$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa File: 35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa (raw, json) Hash identifier: tfC5OQFEYeG1dCPxDIZ7kps7Bwox1eE0fD4sMXKPvg0= Subject key identifier: 10:96:3F:BE:CA:3F:0E:0D:8A:05:16:47:9E:E5:F3:F0:FC:15:27:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4982886B7BA10903C5BB5680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33657 IP address blocks: 2001:559:a003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:88:6b:7b:a1:09:03:c5:bb:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=daf9b9c2-07b0-4c4f-90d4-64cb55b3eac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:d0:2d:b1:27:40:ca:28:d5:a4:8f:7f:9f: f6:82:7f:34:99:07:c5:4f:a1:51:91:f7:ee:5d:e2: ea:44:28:13:ec:9e:96:8e:a8:26:f2:8f:4c:0f:27: 65:fe:70:c5:a7:97:9d:28:aa:13:4c:18:fc:79:f7: 8a:db:6e:8d:b3:b9:9e:fc:8b:bf:22:00:5c:f8:92: 08:2c:87:74:2b:f6:7a:26:7c:9c:bf:90:b7:bc:ef: a0:4d:0f:e4:90:75:73:0a:d2:95:06:9d:f1:2c:17: 92:f4:28:76:8f:68:38:08:e2:14:ee:7a:e4:91:5c: 80:f4:34:be:fc:a0:91:33:30:e2:ae:e6:13:13:41: d4:55:68:8a:30:41:1c:59:65:69:d1:be:37:ab:c4: 57:fc:5a:ac:7b:c8:4d:14:30:25:91:27:9f:fc:7b: 9c:2c:f0:f1:59:28:d1:aa:fd:66:26:d8:ee:e4:80: 2a:d4:f5:08:e1:4b:8e:5b:b1:66:e2:bc:7d:c1:92: cd:67:86:58:8d:02:04:a4:3c:25:3f:fa:67:bb:56: 5d:3f:39:bc:93:ca:5d:05:4a:70:7e:49:c8:d0:48: 37:70:d2:94:f2:f1:b3:78:4c:b9:95:3e:56:8f:18: 3b:fb:89:ab:dc:be:c4:c2:70:1a:36:8f:8a:3a:87: 42:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:96:3F:BE:CA:3F:0E:0D:8A:05:16:47:9E:E5:F3:F0:FC:15:27:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:75:2c:b9:f1:25:46:58:bd:05:e0:7e:fe:fc:37:64:c0:48: 7d:68:09:20:0b:cc:ee:f9:f7:3c:de:75:7a:d5:26:16:d3:9b: 24:71:33:8b:84:bf:47:0b:10:7b:f2:35:85:98:94:65:2f:5f: 2f:29:2e:05:aa:7d:60:5e:83:7c:e0:4e:0b:d2:c0:36:ae:af: fc:60:69:d5:f0:5e:5d:80:48:07:95:07:86:24:a7:2d:60:c1: 97:ec:98:44:02:ec:f9:51:59:7c:27:87:18:1c:40:f6:4a:98: ec:e7:46:fe:b7:a9:60:c9:3f:79:0e:79:41:98:83:27:fc:b5: 0e:a6:61:e4:cf:5f:af:c2:13:ba:84:98:7a:5f:28:25:d1:b5: 9f:64:35:c3:38:ce:01:00:1e:c7:42:74:59:83:a1:11:42:c9: 8a:5c:31:29:1a:2d:fd:c2:fd:f7:d5:be:4b:57:86:a5:f2:4c: f5:7b:c4:7d:a7:a3:69:fe:6a:73:5d:de:87:a5:be:a5:c9:8b: 97:8c:18:6f:24:8a:51:2d:2c:7c:12:9e:a4:bd:6e:a5:25:f7: 46:ed:25:06:1c:e9:35:7f:92:45:2e:17:5d:cb:cd:9d:93:ab: 09:32:49:d2:5f:98:28:8d:c9:d9:79:1c:f2:ce:b7:4a:3d:17: 9e:74:5d:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jgohre6EJA8W7VoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGFmOWI5YzItMDdiMC00YzRmLTkwZDQtNjRjYjU1YjNlYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXrQLbEnQMoo1aSPf5/2gn80mQfFT6FRkffu XeLqRCgT7J6Wjqgm8o9MDydl/nDFp5edKKoTTBj8efeK226Ns7me/Iu/IgBc+JII LId0K/Z6Jnycv5C3vO+gTQ/kkHVzCtKVBp3xLBeS9Ch2j2g4COIU7nrkkVyA9DS+ /KCRMzDiruYTE0HUVWiKMEEcWWVp0b43q8RX/Fqse8hNFDAlkSef/HucLPDxWSjR qv1mJtju5IAq1PUI4UuOW7Fm4rx9wZLNZ4ZYjQIEpDwlP/pnu1ZdPzm8k8pdBUpw fknI0Eg3cNKU8vGzeEy5lT5Wjxg7+4mr3L7EwnAaNo+KOodCRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBCWP77KPw4NigUWR57l8/D8FScXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVlODRiNmQtYzZlOC0z ZmQ3LWIxMDItMjQ2N2U3OTY2YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM51LLnxJUZYvQXgfv78N2TASH1oCSALzO759zzedXrVJhbTmyRx M4uEv0cLEHvyNYWYlGUvXy8pLgWqfWBeg3zgTgvSwDaur/xgadXwXl2ASAeVB4Yk py1gwZfsmEQC7PlRWXwnhxgcQPZKmOznRv63qWDJP3kOeUGYgyf8tQ6mYeTPX6/C E7qEmHpfKCXRtZ9kNcM4zgEAHsdCdFmDoRFCyYpcMSkaLf3C/ffVvktXhqXyTPV7 xH2no2n+anNd3oelvqXJi5eMGG8kilEtLHwSnqS9bqUl90btJQYc6TV/kkUuF13L zZ2TqwkySdJfmCiNydl5HPLOt0o9F550XYQ= -----END CERTIFICATE-----Generated at Sat Sep 26 02:35:12 2026 by rpki-client