$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09949251-cac5-3bb7-b58e-56eb23057b24.roa File: 09949251-cac5-3bb7-b58e-56eb23057b24.roa (raw, json) Hash identifier: gQXettJlfyEtH55VlEnm0Cx/2GZjEal4dGo3gvdWkQM= Subject key identifier: 05:4F:E4:56:68:18:F9:75:AB:B4:EB:7A:14:7F:A8:29:7C:E1:3A:6F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE857AA3BC5EA41A1FE6440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09949251-cac5-3bb7-b58e-56eb23057b24.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33662 IP address blocks: 2001:559:42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:57:aa:3b:c5:ea:41:a1:fe:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=1e7ad904-9299-4c11-9533-51eca31725d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:c5:a1:39:33:08:0e:4d:28:3c:fe:53:5f: 1d:fc:1e:78:33:7d:5a:59:6c:7a:22:6c:98:52:b2: 40:df:fa:ad:f9:82:b0:65:04:dc:91:f1:c0:bb:85: c4:2b:61:b6:6a:29:66:25:91:03:c1:14:8a:72:0a: c4:92:73:e8:a5:05:a7:09:08:d7:85:88:df:76:e9: f3:85:b2:89:dc:b3:c0:75:6d:13:64:ad:85:00:65: c3:81:d9:8b:b4:57:2d:0c:bd:2d:a3:6f:41:06:9f: 6b:33:ad:b3:c8:0a:c7:6d:c9:c9:92:af:3e:a9:b4: 41:76:4d:eb:9f:c4:0f:3f:e9:b7:7a:a4:57:b7:d0: 07:74:66:b0:1f:1e:67:8d:50:f2:7e:6a:c2:ad:b6: ef:d9:a3:6c:0a:54:c2:c8:c5:55:4f:bc:b1:00:34: 0d:61:df:fd:9e:64:de:be:88:01:10:a6:c9:6b:82: ec:c2:4f:a6:cb:3a:4a:8a:43:10:db:26:37:a5:fe: e8:cc:68:c5:39:2d:f0:5e:11:32:4d:5f:2c:81:e6: 6e:1f:14:6f:b2:31:59:27:17:ac:23:04:b3:3a:4e: b1:1f:fd:77:ce:17:24:cc:4f:b4:86:06:fa:54:d6: ab:e9:28:f2:c7:d9:58:a7:2f:a6:ce:dc:7c:92:b2: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4F:E4:56:68:18:F9:75:AB:B4:EB:7A:14:7F:A8:29:7C:E1:3A:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09949251-cac5-3bb7-b58e-56eb23057b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ab:92:d3:9d:06:22:fb:dc:9b:70:62:7a:7b:a5:41:ac:15: 03:67:f9:ef:bf:a7:1c:47:5c:c4:79:0d:fb:31:b4:d7:ec:99: e0:ca:f3:73:7d:0e:b3:28:69:77:fd:02:39:7d:7b:f6:fd:65: 18:e5:d9:51:d6:37:f6:65:0c:39:3e:50:e0:17:28:16:c6:21: d5:1d:00:cb:0b:cf:bb:f3:c5:13:7c:11:14:16:43:c3:41:02: 6c:6e:87:bd:a2:fc:9e:53:29:a4:c6:a9:10:0b:db:60:50:2b: 99:f3:66:45:2a:1b:b7:34:51:42:8e:44:a8:95:48:69:d5:a9: 94:44:42:94:f2:7c:8f:28:7c:aa:5b:c0:2b:47:eb:f1:8f:e3: bd:0c:24:61:f6:ad:c5:51:84:b9:30:31:b4:ce:73:ce:7e:c7: 28:1d:f6:11:d1:de:18:eb:a7:2b:98:5a:c4:02:2c:90:eb:87: a4:f2:bd:5a:cc:ea:5a:cd:b9:a8:f0:22:d4:1c:2c:46:7f:f5: 9f:95:5d:55:88:17:de:ee:53:38:1f:30:f6:ce:f7:05:8c:b0: c3:19:f5:e9:ba:f5:2f:e8:f4:84:52:48:c0:c8:15:22:ff:00: 96:9d:c1:2a:22:fb:8d:1b:79:f3:78:8d:d5:a1:7d:24:d3:97: 6d:54:5e:23 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96FeqO8XqQaH+ZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk MWU3YWQ5MDQtOTI5OS00YzExLTk1MzMtNTFlY2EzMTcyNWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn3FoTkzCA5NKDz+U18d/B54M31aWWx6ImyY UrJA3/qt+YKwZQTckfHAu4XEK2G2ailmJZEDwRSKcgrEknPopQWnCQjXhYjfdunz hbKJ3LPAdW0TZK2FAGXDgdmLtFctDL0to29BBp9rM62zyArHbcnJkq8+qbRBdk3r n8QPP+m3eqRXt9AHdGawHx5njVDyfmrCrbbv2aNsClTCyMVVT7yxADQNYd/9nmTe vogBEKbJa4Lswk+myzpKikMQ2yY3pf7ozGjFOS3wXhEyTV8sgeZuHxRvsjFZJxes IwSzOk6xH/13zhckzE+0hgb6VNar6Sjyx9lYpy+mztx8krIMgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAVP5FZoGPl1q7TrehR/qCl84TpvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDk5NDkyNTEtY2FjNS0z YmI3LWI1OGUtNTZlYjIzMDU3YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQBC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABarktOdBiL73JtwYnp7pUGsFQNn+e+/pxxHXMR5DfsxtNfsmeDK 83N9DrMoaXf9Ajl9e/b9ZRjl2VHWN/ZlDDk+UOAXKBbGIdUdAMsLz7vzxRN8ERQW Q8NBAmxuh72i/J5TKaTGqRAL22BQK5nzZkUqG7c0UUKORKiVSGnVqZREQpTyfI8o fKpbwCtH6/GP470MJGH2rcVRhLkwMbTOc85+xygd9hHR3hjrpyuYWsQCLJDrh6Ty vVrM6lrNuajwItQcLEZ/9Z+VXVWIF97uUzgfMPbO9wWMsMMZ9em69S/o9IRSSMDI FSL/AJadwSoi+40befN4jdWhfSTTl21UXiM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:15 2026 by rpki-client