP6HNsxw1selZh1uxS3l1MCkau2iFBF4aT2SDbm6r9iedCIoc3Z LplaRMGjir7TgTKRCt6DW9XiKGta50siSd0uUr8urHoNeHlpNfiggxPUsI8R3mDi WfhO3+8gNSNOlS1NhNcCI7Jfsjo5Dl4snOFo5MTRZqMwoohd+YRpudSZbVvvJgEF m46QnT+/0/SXxO28loHmZ0wvYjwV0kM9ZqY= -----END CERTIFICATE-----Generated at Sat Sep 26 02:30:50 2026 by rpki-client