$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1b52d2f-4f2d-3879-9192-a89ff3be441a.roa File: d1b52d2f-4f2d-3879-9192-a89ff3be441a.roa (raw, json) Hash identifier: 5XFsJlcnPrzTprQH0rmW5GBKga1aPf8QzPaxvHD0D/A= Subject key identifier: 9F:B7:1A:1A:FA:6F:0A:5D:C6:07:D7:22:2F:F3:E9:4A:72:9E:F0:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4981032E3DF8998F3BE56160 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1b52d2f-4f2d-3879-9192-a89ff3be441a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 2001:559:87ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:03:2e:3d:f8:99:8f:3b:e5:61:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d3714839-d489-4d16-8e4e-7caf62d3f722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d8:60:03:19:a9:b9:b4:dc:ad:2b:b8:8f:33: f0:81:13:1f:54:2f:c5:c2:43:7e:f2:36:8a:fe:42: 73:7d:1b:68:f2:b4:d9:a4:74:cf:b8:34:2c:ce:2b: 6c:e2:bb:b0:53:fa:59:0d:8e:69:e8:e0:d6:bf:16: 9a:5c:3f:a6:6e:9e:0c:50:3d:8d:f1:3c:62:cd:82: d1:18:cb:7a:97:d7:cd:99:a2:23:c8:86:23:d3:f3: e2:3a:15:d8:41:50:03:06:93:01:1f:32:9e:3c:68: ee:e2:05:bf:0e:0c:0c:0f:a5:7d:90:a2:4a:f0:ba: 5c:4c:c5:f4:bf:0f:a9:e9:7c:bd:1a:32:d5:b6:0d: 29:47:93:0c:30:4b:da:71:2a:e6:00:41:3a:4e:d9: 1a:98:ff:98:ec:f8:56:58:04:d4:38:8c:ba:f2:dd: 22:8b:55:81:ab:25:72:8b:21:21:5a:4d:21:c3:72: b8:e6:9b:4d:01:ae:af:d8:cc:c6:07:64:ed:c6:0b: f4:5c:11:48:b1:1b:d0:5c:00:44:d7:a4:16:ab:03: 8f:a4:38:af:41:44:57:50:2a:8d:f2:26:29:4b:e4: 8f:a9:79:c5:db:21:b3:fe:db:16:77:01:26:18:23: e7:d7:26:e5:79:c2:42:68:13:55:bf:de:d9:b4:7f: cc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B7:1A:1A:FA:6F:0A:5D:C6:07:D7:22:2F:F3:E9:4A:72:9E:F0:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1b52d2f-4f2d-3879-9192-a89ff3be441a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c0:0f:6d:aa:87:d7:bb:ad:19:84:11:17:91:87:fa:16:36: d0:e5:3e:4c:ae:70:f6:3b:89:26:5d:4d:fc:20:6b:63:05:ee: 4a:b8:ad:8b:af:2a:9d:4b:cb:ee:8b:28:d0:84:6c:e0:6f:c0: 2e:54:09:c8:96:98:68:19:bb:7a:98:c3:fe:3f:07:68:62:cd: c7:dd:39:b3:c7:81:2b:a7:0c:d1:7b:93:59:48:97:fa:78:3e: 6f:f1:51:c9:8b:df:e9:83:5a:b5:d4:39:7c:b5:19:4e:3b:d7: d1:3d:06:57:c3:0c:38:91:76:cb:1b:e4:13:fa:5f:a2:e5:01: 45:97:7a:7d:8f:00:62:83:43:2c:81:3f:c3:b4:83:cb:3c:c1: e5:49:c9:9f:a7:25:54:f3:6a:d6:15:ff:d8:b4:e7:e5:a3:c1: 19:6c:70:4a:a2:a1:43:87:ec:01:6b:42:a9:d7:4e:72:ed:88: c1:6d:40:46:50:43:13:ee:57:d0:e2:7a:76:50:bb:fe:99:e4: 88:4a:0c:89:a4:6e:bf:84:9a:fc:7c:73:c9:99:9c:61:55:0e: 91:62:49:9e:9a:34:22:48:12:9f:e4:f6:27:82:65:4d:cb:d9: 7c:75:ba:77:d1:e4:1a:d3:45:03:01:ce:6c:b5:ab:db:eb:d7: 90:ca:fd:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgQMuPfiZjzvlYWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDM3MTQ4MzktZDQ4OS00ZDE2LThlNGUtN2NhZjYyZDNmNzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNhgAxmpubTcrSu4jzPwgRMfVC/FwkN+8jaK /kJzfRto8rTZpHTPuDQszits4ruwU/pZDY5p6ODWvxaaXD+mbp4MUD2N8TxizYLR GMt6l9fNmaIjyIYj0/PiOhXYQVADBpMBHzKePGju4gW/DgwMD6V9kKJK8LpcTMX0 vw+p6Xy9GjLVtg0pR5MMMEvacSrmAEE6TtkamP+Y7PhWWATUOIy68t0ii1WBqyVy iyEhWk0hw3K45ptNAa6v2MzGB2Ttxgv0XBFIsRvQXABE16QWqwOPpDivQURXUCqN 8iYpS+SPqXnF2yGz/tsWdwEmGCPn1yblecJCaBNVv97ZtH/M2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ+3Ghr6bwpdxgfXIi/z6UpynvCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFiNTJkMmYtNGYyZC0z ODc5LTkxOTItYTg5ZmYzYmU0NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYft MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADvAD22qh9e7rRmEEReRh/oWNtDlPkyucPY7iSZdTfwga2MF7kq4 rYuvKp1Ly+6LKNCEbOBvwC5UCciWmGgZu3qYw/4/B2hizcfdObPHgSunDNF7k1lI l/p4Pm/xUcmL3+mDWrXUOXy1GU4719E9BlfDDDiRdssb5BP6X6LlAUWXen2PAGKD QyyBP8O0g8s8weVJyZ+nJVTzatYV/9i05+WjwRlscEqioUOH7AFrQqnXTnLtiMFt QEZQQxPuV9DienZQu/6Z5IhKDImkbr+Emvx8c8mZnGFVDpFiSZ6aNCJIEp/k9ieC ZU3L2Xx1unfR5BrTRQMBzmy1q9vr15DK/Y0= -----END CERTIFICATE-----Generated at Sat Sep 26 09:27:30 2026 by rpki-client