$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5b9c012-685a-30c7-ae82-fc5776a41df2.roa File: b5b9c012-685a-30c7-ae82-fc5776a41df2.roa (raw, json) Hash identifier: o8cWwEBDjvWcvDNa7ErD6JwsdnT5jil/I5z41tcJH3o= Subject key identifier: 46:FA:87:52:1D:04:63:C1:E5:B7:24:CC:EE:9C:18:45:30:68:DE:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4978CB94A5BC601DFB8AB418 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5b9c012-685a-30c7-ae82-fc5776a41df2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33662 IP address blocks: 2001:559:c157::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:cb:94:a5:bc:60:1d:fb:8a:b4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b8cd2953-6725-4c1b-91aa-8d2705c4c311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:70:4e:34:00:a5:7b:53:ff:9a:3b:26:c1:db: b0:58:45:ae:46:a0:14:29:ae:c8:63:b0:cb:e9:af: cf:00:08:37:9f:11:fb:ed:98:0e:5b:0b:cd:af:c3: e0:95:47:91:15:28:4b:67:c6:b3:a5:1a:6a:ac:86: 4c:74:2b:35:ec:e3:7d:06:a8:c7:57:6d:ba:79:01: 7e:25:f6:43:fe:d6:12:3f:80:15:f7:02:4c:63:bb: 43:e5:a4:83:10:8d:b0:58:78:20:98:ed:a9:33:83: 3c:70:b5:a3:41:29:8c:36:cc:5f:a3:3b:2b:67:34: 2c:a7:d8:7a:12:76:c6:0e:fd:01:f1:b2:41:38:5e: 21:19:4f:ca:8a:a8:42:f5:94:6b:c8:75:7b:e5:46: 82:24:db:1f:06:7f:06:45:8c:85:e6:33:3e:1d:69: c9:f6:e1:ae:58:b3:8d:59:e0:90:79:c4:e2:81:f7: df:4e:7e:b1:a7:c0:0e:56:43:ee:6c:c8:de:4a:83: 31:81:c0:b5:ff:e9:9f:36:28:65:a6:c4:37:db:22: f6:ab:1a:63:81:2b:b3:79:84:9a:8c:46:61:51:b5: ec:01:33:d1:1e:c8:c6:9a:2d:be:e9:80:29:37:24: fb:4d:f8:0a:81:d7:f3:c5:11:21:24:38:ec:4b:56: 6f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:FA:87:52:1D:04:63:C1:E5:B7:24:CC:EE:9C:18:45:30:68:DE:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5b9c012-685a-30c7-ae82-fc5776a41df2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c157::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:19:f8:9f:e5:e2:56:56:1b:eb:14:94:13:09:31:a9:81:f4: a5:1b:75:6e:e0:a8:2c:b1:23:d2:79:00:60:70:49:af:f2:3c: 59:a0:9f:22:a1:ff:bf:4e:71:93:5d:a3:c4:18:77:2d:ad:b1: 2e:2d:37:28:74:9f:9f:81:2d:a9:70:ad:e4:9f:82:8f:03:b3: 07:af:6c:e8:3f:86:d5:d5:05:b6:dd:e5:90:06:d7:e3:30:04: 77:e5:aa:02:27:74:99:1e:3e:fc:d1:6e:5d:06:b8:61:23:f6: 7c:5f:52:52:ed:ea:02:77:e2:37:75:7a:20:fa:49:7c:36:14: 82:ce:34:e8:d4:f6:f1:9a:1f:21:b5:c1:b0:ed:34:98:bd:bd: 7d:2b:58:7f:e8:cb:ea:36:d8:50:80:42:34:5d:bb:a1:0c:32: 01:0c:11:ef:62:82:64:f5:0f:1f:4d:cf:b2:97:31:af:8e:a2: b6:96:fe:cd:25:be:05:a2:36:89:f6:b9:0b:c6:4e:7d:7f:e4: 8d:2e:39:68:97:98:67:98:64:21:b9:52:e3:45:de:d1:8b:03: 07:7a:72:fe:6a:7f:36:f4:60:a7:db:8d:c1:62:b3:68:7e:08: f2:45:b0:55:ef:8f:d7:16:af:95:1c:d5:b9:52:c6:85:d0:0f: 57:cf:4f:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JeMuUpbxgHfuKtBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjhjZDI5NTMtNjcyNS00YzFiLTkxYWEtOGQyNzA1YzRjMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3BONACle1P/mjsmwduwWEWuRqAUKa7IY7DL 6a/PAAg3nxH77ZgOWwvNr8PglUeRFShLZ8azpRpqrIZMdCs17ON9BqjHV226eQF+ JfZD/tYSP4AV9wJMY7tD5aSDEI2wWHggmO2pM4M8cLWjQSmMNsxfozsrZzQsp9h6 EnbGDv0B8bJBOF4hGU/KiqhC9ZRryHV75UaCJNsfBn8GRYyF5jM+HWnJ9uGuWLON WeCQecTigfffTn6xp8AOVkPubMjeSoMxgcC1/+mfNihlpsQ32yL2qxpjgSuzeYSa jEZhUbXsATPRHsjGmi2+6YApNyT7TfgKgdfzxREhJDjsS1ZvHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEb6h1IdBGPB5bckzO6cGEUwaN4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjViOWMwMTItNjg1YS0z MGM3LWFlODItZmM1Nzc2YTQxZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcFX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwZ+J/l4lZWG+sUlBMJMamB9KUbdW7gqCyxI9J5AGBwSa/yPFmg nyKh/79OcZNdo8QYdy2tsS4tNyh0n5+BLalwreSfgo8DswevbOg/htXVBbbd5ZAG 1+MwBHflqgIndJkePvzRbl0GuGEj9nxfUlLt6gJ34jd1eiD6SXw2FILONOjU9vGa HyG1wbDtNJi9vX0rWH/oy+o22FCAQjRdu6EMMgEMEe9igmT1Dx9Nz7KXMa+OoraW /s0lvgWiNon2uQvGTn1/5I0uOWiXmGeYZCG5UuNF3tGLAwd6cv5qfzb0YKfbjcFi s2h+CPJFsFXvj9cWr5Uc1blSxoXQD1fPTzE= -----END CERTIFICATE-----Generated at Sun Oct 4 22:18:37 2026 by rpki-client