$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2433046-8205-30ab-b9ed-4e643da29e58.roa File: e2433046-8205-30ab-b9ed-4e643da29e58.roa (raw, json) Hash identifier: kONk5sinh8NOCW0ydR24f8DweQQ6pKmZJu8Mn5zWAoE= Subject key identifier: 1D:98:41:FA:F9:CC:55:CE:C5:DA:BF:F9:55:0A:61:35:35:11:D9:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4982A4C40D6E5ED23299CF40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2433046-8205-30ab-b9ed-4e643da29e58.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 2001:559:8101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:a4:c4:0d:6e:5e:d2:32:99:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=505b3536-6dad-4c11-82da-552382f3c93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1e:a7:76:dc:c4:aa:c8:95:95:87:0b:d4:77: 69:a9:98:c6:90:f7:a2:a5:dc:0c:15:d3:3e:bf:2d: 68:76:81:d0:74:fb:c3:2c:0b:73:96:47:1d:a5:e3: bf:d2:68:60:7a:10:7d:b4:32:b7:76:bf:b4:3b:71: 35:d4:f0:0f:e7:9c:d1:61:3a:55:30:c6:83:b7:f8: f6:97:a5:7f:db:59:28:7c:42:0b:49:41:6d:9f:1d: 21:3e:f3:a2:90:53:3c:c5:d0:bf:8d:8a:70:79:10: ce:e9:8e:26:44:6b:4d:b3:0d:5d:f7:78:b1:b4:67: f1:ae:e8:fe:47:25:3b:a3:b2:12:9c:e3:72:0d:54: 8f:7f:9f:b6:aa:b7:5b:63:af:53:64:28:6d:36:4a: 64:b6:be:e8:62:72:c1:ea:32:b3:e5:59:a1:69:7c: 4c:06:80:95:a1:dd:e8:9a:e6:f8:d7:24:75:c5:8c: fb:44:ff:44:99:73:2a:3e:db:48:85:3a:34:34:d8: f2:64:06:50:54:66:31:50:22:42:03:eb:6d:ab:21: 24:3d:9e:8e:9e:98:0e:03:c3:7c:7b:79:f7:91:be: 4c:36:24:87:c6:e9:ae:20:99:d2:79:92:38:86:e0: be:22:2d:5d:09:b3:22:b8:6f:64:67:14:66:78:40: c4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:98:41:FA:F9:CC:55:CE:C5:DA:BF:F9:55:0A:61:35:35:11:D9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2433046-8205-30ab-b9ed-4e643da29e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8101::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:07:38:9c:54:4e:34:9d:55:bf:38:c9:d4:24:02:57:e1:e8: 92:22:25:12:b5:03:cd:d0:ef:d7:5f:1a:54:bc:6a:05:9b:bc: 67:da:2b:c7:48:8a:a5:84:66:b7:88:ce:84:e4:19:81:a6:7f: ac:02:b7:db:44:a8:e3:0a:1c:cb:84:7d:94:fa:58:4e:b0:d6: 4e:eb:24:3c:3b:41:7b:58:51:03:dd:84:9d:1e:9b:16:5d:a3: 8f:7f:a3:99:2e:61:e0:bc:e0:0d:63:f8:3c:eb:48:34:a0:6a: f1:0a:1d:b9:aa:19:72:02:bd:23:5f:2d:63:67:98:14:e6:82: a5:76:1a:c5:81:96:30:86:b8:f9:ce:bf:57:cf:14:17:2d:1a: c6:3c:91:00:cd:a3:64:bf:60:98:1b:72:83:9c:29:21:d4:08: 09:8b:44:39:3a:b7:71:61:6d:a4:5f:7d:4d:70:0e:ab:ee:31: 4c:12:fe:0f:1b:15:42:4a:10:12:cb:a8:82:21:2a:93:e9:ca: d7:30:84:e2:a0:21:6c:61:ae:58:df:34:3e:bd:57:1b:98:29: 04:a2:55:cc:2f:5a:60:a1:56:e8:53:f2:a6:e6:10:42:4a:96: 0e:6d:2e:99:86:3d:5a:52:69:ed:01:ad:6e:f5:77:86:45:04: c8:b8:1d:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgqTEDW5e0jKZz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTA1YjM1MzYtNmRhZC00YzExLTgyZGEtNTUyMzgyZjNjOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB6ndtzEqsiVlYcL1HdpqZjGkPeipdwMFdM+ vy1odoHQdPvDLAtzlkcdpeO/0mhgehB9tDK3dr+0O3E11PAP55zRYTpVMMaDt/j2 l6V/21kofEILSUFtnx0hPvOikFM8xdC/jYpweRDO6Y4mRGtNsw1d93ixtGfxruj+ RyU7o7ISnONyDVSPf5+2qrdbY69TZChtNkpktr7oYnLB6jKz5VmhaXxMBoCVod3o mub41yR1xYz7RP9EmXMqPttIhTo0NNjyZAZQVGYxUCJCA+ttqyEkPZ6OnpgOA8N8 e3n3kb5MNiSHxumuIJnSeZI4huC+Ii1dCbMiuG9kZxRmeEDEhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB2YQfr5zFXOxdq/+VUKYTU1EdlsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTI0MzMwNDYtODIwNS0z MGFiLWI5ZWQtNGU2NDNkYTI5ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYEB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIsHOJxUTjSdVb84ydQkAlfh6JIiJRK1A83Q79dfGlS8agWbvGfa K8dIiqWEZreIzoTkGYGmf6wCt9tEqOMKHMuEfZT6WE6w1k7rJDw7QXtYUQPdhJ0e mxZdo49/o5kuYeC84A1j+DzrSDSgavEKHbmqGXICvSNfLWNnmBTmgqV2GsWBljCG uPnOv1fPFBctGsY8kQDNo2S/YJgbcoOcKSHUCAmLRDk6t3FhbaRffU1wDqvuMUwS /g8bFUJKEBLLqIIhKpPpytcwhOKgIWxhrljfND69VxuYKQSiVcwvWmChVuhT8qbm EEJKlg5tLpmGPVpSae0BrW71d4ZFBMi4HSg= -----END CERTIFICATE-----Generated at Fri Sep 25 05:01:20 2026 by rpki-client