$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ecd3359-79a3-364f-835a-dff73ebe2526.roa File: 2ecd3359-79a3-364f-835a-dff73ebe2526.roa (raw, json) Hash identifier: LGlzJmdve+VhDEcyiUtmwIoNgf/0XWp2MzaWbS54HNo= Subject key identifier: A9:FA:E7:27:F1:D9:C7:4C:87:E4:A0:F3:56:E3:76:56:93:FE:30:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4981550BEAA8C294AF7BD900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ecd3359-79a3-364f-835a-dff73ebe2526.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33668 IP address blocks: 2001:559:41::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:55:0b:ea:a8:c2:94:af:7b:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a21b3cdd-3f7c-48ef-b4b3-179b6a72135a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c2:10:23:cc:ab:7e:15:c6:7a:1c:9d:1f:9e: e5:10:21:2f:60:8b:ac:f7:88:f9:17:fc:a0:1c:b6: 77:3b:45:5b:47:ec:d0:be:0c:29:84:59:a3:db:72: dc:61:3c:26:5d:84:f6:b3:7a:86:a4:00:ae:63:aa: ca:9a:13:35:70:16:41:26:25:83:3a:a7:74:d6:8b: 17:c7:ca:06:de:4b:3e:47:ab:cc:0d:81:98:8c:aa: cd:f8:4d:9e:a7:d6:13:68:5a:bd:1b:f1:02:a8:2f: 0e:c6:a8:e0:58:9d:c2:07:49:e7:44:f1:68:af:82: 47:e8:b2:4c:32:d2:74:ba:56:6a:85:57:1f:01:d6: 4a:6e:52:43:35:92:2a:b0:9b:09:08:01:a7:34:db: 95:05:66:b2:5b:4f:1b:f3:ea:16:3d:7b:b7:43:49: 5a:0c:d2:7b:c5:7e:2c:b5:b1:a6:f0:2e:dc:2b:ac: 2c:3d:7a:79:07:a3:76:01:28:91:f0:f8:b8:ab:28: 65:e5:07:58:22:0c:10:07:69:28:fa:4d:fc:76:29: e8:5d:1a:26:ee:21:44:8a:5c:ab:4f:04:d5:69:ed: 0c:e6:72:02:4c:e5:08:c7:6d:13:c5:9f:82:09:dd: dd:a0:ba:16:b4:7f:df:9a:9a:3c:ce:f0:e0:90:09: d1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:FA:E7:27:F1:D9:C7:4C:87:E4:A0:F3:56:E3:76:56:93:FE:30:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ecd3359-79a3-364f-835a-dff73ebe2526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:41::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:87:17:04:47:3f:ef:e3:af:c8:99:ed:eb:c0:8c:07:41:e9: 5b:dc:0d:5e:30:fa:b8:b5:c7:65:59:5f:59:fe:62:c6:44:3e: 47:2e:c0:45:21:81:7b:e9:25:0f:3f:4a:50:ab:5f:42:89:cb: 68:66:97:37:42:86:4b:6b:2e:7c:3e:b5:e0:53:40:e6:b3:24: 2f:19:0c:de:e7:c0:97:76:c5:60:1c:68:21:1a:9c:06:63:f5: 1c:b5:5e:fa:84:ce:f5:42:23:2b:b0:c5:f7:74:cf:10:62:bf: ae:a8:eb:82:9d:e5:dd:e3:99:d4:35:f9:66:88:0f:72:b8:9a: e4:21:ef:f3:7c:96:82:60:28:40:e8:a4:01:39:fd:35:3b:d1: 5b:9b:eb:ea:dd:d6:e4:ba:02:32:20:60:ed:f5:0c:02:a6:4b: 05:99:bd:17:f1:73:6e:6a:8d:61:fa:e2:51:05:64:f2:f4:f0: 72:7e:cb:23:12:c7:20:7c:9f:25:26:fc:a0:07:43:e0:f8:ae: 69:0d:a6:7e:db:de:6a:1f:04:60:f2:ef:1f:d5:d6:1d:2d:c5: 0d:15:c6:66:7d:3f:78:91:52:56:a6:1d:46:27:95:3b:d9:f4: d8:60:69:e8:cc:88:e6:cf:ad:20:02:69:f0:cb:0c:61:c3:e0: b7:eb:0c:df -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgVUL6qjClK972QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTIxYjNjZGQtM2Y3Yy00OGVmLWI0YjMtMTc5YjZhNzIxMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8IQI8yrfhXGehydH57lECEvYIus94j5F/yg HLZ3O0VbR+zQvgwphFmj23LcYTwmXYT2s3qGpACuY6rKmhM1cBZBJiWDOqd01osX x8oG3ks+R6vMDYGYjKrN+E2ep9YTaFq9G/ECqC8OxqjgWJ3CB0nnRPFor4JH6LJM MtJ0ulZqhVcfAdZKblJDNZIqsJsJCAGnNNuVBWayW08b8+oWPXu3Q0laDNJ7xX4s tbGm8C7cK6wsPXp5B6N2ASiR8Pi4qyhl5QdYIgwQB2ko+k38dinoXRom7iFEilyr TwTVae0M5nICTOUIx20TxZ+CCd3doLoWtH/fmpo8zvDgkAnRrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKn65yfx2cdMh+Sg81bjdlaT/jDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmVjZDMzNTktNzlhMy0z NjRmLTgzNWEtZGZmNzNlYmUyNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQBB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAOHFwRHP+/jr8iZ7evAjAdB6VvcDV4w+ri1x2VZX1n+YsZEPkcu wEUhgXvpJQ8/SlCrX0KJy2hmlzdChktrLnw+teBTQOazJC8ZDN7nwJd2xWAcaCEa nAZj9Ry1XvqEzvVCIyuwxfd0zxBiv66o64Kd5d3jmdQ1+WaID3K4muQh7/N8loJg KEDopAE5/TU70Vub6+rd1uS6AjIgYO31DAKmSwWZvRfxc25qjWH64lEFZPL08HJ+ yyMSxyB8nyUm/KAHQ+D4rmkNpn7b3mofBGDy7x/V1h0txQ0VxmZ9P3iRUlamHUYn lTvZ9NhgaejMiObPrSACafDLDGHD4LfrDN8= -----END CERTIFICATE-----Generated at Fri Sep 25 18:11:34 2026 by rpki-client