$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d20e711-c9c1-31e2-8cbe-d873c9943101.roa File: 1d20e711-c9c1-31e2-8cbe-d873c9943101.roa (raw, json) Hash identifier: okhlHbQPCkON8Ja89taZjhStT7CwLTPed5I7mOke6w4= Subject key identifier: 9A:ED:22:EE:B9:A4:25:A0:4F:17:FC:6C:BF:63:C9:94:04:75:58:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE868F8B331807C765650AD0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d20e711-c9c1-31e2-8cbe-d873c9943101.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 13367 IP address blocks: 2001:559:823a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:86:8f:8b:33:18:07:c7:65:65:0a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=c908bc44-acc3-47bb-879b-e18e4f4c5bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4e:20:0a:29:c7:e0:1e:a2:1c:53:4c:46:ff: 10:6f:09:95:d6:04:b9:63:89:05:02:9e:0f:be:d5: 49:5c:47:61:fd:78:13:0e:b6:d8:d9:f0:78:46:91: bf:c3:35:b0:d3:fd:7a:98:10:78:92:91:ee:b3:ae: 82:90:82:44:a6:a5:58:89:10:0d:a8:1a:9e:ab:81: 05:16:e6:db:03:c4:35:ba:6c:70:bb:c8:97:7c:a8: 15:3c:23:c4:6f:da:ed:ef:c9:78:b2:cb:a8:2c:77: fc:46:b4:34:5b:2c:8a:5e:85:df:68:97:e5:21:09: a3:94:a3:74:30:90:04:93:cd:f4:78:89:6c:e2:89: 67:38:d9:8d:63:9f:df:af:8c:cf:2d:c9:26:4f:0c: 59:09:bd:77:91:0b:97:81:13:2b:a0:7c:4e:7a:ab: d5:0c:f5:38:df:5d:a8:7a:c8:8d:b1:5a:8e:a7:1e: 9b:52:a3:5e:29:43:8b:e7:21:fe:b0:52:15:79:dd: bd:ef:10:26:f9:cf:92:1a:7d:6a:26:87:cc:2c:0f: 2e:30:40:bb:fa:0e:56:38:1d:b2:85:ef:87:fb:ad: 4e:0f:d8:63:43:71:fb:86:87:b5:34:4b:ac:8e:5b: 65:a0:d2:37:dd:f3:10:44:2f:f1:ac:1f:d6:4b:e3: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:ED:22:EE:B9:A4:25:A0:4F:17:FC:6C:BF:63:C9:94:04:75:58:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d20e711-c9c1-31e2-8cbe-d873c9943101.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:823a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:d4:c1:85:66:98:ff:c3:15:2c:e4:2e:33:53:86:5e:38:77: ec:9f:ca:02:dc:70:84:58:93:76:43:96:70:21:d3:53:52:c2: f2:52:4a:ea:37:2c:e0:a4:70:71:71:a4:88:28:15:22:c0:38: a3:c2:78:21:9b:8b:01:46:98:ec:b2:51:bb:f0:72:b7:7f:df: ff:60:3a:28:14:69:c7:54:8d:a5:59:fe:7e:36:43:fd:76:f8: d2:9e:7b:11:8c:98:90:8f:07:9d:59:fc:a3:a8:38:df:22:84: 6b:de:38:2f:47:60:26:51:f4:50:4b:c7:7c:be:3f:b0:bc:2b: e2:43:ef:fe:e1:eb:f4:8c:35:cf:1d:99:e6:3e:5e:8a:85:87: 54:8d:c4:c3:a1:91:42:d0:9f:e9:55:3e:3c:5d:62:8a:ef:4b: 3e:75:89:aa:1e:f1:5f:e5:cc:b3:0f:f3:f8:21:9d:e9:72:57: 0f:3e:51:da:04:ae:e1:47:8d:f8:b9:49:63:b1:9f:18:cd:c1: aa:77:5f:50:e4:1b:01:0d:e9:7e:5b:14:c0:e3:52:45:5e:6f: 4c:b4:31:53:8f:7e:0c:0f:00:d0:05:7b:ec:d3:c9:42:9c:cb: 5d:a3:1b:e7:6d:64:00:f9:93:b0:ac:52:54:48:b1:6c:c6:aa: 47:c7:4b:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3eho+LMxgHx2VlCtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk YzkwOGJjNDQtYWNjMy00N2JiLTg3OWItZTE4ZTRmNGM1YmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk4gCinH4B6iHFNMRv8QbwmV1gS5Y4kFAp4P vtVJXEdh/XgTDrbY2fB4RpG/wzWw0/16mBB4kpHus66CkIJEpqVYiRANqBqeq4EF FubbA8Q1umxwu8iXfKgVPCPEb9rt78l4ssuoLHf8RrQ0WyyKXoXfaJflIQmjlKN0 MJAEk830eIls4olnONmNY5/fr4zPLckmTwxZCb13kQuXgRMroHxOeqvVDPU4312o esiNsVqOpx6bUqNeKUOL5yH+sFIVed297xAm+c+SGn1qJofMLA8uMEC7+g5WOB2y he+H+61OD9hjQ3H7hoe1NEusjltloNI33fMQRC/xrB/WS+NDtQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJrtIu65pCWgTxf8bL9jyZQEdVgjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWQyMGU3MTEtYzljMS0z MWUyLThjYmUtZDg3M2M5OTQzMTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYI6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANDUwYVmmP/DFSzkLjNThl44d+yfygLccIRYk3ZDlnAh01NSwvJS Suo3LOCkcHFxpIgoFSLAOKPCeCGbiwFGmOyyUbvwcrd/3/9gOigUacdUjaVZ/n42 Q/12+NKeexGMmJCPB51Z/KOoON8ihGveOC9HYCZR9FBLx3y+P7C8K+JD7/7h6/SM Nc8dmeY+XoqFh1SNxMOhkULQn+lVPjxdYorvSz51iaoe8V/lzLMP8/ghnelyVw8+ UdoEruFHjfi5SWOxnxjNwap3X1DkGwEN6X5bFMDjUkVeb0y0MVOPfgwPANAFe+zT yUKcy12jG+dtZAD5k7CsUlRIsWzGqkfHS7c= -----END CERTIFICATE-----Generated at Sat Jun 13 20:38:39 2026 by rpki-client