$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5d469a9-72c7-3248-817d-a7d152ad209d.roa File: b5d469a9-72c7-3248-817d-a7d152ad209d.roa (raw, json) Hash identifier: A7APBCRsco8hfxxe8itHTc+b4MGyKDdwJxdfWfC3yJ0= Subject key identifier: 8A:C2:10:9C:CC:77:A4:E6:D2:2B:69:68:25:38:46:9B:1B:BB:15:EA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49789C09F54588B8FA0D5840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5d469a9-72c7-3248-817d-a7d152ad209d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 2001:559:8584::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:78:9c:09:f5:45:88:b8:fa:0d:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=99d89dbb-6109-4635-a5c9-dbfd64dfdef4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:31:be:b5:1d:02:bd:3b:3b:f4:81:da:8d:b6: 72:6e:65:6b:f0:65:69:c5:61:2d:7d:76:81:60:81: 2e:64:ed:6e:c8:6a:f2:cf:a0:cf:53:e3:ff:1a:c7: 17:84:b7:b3:6a:92:30:6c:ba:9a:d6:77:57:0b:68: 68:4a:ee:af:97:45:91:bb:cf:c0:08:f6:5c:4a:21: 8a:5a:f3:9d:6a:05:70:58:49:0c:2f:c3:94:97:2a: 91:9e:92:ca:f8:a2:98:88:15:9a:48:1f:3e:70:e0: 19:55:13:5b:09:86:85:28:51:52:20:0e:c4:30:e9: 17:13:7c:fd:3f:5b:7a:ef:98:be:e5:53:f5:f7:2e: 34:80:c9:a6:bb:31:30:0b:d2:fa:de:5a:c1:2b:3d: 20:a8:c9:27:a5:c0:0c:17:67:9b:dc:01:ed:14:01: f3:7d:09:d0:7f:d2:4e:31:7e:b0:e4:5e:50:08:bf: b9:52:61:f4:e1:6f:0d:f9:95:1e:a9:fe:e3:b1:26: 01:fd:e2:fc:c9:1d:37:34:2a:92:13:8a:12:c5:49: 29:0a:92:2b:0b:6d:05:81:14:5f:7d:f9:aa:ec:cf: 85:09:cf:de:d9:a3:55:5c:23:c5:13:e5:f5:53:41: c2:fe:27:e2:31:7f:f3:bb:17:b2:fe:87:e6:76:cc: 2f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C2:10:9C:CC:77:A4:E6:D2:2B:69:68:25:38:46:9B:1B:BB:15:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b5d469a9-72c7-3248-817d-a7d152ad209d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8584::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:53:c8:11:4b:a5:99:80:70:d2:dc:7a:c2:0a:40:df:09:70: 20:46:35:47:7e:e8:c2:48:69:88:b5:45:bc:f9:a4:97:9d:f2: ea:51:8b:47:77:cb:62:47:4c:a3:b5:59:18:38:b6:1b:05:1b: ff:0d:a8:b2:39:0f:88:9d:3e:45:07:09:70:80:f0:44:39:97: 8f:35:f8:2b:86:c6:1b:f0:69:a2:a2:b4:85:a3:8a:89:69:c9: 33:0b:84:34:ce:64:35:86:2f:b5:1c:e4:86:28:44:14:e9:e7: 7f:5f:f1:a3:18:6f:a6:29:1d:c8:30:52:7d:b4:75:70:6c:b4: 8f:b9:d6:c7:08:ce:2d:87:89:b5:6d:c9:26:9c:48:ad:06:b6: 67:76:f8:3c:67:1d:6a:a7:c8:57:50:bf:85:6f:ca:9c:8e:63: 04:29:13:e7:d1:74:09:21:23:d3:c0:a3:02:f7:b7:79:80:7d: f2:b5:55:58:8d:6a:4d:a1:61:13:ff:a9:db:27:ec:29:0d:86: 25:1a:99:4f:09:cd:ff:79:79:93:cb:f2:c6:f7:8c:7c:05:46: 04:35:59:d4:4f:78:15:2a:85:fb:13:71:0c:1f:a6:df:0c:59: e0:9d:d9:41:59:1c:f8:8e:b0:0f:cc:e9:b0:20:21:f9:3d:a2: 93:c3:f3:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JeJwJ9UWIuPoNWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTlkODlkYmItNjEwOS00NjM1LWE1YzktZGJmZDY0ZGZkZWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDG+tR0CvTs79IHajbZybmVr8GVpxWEtfXaB YIEuZO1uyGryz6DPU+P/GscXhLezapIwbLqa1ndXC2hoSu6vl0WRu8/ACPZcSiGK WvOdagVwWEkML8OUlyqRnpLK+KKYiBWaSB8+cOAZVRNbCYaFKFFSIA7EMOkXE3z9 P1t675i+5VP19y40gMmmuzEwC9L63lrBKz0gqMknpcAMF2eb3AHtFAHzfQnQf9JO MX6w5F5QCL+5UmH04W8N+ZUeqf7jsSYB/eL8yR03NCqSE4oSxUkpCpIrC20FgRRf ffmq7M+FCc/e2aNVXCPFE+X1U0HC/ifiMX/zuxey/ofmdswvtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIrCEJzMd6Tm0itpaCU4RpsbuxXqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjVkNDY5YTktNzJjNy0z MjQ4LTgxN2QtYTdkMTUyYWQyMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYWE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGtTyBFLpZmAcNLcesIKQN8JcCBGNUd+6MJIaYi1Rbz5pJed8upR i0d3y2JHTKO1WRg4thsFG/8NqLI5D4idPkUHCXCA8EQ5l481+CuGxhvwaaKitIWj iolpyTMLhDTOZDWGL7Uc5IYoRBTp539f8aMYb6YpHcgwUn20dXBstI+51scIzi2H ibVtySacSK0Gtmd2+DxnHWqnyFdQv4VvypyOYwQpE+fRdAkhI9PAowL3t3mAffK1 VViNak2hYRP/qdsn7CkNhiUamU8Jzf95eZPL8sb3jHwFRgQ1WdRPeBUqhfsTcQwf pt8MWeCd2UFZHPiOsA/M6bAgIfk9opPD8xc= -----END CERTIFICATE-----Generated at Fri Sep 25 20:35:49 2026 by rpki-client