$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0577a3a2-970c-3b2b-8651-56e23f349a0b.roa File: 0577a3a2-970c-3b2b-8651-56e23f349a0b.roa (raw, json) Hash identifier: ApROQch63YT03WI8UU7A77Ga+qAASe796l9+hIGFsxg= Subject key identifier: 65:25:83:83:AD:EB:72:A3:3E:EC:0C:CD:B6:CE:A6:1C:E3:3F:36:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4979DF8808B08E00A2C43E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0577a3a2-970c-3b2b-8651-56e23f349a0b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 2001:559:825c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:df:88:08:b0:8e:00:a2:c4:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fb05d0d3-bd90-4a93-b718-75530c49aa0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:38:8f:a8:c2:e0:b4:ca:5c:15:c2:38:33: cd:c2:6e:89:97:0d:0d:f3:a5:44:fd:bd:02:77:6a: db:d4:53:e8:82:20:a7:a2:b3:88:16:00:8c:4f:8b: c3:58:39:d3:4d:d0:01:80:33:99:92:45:fd:8c:a4: 4d:02:42:c4:75:c5:ac:3e:8b:17:21:46:69:80:b3: 12:89:88:ae:de:07:0e:5e:e8:23:aa:54:41:e1:a2: 45:23:7b:a9:16:5b:a0:49:4c:e8:34:6f:40:65:f9: 04:49:17:b6:76:7e:5d:47:69:d9:ba:f0:ba:93:cc: 53:d0:89:b2:42:05:03:84:d9:d4:dd:fa:f7:90:51: 5e:8e:67:01:cc:39:ca:cc:17:71:ac:c4:27:cf:d3: cc:a0:75:a0:9b:32:2b:09:31:89:e4:6e:c5:93:6a: f5:f2:a8:bc:fa:67:b6:44:64:b7:26:6c:d6:41:c1: a4:60:d1:a6:47:02:ac:c6:c5:12:60:90:d7:51:00: b2:17:93:a1:07:7f:41:a0:5d:cc:58:f1:59:8c:29: 97:df:af:52:a5:c8:5c:6e:76:94:89:01:2d:91:fd: 41:a5:de:8b:5a:d2:d0:9e:83:24:3a:60:c9:48:0a: 49:98:b4:37:a3:4e:2d:cb:42:8f:a2:90:7b:a2:af: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:25:83:83:AD:EB:72:A3:3E:EC:0C:CD:B6:CE:A6:1C:E3:3F:36:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0577a3a2-970c-3b2b-8651-56e23f349a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:825c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:ea:41:1c:72:59:67:31:0f:1d:67:b5:87:5d:f5:27:38:c3: 45:d3:cb:72:b6:15:ae:c3:a8:4e:5d:56:a9:c0:a3:01:17:bc: 49:83:6d:1b:1b:0b:4f:78:f0:1b:17:2b:80:bc:ab:e2:8b:68: 30:e4:e9:4e:30:f6:1b:bd:3d:ae:2d:d2:b3:09:a2:bc:48:a8: fa:cf:93:8e:d5:6c:5a:91:ee:58:9a:e9:6d:7b:02:2a:b3:ee: 21:ad:d5:e4:21:ca:72:34:a3:c0:bb:9a:7a:37:80:2c:f5:9f: d8:61:a0:d2:05:4f:0e:87:9c:2d:86:5d:4b:87:22:28:8d:8c: ef:05:60:c3:5d:0b:30:1f:96:02:c3:0b:62:66:fe:43:8b:ef: 11:de:76:16:c0:ce:74:3c:2a:04:4e:36:89:54:b6:cc:e0:c0: 19:c9:39:23:05:fa:60:d1:82:b1:76:c0:aa:fa:45:31:f2:7f: 2b:47:28:7e:71:5c:e2:8f:55:cc:c0:b8:a2:bd:18:76:5a:84: ac:01:a7:ac:38:98:f1:1d:71:90:3c:0a:e9:36:97:ae:11:e7: a6:d5:47:cf:23:ad:cf:06:32:4c:3b:7f:4f:cb:12:d2:f2:ab: 9a:7d:5d:b8:20:d0:d6:11:37:df:81:0d:50:6e:0b:71:f9:ea: db:0b:47:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jed+ICLCOAKLEPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmIwNWQwZDMtYmQ5MC00YTkzLWI3MTgtNzU1MzBjNDlhYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOI4j6jC4LTKXBXCODPNwm6Jlw0N86VE/b0C d2rb1FPogiCnorOIFgCMT4vDWDnTTdABgDOZkkX9jKRNAkLEdcWsPosXIUZpgLMS iYiu3gcOXugjqlRB4aJFI3upFlugSUzoNG9AZfkESRe2dn5dR2nZuvC6k8xT0Imy QgUDhNnU3fr3kFFejmcBzDnKzBdxrMQnz9PMoHWgmzIrCTGJ5G7Fk2r18qi8+me2 RGS3JmzWQcGkYNGmRwKsxsUSYJDXUQCyF5OhB39BoF3MWPFZjCmX369SpchcbnaU iQEtkf1Bpd6LWtLQnoMkOmDJSApJmLQ3o04ty0KPopB7oq83fwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGUlg4Ot63KjPuwMzbbOphzjPzb0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDU3N2EzYTItOTcwYy0z YjJiLTg2NTEtNTZlMjNmMzQ5YTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM/qQRxyWWcxDx1ntYdd9Sc4w0XTy3K2Fa7DqE5dVqnAowEXvEmD bRsbC0948BsXK4C8q+KLaDDk6U4w9hu9Pa4t0rMJorxIqPrPk47VbFqR7lia6W17 Aiqz7iGt1eQhynI0o8C7mno3gCz1n9hhoNIFTw6HnC2GXUuHIiiNjO8FYMNdCzAf lgLDC2Jm/kOL7xHedhbAznQ8KgRONolUtszgwBnJOSMF+mDRgrF2wKr6RTHyfytH KH5xXOKPVczAuKK9GHZahKwBp6w4mPEdcZA8Cuk2l64R56bVR88jrc8GMkw7f0/L EtLyq5p9Xbgg0NYRN9+BDVBuC3H56tsLRxE= -----END CERTIFICATE-----Generated at Sat Sep 26 04:54:06 2026 by rpki-client