$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10e27e21-8d2f-3d15-a433-a923d1277677.roa File: 10e27e21-8d2f-3d15-a433-a923d1277677.roa (raw, json) Hash identifier: 0q0BIbXnZMjUvdQnkwltZQqcBg2dCQwG7FcvLLb3pvA= Subject key identifier: 05:A3:21:4D:5E:D7:22:6E:59:E1:89:E2:9A:F3:BC:CB:CE:25:8E:A0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497A33844D1082D5E5C3FC40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10e27e21-8d2f-3d15-a433-a923d1277677.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33657 IP address blocks: 2001:559:836f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:33:84:4d:10:82:d5:e5:c3:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=88231613-7a59-4a23-9822-98083d2df228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5a:fe:de:fd:dc:4c:e6:8e:9f:11:5b:e6:69: c7:f5:48:94:d3:7e:cb:66:52:05:cb:e3:60:c7:6e: c6:bf:ac:9e:b5:92:55:90:3a:a2:3e:42:66:35:43: 92:c3:19:bd:75:ba:43:41:7c:f1:7e:e4:42:26:68: 4b:63:d1:5f:c7:a6:32:56:26:c0:3c:ec:2b:21:70: 86:8e:5b:72:3e:26:02:a9:0b:76:b9:f9:94:6b:f9: 49:2f:58:2d:96:6b:d8:ce:20:0f:9a:61:f5:d8:38: 9f:9c:11:2b:d3:06:94:bd:48:3c:30:ec:11:d0:09: c4:33:ea:ff:44:24:8b:12:62:49:fd:94:4a:9f:fe: 06:00:f1:4d:0f:3e:e5:94:73:c1:70:cb:17:15:da: 3a:d2:32:07:99:0c:4b:50:bb:f0:0a:1e:69:f9:69: fa:bd:06:59:55:da:0b:6b:d8:43:7c:ee:cc:eb:1b: fa:74:42:58:c0:5e:a2:d4:d2:d3:f3:08:e9:97:31: 69:46:d6:18:d7:ab:24:95:e3:7f:b7:f9:a4:f5:e0: 72:ef:32:d2:eb:30:7e:b2:64:f9:6c:47:6e:a1:22: 3a:ac:2f:a1:67:33:bd:4a:d2:dc:38:20:06:f1:3f: 76:0f:44:26:0f:ef:98:f2:58:e4:4c:62:64:19:77: e2:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A3:21:4D:5E:D7:22:6E:59:E1:89:E2:9A:F3:BC:CB:CE:25:8E:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10e27e21-8d2f-3d15-a433-a923d1277677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:836f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fa:d3:24:f9:79:a9:4a:85:ee:38:e3:19:96:3f:7d:81:77: 61:8c:49:9f:39:37:37:25:6f:9a:31:a4:7d:4e:cf:db:62:c0: 80:ce:51:fc:81:5a:99:bb:5a:e8:6a:a6:dd:09:0d:84:e8:3e: fe:4a:56:b7:2a:d0:7d:48:b8:3e:b0:9b:b0:de:38:65:5a:09: 9d:f4:47:48:ae:64:28:47:6f:6f:e3:f7:af:32:d8:8d:3b:f1: 66:66:b0:2f:3a:61:83:ff:ea:fb:98:b4:21:4d:bd:3a:28:a7: b6:52:6d:74:6a:66:2c:54:7c:eb:63:4c:f3:20:d1:e8:a5:b4: ee:52:c4:ca:b9:3f:c0:91:a9:36:e2:73:4b:68:cf:9c:1e:23: 81:4f:5a:88:76:21:72:ac:9d:a5:42:c9:09:7c:db:7f:65:95: 9d:07:83:35:10:11:c5:ac:c9:28:9b:a8:0b:99:73:23:80:e3: 57:ad:ae:d7:15:13:f0:2d:d3:09:aa:2c:3d:17:e0:c8:37:de: 18:3a:32:d0:b3:e5:7d:9d:b7:c2:19:74:f2:dc:e4:27:04:28: 9b:f4:43:33:c9:91:c8:71:fe:4c:73:43:fd:a8:6e:8f:dd:7f: e3:2c:37:16:90:6a:18:36:b0:3e:40:85:1b:ee:60:3b:cb:69: 8d:f2:bf:fc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JejOETRCC1eXD/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODgyMzE2MTMtN2E1OS00YTIzLTk4MjItOTgwODNkMmRmMjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFr+3v3cTOaOnxFb5mnH9UiU037LZlIFy+Ng x27Gv6yetZJVkDqiPkJmNUOSwxm9dbpDQXzxfuRCJmhLY9Ffx6YyVibAPOwrIXCG jltyPiYCqQt2ufmUa/lJL1gtlmvYziAPmmH12DifnBEr0waUvUg8MOwR0AnEM+r/ RCSLEmJJ/ZRKn/4GAPFNDz7llHPBcMsXFdo60jIHmQxLULvwCh5p+Wn6vQZZVdoL a9hDfO7M6xv6dEJYwF6i1NLT8wjplzFpRtYY16skleN/t/mk9eBy7zLS6zB+smT5 bEduoSI6rC+hZzO9StLcOCAG8T92D0QmD++Y8ljkTGJkGXfiawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAWjIU1e1yJuWeGJ4przvMvOJY6gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTBlMjdlMjEtOGQyZi0z ZDE1LWE0MzMtYTkyM2QxMjc3Njc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYNv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFH60yT5ealKhe444xmWP32Bd2GMSZ85Nzclb5oxpH1Oz9tiwIDO UfyBWpm7Wuhqpt0JDYToPv5KVrcq0H1IuD6wm7DeOGVaCZ30R0iuZChHb2/j968y 2I078WZmsC86YYP/6vuYtCFNvToop7ZSbXRqZixUfOtjTPMg0eiltO5SxMq5P8CR qTbic0toz5weI4FPWoh2IXKsnaVCyQl8239llZ0HgzUQEcWsySibqAuZcyOA41et rtcVE/At0wmqLD0X4Mg33hg6MtCz5X2dt8IZdPLc5CcEKJv0QzPJkchx/kxzQ/2o bo/df+MsNxaQahg2sD5AhRvuYDvLaY3yv/w= -----END CERTIFICATE-----Generated at Fri Sep 25 21:39:17 2026 by rpki-client