$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2df39789-aa15-34ed-83fd-502be6f9fe8e.roa File: 2df39789-aa15-34ed-83fd-502be6f9fe8e.roa (raw, json) Hash identifier: NC8yYwmG2E3OTdT8Kt+Wyu4DTNLIldnRkwDiuGkRtNM= Subject key identifier: 69:B4:08:90:ED:6F:23:B5:96:D1:0F:E6:2B:85:0B:71:D3:83:82:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDEA5C3EB91EAB6B0BE5A280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2df39789-aa15-34ed-83fd-502be6f9fe8e.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33287 IP address blocks: 2001:559:84b9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:5c:3e:b9:1e:ab:6b:0b:e5:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=a5bd85e6-8d6b-4c03-9830-0fe9a9212094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:20:ed:b3:82:ff:aa:60:2d:88:3b:2b:e5:b2: bf:96:29:36:ab:30:39:d8:07:80:70:33:17:ff:4a: 65:51:9d:9a:ff:b1:8c:25:01:07:0a:f7:69:19:21: 14:3a:0e:71:07:d1:56:08:90:9e:c0:e1:18:da:37: af:63:4d:66:36:3a:81:40:b7:14:fa:68:d5:57:ef: 35:e2:e1:41:db:95:85:06:74:74:d8:62:d4:c2:74: 13:60:1b:09:43:08:0a:ec:6b:ea:03:da:7c:e0:23: 06:8b:18:fb:e2:82:f1:84:08:bc:eb:7d:56:5f:95: 50:ae:de:8a:f3:a9:c1:c6:64:81:30:2a:d3:9b:db: 8d:a4:3c:3f:ab:22:78:77:4f:eb:ef:75:70:d8:6a: 8a:ed:4f:58:b9:21:77:39:f1:6e:f3:63:94:95:52: cd:b6:b5:99:8b:23:d3:a2:de:53:3b:91:42:49:79: 07:98:3d:17:a8:25:32:22:92:77:09:15:2c:74:f5: 86:4d:5d:95:2e:ee:b4:b9:19:f0:38:2e:e4:c8:2e: c5:63:58:42:d8:5d:c6:a0:a5:2f:85:78:c6:7b:13: 1a:1c:f5:b8:8c:0a:70:e0:f8:78:61:f9:5d:5e:dc: 4c:00:0d:e6:4e:53:59:0f:fd:47:e5:66:c8:14:cb: 31:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:B4:08:90:ED:6F:23:B5:96:D1:0F:E6:2B:85:0B:71:D3:83:82:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2df39789-aa15-34ed-83fd-502be6f9fe8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:84b9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:15:09:11:45:c7:cc:cd:fa:86:a2:cb:d0:e0:d2:58:9b:3e: 80:21:bf:a9:d2:5d:f9:bb:fd:fe:1c:fd:5e:f6:e4:c8:44:98: 8f:1f:ba:14:2a:fe:d0:65:25:f1:b7:7a:d7:7a:fb:a1:f2:02: 28:23:01:8e:1d:b0:40:99:51:da:67:bb:3b:ee:56:8c:ba:39: 9d:58:0c:6f:98:08:d3:b7:0c:08:cf:7c:36:08:56:94:23:11: b0:d7:32:96:a5:10:cd:c3:9a:51:fb:1f:e8:11:4c:7e:e8:81: 32:4b:1f:b6:8f:41:4e:f4:69:aa:f6:32:e6:d5:99:42:e6:30: b7:83:a3:ca:da:be:cf:66:40:bf:f5:1a:b4:3f:ed:c7:be:32: ce:91:ee:0d:58:e1:f8:4d:66:89:4f:08:58:af:0e:60:d8:64: 68:80:5a:42:c4:5f:70:5c:84:65:87:b2:d0:e8:3a:84:5c:de: f7:de:6a:a3:a9:0e:83:3b:46:4c:e7:87:55:73:f1:a8:c1:84: 6f:05:ed:3e:ee:b8:42:7b:03:d9:fb:db:74:55:3c:d9:54:e2: 40:6a:b8:07:01:a8:6c:af:af:02:e0:d0:63:86:a6:39:b4:d1: 86:75:75:7e:52:b1:bc:8b:b8:08:80:f8:5c:53:69:4d:a3:ce: e3:87:fe:52 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96lw+uR6rawvlooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk YTViZDg1ZTYtOGQ2Yi00YzAzLTk4MzAtMGZlOWE5MjEyMDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yDts4L/qmAtiDsr5bK/lik2qzA52AeAcDMX /0plUZ2a/7GMJQEHCvdpGSEUOg5xB9FWCJCewOEY2jevY01mNjqBQLcU+mjVV+81 4uFB25WFBnR02GLUwnQTYBsJQwgK7GvqA9p84CMGixj74oLxhAi8631WX5VQrt6K 86nBxmSBMCrTm9uNpDw/qyJ4d0/r73Vw2GqK7U9YuSF3OfFu82OUlVLNtrWZiyPT ot5TO5FCSXkHmD0XqCUyIpJ3CRUsdPWGTV2VLu60uRnwOC7kyC7FY1hC2F3GoKUv hXjGexMaHPW4jApw4Ph4YfldXtxMAA3mTlNZD/1H5WbIFMsxcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGm0CJDtbyO1ltEP5iuFC3HTg4IxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRmMzk3ODktYWExNS0z NGVkLTgzZmQtNTAyYmU2ZjlmZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYS5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG8VCRFFx8zN+oaiy9Dg0libPoAhv6nSXfm7/f4c/V725MhEmI8f uhQq/tBlJfG3etd6+6HyAigjAY4dsECZUdpnuzvuVoy6OZ1YDG+YCNO3DAjPfDYI VpQjEbDXMpalEM3DmlH7H+gRTH7ogTJLH7aPQU70aar2MubVmULmMLeDo8ravs9m QL/1GrQ/7ce+Ms6R7g1Y4fhNZolPCFivDmDYZGiAWkLEX3BchGWHstDoOoRc3vfe aqOpDoM7Rkznh1Vz8ajBhG8F7T7uuEJ7A9n723RVPNlU4kBquAcBqGyvrwLg0GOG pjm00YZ1dX5SsbyLuAiA+FxTaU2jzuOH/lI= -----END CERTIFICATE-----Generated at Sun Mar 1 18:59:41 2026 by rpki-client