$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7daec22-68b7-3b95-938d-40f68fa38d1f.roa File: a7daec22-68b7-3b95-938d-40f68fa38d1f.roa (raw, json) Hash identifier: XrwA7gocfm9pRLQDuPAZYxU8S55QuKlxXg/wiDxwSzU= Subject key identifier: 97:99:00:56:62:A1:1E:E7:0A:26:33:E9:DF:B7:36:7C:B5:90:F5:5E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497A6C0278B4F888FE4B1940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7daec22-68b7-3b95-938d-40f68fa38d1f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 2001:559:86ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:6c:02:78:b4:f8:88:fe:4b:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0afdfd62-f93f-4b69-97e5-69ad60ce959c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:b7:bc:a4:76:12:a5:ba:38:7e:23:b0:8b: 02:f3:6c:bb:9f:ef:17:c8:fc:0a:77:c3:0a:7d:f2: fe:64:71:ac:92:8e:93:df:7f:d8:5a:c7:45:b6:23: 5c:b4:e0:85:9a:1e:9a:c3:71:47:85:41:46:ad:d0: 1a:a7:1c:3e:61:f1:e7:91:65:3c:4c:92:c0:94:35: d8:1d:8f:0a:5c:ff:06:ff:5e:de:19:b6:d5:7d:8f: fa:5e:5f:df:15:0a:87:39:81:40:06:89:b8:8b:e0: 68:56:ad:ec:1a:c2:53:08:a8:48:ea:f1:2e:9a:d3: 3d:4d:63:00:cc:61:11:bf:35:f2:0d:38:ba:99:c1: 22:d1:a7:48:74:15:b3:7e:e4:9d:d1:0c:b9:ad:82: 5a:84:ee:2a:0a:c7:ee:6e:42:18:b1:31:0e:b4:22: 3f:8d:c7:9f:82:6d:fd:12:38:15:04:5c:5d:3c:f2: 6c:c0:00:f1:60:bd:11:7f:7a:7a:f8:b3:12:4c:14: e8:ac:a4:9c:1f:8d:ae:0e:1e:4f:37:93:fb:6f:f5: 51:0c:34:32:69:33:53:bf:8d:dd:13:3d:fd:22:0e: 09:21:c2:a0:5c:42:14:57:ac:73:01:7f:2a:b8:3e: 38:c6:87:30:12:f9:86:be:0a:f0:e8:52:40:1a:81: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:99:00:56:62:A1:1E:E7:0A:26:33:E9:DF:B7:36:7C:B5:90:F5:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7daec22-68b7-3b95-938d-40f68fa38d1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:86ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:ef:c8:fd:f4:10:c0:d6:9e:a6:e0:b7:f2:f6:2d:09:90:f9: 25:44:4a:fc:6d:40:13:36:8a:4b:4b:1f:04:20:d9:fe:c5:ca: 81:64:93:f8:dc:74:44:ca:e9:58:81:d3:d9:c6:75:71:bb:99: 80:53:a9:59:83:a2:98:f0:73:89:67:79:8f:3c:cb:92:35:f3: 60:07:85:d8:55:e2:42:61:13:be:36:1c:2e:2b:93:04:60:31: ed:4a:1f:f0:fc:d6:d6:38:e5:8c:5f:f7:cf:4d:ca:34:b1:be: 82:2c:7f:f9:a6:03:e0:09:dc:92:e2:eb:b9:a3:0c:65:82:69: 85:ea:d0:22:b9:95:91:41:63:71:61:ce:e9:c9:2a:f4:02:df: ba:7f:95:52:34:73:3d:47:06:47:e6:94:52:15:f1:d0:f9:7e: d6:0f:6e:ad:06:1a:a3:4b:5f:f6:02:ee:ac:e6:7e:61:3b:67: ad:b2:01:3a:70:94:8b:fb:01:8f:b4:39:06:0f:63:f2:90:95: 1d:12:21:2a:92:a2:ac:8a:16:b1:14:6b:e2:1c:39:38:34:36: 61:bc:a4:57:6b:29:f3:ed:ad:46:67:c4:b9:cb:06:c7:b8:a9: e8:b1:91:bc:34:70:75:2f:4f:d2:13:37:30:cc:72:5b:37:76: 92:af:9e:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JemwCeLT4iP5LGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGFmZGZkNjItZjkzZi00YjY5LTk3ZTUtNjlhZDYwY2U5NTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns+3vKR2EqW6OH4jsIsC82y7n+8XyPwKd8MK ffL+ZHGsko6T33/YWsdFtiNctOCFmh6aw3FHhUFGrdAapxw+YfHnkWU8TJLAlDXY HY8KXP8G/17eGbbVfY/6Xl/fFQqHOYFABom4i+BoVq3sGsJTCKhI6vEumtM9TWMA zGERvzXyDTi6mcEi0adIdBWzfuSd0Qy5rYJahO4qCsfubkIYsTEOtCI/jcefgm39 EjgVBFxdPPJswADxYL0Rf3p6+LMSTBTorKScH42uDh5PN5P7b/VRDDQyaTNTv43d Ez39Ig4JIcKgXEIUV6xzAX8quD44xocwEvmGvgrw6FJAGoFJNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJeZAFZioR7nCiYz6d+3Nny1kPVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdkYWVjMjItNjhiNy0z Yjk1LTkzOGQtNDBmNjhmYTM4ZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYbK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANvvyP30EMDWnqbgt/L2LQmQ+SVESvxtQBM2iktLHwQg2f7FyoFk k/jcdETK6ViB09nGdXG7mYBTqVmDopjwc4lneY88y5I182AHhdhV4kJhE742HC4r kwRgMe1KH/D81tY45Yxf989NyjSxvoIsf/mmA+AJ3JLi67mjDGWCaYXq0CK5lZFB Y3FhzunJKvQC37p/lVI0cz1HBkfmlFIV8dD5ftYPbq0GGqNLX/YC7qzmfmE7Z62y ATpwlIv7AY+0OQYPY/KQlR0SISqSoqyKFrEUa+IcOTg0NmG8pFdrKfPtrUZnxLnL Bse4qeixkbw0cHUvT9ITNzDMcls3dpKvniw= -----END CERTIFICATE-----Generated at Fri Sep 25 16:59:15 2026 by rpki-client