$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25a1eabf-1bd8-3d5c-ab23-4d3ac76f5943.roa File: 25a1eabf-1bd8-3d5c-ab23-4d3ac76f5943.roa (raw, json) Hash identifier: bjQShA3CxxFu6IaEO/Nj1tSL9wEnoiWRw3mox3YONYQ= Subject key identifier: 69:AA:CA:78:A7:74:36:41:85:95:96:F4:38:CA:3E:15:EC:E1:2A:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE9C79E3E798D7A3BFD3140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25a1eabf-1bd8-3d5c-ab23-4d3ac76f5943.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33651 IP address blocks: 2001:559:8272::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:c7:9e:3e:79:8d:7a:3b:fd:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=daef84b3-11d2-4c84-a6f5-cf242918d7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:3b:1e:6e:b2:75:ef:27:66:67:b6:ee:62:d6: dc:30:7a:61:0d:3c:23:4c:06:63:66:83:fb:3e:2a: c9:4b:e2:6f:9e:34:97:27:91:5e:77:7a:d5:2f:bb: 3b:ca:fd:88:3e:fd:b3:49:fd:91:af:00:08:9a:aa: a0:f5:a4:fb:0b:04:c5:af:ef:7a:a7:cb:f0:9d:c9: 17:3d:0a:77:75:72:00:1d:b2:af:5d:d3:9d:73:3d: c0:9a:e5:47:b5:3e:52:1b:86:3d:b9:5d:98:41:62: 69:89:71:b3:40:ca:4a:96:ba:e5:14:5f:a4:cc:98: 12:41:76:fb:41:83:71:49:b7:c5:c2:d3:9c:e5:1e: 82:06:3f:0b:8c:49:e7:ac:51:5b:b2:ab:07:bc:5e: d3:56:73:13:b4:db:11:99:13:76:3d:50:3f:8e:58: cd:44:98:37:df:c6:32:ad:c2:2c:b6:1e:80:8c:95: d4:4d:dc:a1:ac:59:78:de:2e:18:07:e8:2c:0c:97: 01:c1:67:89:e5:7c:ba:e5:bb:fd:58:e7:00:53:42: 6b:80:9d:43:9b:a4:c0:40:9f:ee:4a:9e:cb:e1:12: 11:6d:37:5f:c5:fa:eb:70:54:8f:36:11:df:34:2a: 61:c9:d4:d9:54:90:8c:ca:8d:30:f9:38:e7:5d:9b: ad:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AA:CA:78:A7:74:36:41:85:95:96:F4:38:CA:3E:15:EC:E1:2A:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25a1eabf-1bd8-3d5c-ab23-4d3ac76f5943.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8272::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b1:ed:43:43:be:b7:aa:61:74:6d:4c:d7:07:fc:06:3b:68: 72:42:14:ea:e9:7d:4b:3c:a1:63:34:5d:e8:04:ef:94:52:fa: 58:5e:1c:12:5a:3b:8f:9b:36:5a:00:bf:d4:bc:91:93:e3:c0: c5:93:5f:c9:03:c4:b8:34:f2:ef:6d:f8:fa:84:f3:a6:04:a1: e3:eb:b9:8c:bd:4a:2c:40:70:9c:27:83:fc:0f:e0:c8:2f:ed: 60:da:fe:fa:46:e6:3e:b5:63:cf:cd:69:ba:56:f6:c2:b6:8b: c7:af:6d:b0:51:e8:1d:01:70:2f:5b:8d:05:4c:8b:ac:92:d4: f1:9a:13:7f:8a:a2:a9:aa:a6:35:8f:e8:b8:3d:c5:be:22:b0: 4a:a4:2d:0b:8a:b4:da:71:18:58:ed:9f:29:94:69:58:a4:b1: 30:a4:ec:10:43:39:d8:e6:a4:2d:17:19:4c:75:f5:38:8b:b8: 8b:61:bd:a2:50:c1:ed:66:12:75:0b:98:5b:d3:1b:27:c2:29: f4:16:0e:76:b0:04:73:7c:5c:22:a5:a9:e9:30:d7:45:b9:b9: b2:4a:5b:c6:fb:dc:98:99:16:5f:f6:11:49:c6:3e:88:27:77: dc:80:4c:17:2f:8d:57:06:d6:70:4c:e3:b9:23:4d:f3:b7:6f: f2:01:c6:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96ceePnmNejv9MUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk ZGFlZjg0YjMtMTFkMi00Yzg0LWE2ZjUtY2YyNDI5MThkN2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTsebrJ17ydmZ7buYtbcMHphDTwjTAZjZoP7 PirJS+JvnjSXJ5Fed3rVL7s7yv2IPv2zSf2RrwAImqqg9aT7CwTFr+96p8vwnckX PQp3dXIAHbKvXdOdcz3AmuVHtT5SG4Y9uV2YQWJpiXGzQMpKlrrlFF+kzJgSQXb7 QYNxSbfFwtOc5R6CBj8LjEnnrFFbsqsHvF7TVnMTtNsRmRN2PVA/jljNRJg338Yy rcIsth6AjJXUTdyhrFl43i4YB+gsDJcBwWeJ5Xy65bv9WOcAU0JrgJ1Dm6TAQJ/u Sp7L4RIRbTdfxfrrcFSPNhHfNCphydTZVJCMyo0w+TjnXZutuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGmqynindDZBhZWW9DjKPhXs4SrJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjVhMWVhYmYtMWJkOC0z ZDVjLWFiMjMtNGQzYWM3NmY1OTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEux7UNDvreqYXRtTNcH/AY7aHJCFOrpfUs8oWM0XegE75RS+lhe HBJaO4+bNloAv9S8kZPjwMWTX8kDxLg08u9t+PqE86YEoePruYy9SixAcJwng/wP 4Mgv7WDa/vpG5j61Y8/NabpW9sK2i8evbbBR6B0BcC9bjQVMi6yS1PGaE3+Koqmq pjWP6Lg9xb4isEqkLQuKtNpxGFjtnymUaViksTCk7BBDOdjmpC0XGUx19TiLuIth vaJQwe1mEnULmFvTGyfCKfQWDnawBHN8XCKlqekw10W5ubJKW8b73JiZFl/2EUnG Pognd9yATBcvjVcG1nBM47kjTfO3b/IBxo0= -----END CERTIFICATE-----Generated at Sun Mar 1 20:47:05 2026 by rpki-client