$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21ca574e-5814-3e44-b0a8-128222557656.roa File: 21ca574e-5814-3e44-b0a8-128222557656.roa (raw, json) Hash identifier: GpS+Ch2tMpoZhgQHkfLgA52ntzMrZJk2VX93PoggU/E= Subject key identifier: E1:48:68:A1:59:E9:E0:C1:CA:67:B2:6B:43:11:DE:EB:8A:5E:32:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BC6E416F791EAD832B0EA4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21ca574e-5814-3e44-b0a8-128222557656.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 2001:559:86ae::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:6e:41:6f:79:1e:ad:83:2b:0e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=8dd7a038-126b-4ed9-8881-b19cd66c0e19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:c0:49:9b:6c:a9:97:63:6a:56:17:7d:c7: 21:d4:13:29:8e:b1:fe:f8:2c:94:60:46:ab:00:4f: c6:fa:54:77:d4:52:04:b5:a3:a9:48:2b:13:c1:b6: 51:36:b7:e4:42:3d:65:a4:3b:42:3c:93:46:ff:a9: 7d:49:e9:ae:08:b7:24:11:77:cb:ce:ae:7c:ef:b1: 94:ca:2c:a7:c0:99:db:2e:b5:62:52:82:d6:68:94: 38:6e:21:42:fb:11:90:f0:a1:e6:b9:ed:c6:41:cc: b8:42:8a:14:33:f6:c5:43:73:3b:cf:00:45:81:79: 07:97:9f:af:0c:10:b9:c2:f4:3b:ce:72:16:18:25: bf:ad:b0:dd:bb:76:88:21:fa:9b:2c:dc:bd:e6:68: 7e:3b:9b:ca:cc:4d:03:9c:98:1c:c2:6d:23:7e:04: 37:c5:5b:e9:97:ec:f8:7e:8e:6a:ed:98:2d:2d:68: 0e:f5:67:23:0f:db:93:03:43:24:58:68:c2:df:a3: a5:a0:eb:03:ee:0d:5d:d2:d8:0c:42:73:92:c3:6d: b3:46:68:f4:99:2e:b7:23:2b:78:2f:44:b5:d5:9b: 13:5a:9b:87:e8:a3:1e:fb:b8:ee:94:8e:5f:e0:d9: c4:5b:92:87:96:13:55:65:d6:14:9e:ff:ef:b0:00: 5a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:48:68:A1:59:E9:E0:C1:CA:67:B2:6B:43:11:DE:EB:8A:5E:32:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21ca574e-5814-3e44-b0a8-128222557656.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:86ae::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:60:7e:1c:f5:9e:60:06:bf:af:22:d6:ec:57:0d:1a:85:6f: c9:6c:3d:bb:f3:ed:94:48:f3:70:aa:da:41:3e:93:1c:6c:d8: cf:ae:7e:eb:dd:9d:8f:de:68:7a:1e:c7:94:b3:0d:69:b7:97: 84:86:65:b1:4b:b6:06:c0:e4:ea:c2:66:5c:e4:54:e9:16:6b: 28:dc:3e:45:6e:82:f8:d1:4f:80:fc:aa:6f:77:a2:a5:bf:5c: 87:43:a7:ea:b7:99:7c:2e:3d:cd:af:e2:5b:88:80:64:5d:42: 3d:02:6a:67:ef:89:7d:71:3a:ff:2d:46:08:29:df:ba:de:cb: d2:62:96:7f:cf:62:a3:d9:b3:32:ee:8c:23:5a:80:1d:0b:ea: 87:99:1c:24:90:f9:56:d8:b5:bc:23:3e:ba:9e:d2:75:86:3b: c3:52:0b:fe:65:1d:51:60:77:cb:7c:3b:7b:9a:e4:2c:f2:f5: 74:ae:a4:fd:8d:09:ce:6d:f3:6e:75:a8:2c:0b:da:ee:80:f9: 66:16:d8:44:33:d9:b9:ff:11:dc:38:4f:13:74:07:f8:0a:73: 9b:31:13:fd:0c:0b:8b:44:66:37:b7:82:32:af:a3:7b:b3:d1: e3:18:97:58:ec:12:e0:aa:31:3b:2d:ac:e4:4d:4c:dc:d5:75: 6d:d2:cf:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1VvG5Bb3kerYMrDqQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk OGRkN2EwMzgtMTI2Yi00ZWQ5LTg4ODEtYjE5Y2Q2NmMwZTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSjASZtsqZdjalYXfcch1BMpjrH++CyUYEar AE/G+lR31FIEtaOpSCsTwbZRNrfkQj1lpDtCPJNG/6l9SemuCLckEXfLzq5877GU yiynwJnbLrViUoLWaJQ4biFC+xGQ8KHmue3GQcy4QooUM/bFQ3M7zwBFgXkHl5+v DBC5wvQ7znIWGCW/rbDdu3aIIfqbLNy95mh+O5vKzE0DnJgcwm0jfgQ3xVvpl+z4 fo5q7ZgtLWgO9WcjD9uTA0MkWGjC36OloOsD7g1d0tgMQnOSw22zRmj0mS63Iyt4 L0S11ZsTWpuH6KMe+7julI5f4NnEW5KHlhNVZdYUnv/vsABaKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOFIaKFZ6eDBymeya0MR3uuKXjKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFjYTU3NGUtNTgxNC0z ZTQ0LWIwYTgtMTI4MjIyNTU3NjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYau MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKVgfhz1nmAGv68i1uxXDRqFb8lsPbvz7ZRI83Cq2kE+kxxs2M+u fuvdnY/eaHoex5SzDWm3l4SGZbFLtgbA5OrCZlzkVOkWayjcPkVugvjRT4D8qm93 oqW/XIdDp+q3mXwuPc2v4luIgGRdQj0CamfviX1xOv8tRggp37rey9Jiln/PYqPZ szLujCNagB0L6oeZHCSQ+VbYtbwjPrqe0nWGO8NSC/5lHVFgd8t8O3ua5Czy9XSu pP2NCc5t8251qCwL2u6A+WYW2EQz2bn/Edw4TxN0B/gKc5sxE/0MC4tEZje3gjKv o3uz0eMYl1jsEuCqMTstrORNTNzVdW3Sz30= -----END CERTIFICATE-----Generated at Fri Apr 17 15:38:16 2026 by rpki-client