$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8ae09de-9073-3a3b-a81f-3951e69a3c78.roa File: f8ae09de-9073-3a3b-a81f-3951e69a3c78.roa (raw, json) Hash identifier: CmiBkPXSHltuIcnuBL1SGgcwq2D2838ZR3l7qjlPvdA= Subject key identifier: DD:AE:62:EB:3A:41:FC:81:8B:1C:AA:2A:1C:5A:8D:06:82:60:4B:DF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4977DF1A1413C7D279696180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8ae09de-9073-3a3b-a81f-3951e69a3c78.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 2001:559:86d0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:df:1a:14:13:c7:d2:79:69:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=411e1a00-ccb8-4fc0-a961-f36e49e6156b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d3:b2:a1:74:c2:53:8d:df:2f:47:16:6e:67: 69:a5:f2:fc:f1:68:a9:0e:eb:b3:fd:6c:8c:72:56: 89:72:4d:a1:e2:38:8e:fa:fc:cf:84:4c:6e:bf:ce: 66:ce:90:59:d9:f8:2f:34:24:42:61:8c:66:29:41: ae:2a:3a:34:6d:40:f3:3e:12:e9:4b:71:32:b6:42: be:66:e2:1d:51:38:4d:50:d2:d7:0c:dd:dc:e4:b8: d3:cb:c9:9b:23:e3:ee:c4:92:c9:9d:8e:53:c4:42: bb:a1:f6:f3:93:9d:82:15:64:e5:f4:38:77:41:9a: 52:96:db:8a:5e:72:9b:fd:11:92:a7:20:82:a1:b0: 81:35:3a:7f:5a:60:8d:e3:19:15:bd:b5:86:9e:ad: ef:e9:4d:ea:7b:1a:bf:7a:bd:83:7b:c6:a0:65:1f: d6:87:b2:fa:04:ea:68:66:ab:4f:86:99:db:5b:6e: 48:e6:38:fd:b7:55:99:04:b8:dc:24:46:ab:16:12: ec:43:2b:bb:cb:09:c7:0c:bf:dc:22:2b:3b:b6:61: 22:a6:9a:54:2e:0a:e1:8e:11:3a:83:a1:82:a4:04: 06:fe:7f:bd:72:0b:b9:b5:c2:b9:6b:13:c3:f3:ee: 18:ed:50:38:4d:e7:d3:50:71:71:a9:b2:c0:be:6a: 08:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AE:62:EB:3A:41:FC:81:8B:1C:AA:2A:1C:5A:8D:06:82:60:4B:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f8ae09de-9073-3a3b-a81f-3951e69a3c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:86d0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:3e:aa:9e:3a:20:a8:ef:67:9a:3d:55:d2:18:35:bf:c6:ce: 3a:44:72:bf:ab:61:23:74:a4:f7:62:b6:35:36:71:64:c0:44: dd:e9:5f:c1:1c:a6:90:e6:3e:28:80:20:b6:0f:85:e4:55:02: a5:19:df:ac:f4:e4:44:e2:e8:29:3e:21:f5:37:a2:8d:ff:b7: d8:46:5a:ae:1f:d2:2c:de:77:b0:fd:c4:78:93:69:da:fc:1c: d5:c3:51:e1:de:92:5e:bd:63:57:8b:3d:d8:2c:a1:6b:28:2c: 04:5a:e9:a1:06:90:59:47:b2:99:29:18:99:ee:78:a5:c3:dd: 29:50:d1:b5:4f:ce:60:0a:81:dc:cc:b1:b1:a6:a9:21:16:0c: 47:d8:9c:96:a3:90:5d:c7:08:9c:5b:20:c5:80:75:2d:56:8d: aa:06:ed:e7:25:26:f3:dc:c8:2b:f3:c1:31:03:e5:f3:23:8c: 19:1c:f2:71:eb:d6:c7:ab:a3:84:6e:bd:de:d4:07:8c:82:83: b1:d6:25:e3:a6:5c:6f:91:e0:92:d4:b0:94:aa:ae:9c:75:6a: 60:55:97:2f:1d:4c:ab:9f:fa:e8:8a:5e:39:86:be:d9:b0:e8: f7:1e:ca:45:aa:4e:ab:99:7a:2e:cf:0e:04:9e:c9:1f:70:dc: 0d:2c:70:01 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jd98aFBPH0nlpYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDExZTFhMDAtY2NiOC00ZmMwLWE5NjEtZjM2ZTQ5ZTYxNTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdOyoXTCU43fL0cWbmdppfL88WipDuuz/WyM claJck2h4jiO+vzPhExuv85mzpBZ2fgvNCRCYYxmKUGuKjo0bUDzPhLpS3EytkK+ ZuIdUThNUNLXDN3c5LjTy8mbI+PuxJLJnY5TxEK7ofbzk52CFWTl9Dh3QZpSltuK XnKb/RGSpyCCobCBNTp/WmCN4xkVvbWGnq3v6U3qexq/er2De8agZR/Wh7L6BOpo ZqtPhpnbW25I5jj9t1WZBLjcJEarFhLsQyu7ywnHDL/cIis7tmEipppULgrhjhE6 g6GCpAQG/n+9cgu5tcK5axPD8+4Y7VA4TefTUHFxqbLAvmoIBQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN2uYus6QfyBixyqKhxajQaCYEvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjhhZTA5ZGUtOTA3My0z YTNiLWE4MWYtMzk1MWU2OWEzYzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYbQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGU+qp46IKjvZ5o9VdIYNb/GzjpEcr+rYSN0pPditjU2cWTARN3p X8EcppDmPiiAILYPheRVAqUZ36z05ETi6Ck+IfU3oo3/t9hGWq4f0ized7D9xHiT adr8HNXDUeHekl69Y1eLPdgsoWsoLARa6aEGkFlHspkpGJnueKXD3SlQ0bVPzmAK gdzMsbGmqSEWDEfYnJajkF3HCJxbIMWAdS1WjaoG7eclJvPcyCvzwTED5fMjjBkc 8nHr1sero4Ruvd7UB4yCg7HWJeOmXG+R4JLUsJSqrpx1amBVly8dTKuf+uiKXjmG vtmw6PceykWqTquZei7PDgSeyR9w3A0scAE= -----END CERTIFICATE-----Generated at Sat Sep 26 14:48:24 2026 by rpki-client