$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c749abf-a6ea-37a3-b352-0b0535e80bdc.roa File: 3c749abf-a6ea-37a3-b352-0b0535e80bdc.roa (raw, json) Hash identifier: w0mX1vfhhWSRIwqeWah4/bwaFK9RdJwXS2fncuerH24= Subject key identifier: 68:C5:0A:8D:E2:D2:C9:A2:7A:D2:A5:2F:2E:73:E2:3E:B6:B6:CC:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78DA79A51C0F9F57DA9BC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c749abf-a6ea-37a3-b352-0b0535e80bdc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7015 IP address blocks: 2001:559:87bf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8d:a7:9a:51:c0:f9:f5:7d:a9:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=170a2533-4768-432f-91d1-8e1f70b0f977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0d:d0:84:f4:5c:2b:36:d6:72:47:d3:10:18: 1f:53:94:79:bf:9e:dc:09:70:09:86:62:1d:7e:54: 47:ad:e0:c4:dc:81:07:ef:5c:8b:64:bb:1c:e2:db: c9:c9:d6:6c:84:3f:9c:4f:d5:b7:e1:c6:b5:60:88: b8:b8:a0:8a:91:09:d2:de:3e:48:9e:7b:69:26:66: 0a:28:86:ac:18:0b:9b:2d:cf:ee:25:4b:60:75:19: 07:e2:46:50:6f:6b:b8:e2:aa:48:6c:33:0a:e6:22: 60:d1:67:ea:04:9e:f6:ef:3c:a9:44:6f:ac:1a:97: 19:d4:e2:4f:7a:be:58:e3:32:d7:f9:30:4c:90:02: 3b:47:8e:41:a3:a3:ba:e4:8a:e7:a7:17:d2:da:71: d7:2c:d0:3f:1c:92:4a:71:41:02:9e:81:ff:4e:ba: b0:73:d3:d9:77:9f:a3:34:8e:77:97:44:4b:7e:c1: 80:18:c0:69:df:1f:6d:32:67:a8:d3:6e:e3:18:f7: 55:26:50:5a:ea:13:34:da:3e:5f:26:8e:55:8d:4e: 58:20:40:e6:1a:ec:39:0b:6d:96:14:ba:c4:21:c7: c3:41:c2:64:12:06:fe:ed:7a:b9:60:e8:06:39:dc: f2:02:35:26:3d:d2:56:2b:0f:a7:3f:70:91:75:e3: 11:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C5:0A:8D:E2:D2:C9:A2:7A:D2:A5:2F:2E:73:E2:3E:B6:B6:CC:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c749abf-a6ea-37a3-b352-0b0535e80bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87bf::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:0e:26:e2:4e:14:5a:4c:1c:e5:db:dd:32:ee:a6:0c:08:bf: 07:29:1a:f1:b6:63:67:ec:01:4f:bb:d2:53:fb:b1:3f:4b:bb: 6a:f3:0d:62:48:d7:cd:91:b6:71:28:d9:85:92:2a:b0:91:06: 06:11:76:6f:60:44:c3:b5:c6:c3:5c:f2:12:ae:81:a4:14:f5: 5a:40:3d:39:3b:13:9d:59:9d:b3:6c:71:57:e2:15:cd:0e:df: 07:ec:42:f7:e8:4f:44:93:22:75:8e:88:e9:ec:cc:14:e4:e2: b4:36:9b:03:a5:a2:58:64:92:5d:b7:c8:35:95:52:0a:f3:ad: 97:34:fc:6e:2f:05:4e:05:cc:17:4a:1e:57:a2:4d:8a:12:f8: 92:39:8e:2e:94:2c:d4:9b:6a:e3:03:22:14:05:cc:c8:ea:6d: 63:54:fb:5f:8b:8b:52:d6:6c:aa:3b:8a:de:76:45:b5:4b:55: e7:fe:df:ea:48:00:72:51:1e:a0:e5:f4:7d:3e:05:ab:7e:2a: d4:1a:4e:c5:71:67:ae:55:f8:4a:b5:34:30:1d:b5:6c:ff:f0: 9f:14:ad:2f:3f:ed:38:41:1a:08:de:54:56:17:16:6c:87:d7: 8f:7f:0e:fa:36:07:81:13:ff:97:fc:6d:7c:1c:c5:de:6f:5a: 5f:dc:35:78 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njaeaUcD59X2pvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MTcwYTI1MzMtNDc2OC00MzJmLTkxZDEtOGUxZjcwYjBmOTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA3QhPRcKzbWckfTEBgfU5R5v57cCXAJhmId flRHreDE3IEH71yLZLsc4tvJydZshD+cT9W34ca1YIi4uKCKkQnS3j5InntpJmYK KIasGAubLc/uJUtgdRkH4kZQb2u44qpIbDMK5iJg0WfqBJ727zypRG+sGpcZ1OJP er5Y4zLX+TBMkAI7R45Bo6O65IrnpxfS2nHXLNA/HJJKcUECnoH/Trqwc9PZd5+j NI53l0RLfsGAGMBp3x9tMmeo027jGPdVJlBa6hM02j5fJo5VjU5YIEDmGuw5C22W FLrEIcfDQcJkEgb+7Xq5YOgGOdzyAjUmPdJWKw+nP3CRdeMRrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGjFCo3i0smietKlLy5z4j62tswgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M3NDlhYmYtYTZlYS0z N2EzLWIzNTItMGIwNTM1ZTgwYmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYe/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANMOJuJOFFpMHOXb3TLupgwIvwcpGvG2Y2fsAU+70lP7sT9Lu2rz DWJI182RtnEo2YWSKrCRBgYRdm9gRMO1xsNc8hKugaQU9VpAPTk7E51ZnbNscVfi Fc0O3wfsQvfoT0STInWOiOnszBTk4rQ2mwOlolhkkl23yDWVUgrzrZc0/G4vBU4F zBdKHleiTYoS+JI5ji6ULNSbauMDIhQFzMjqbWNU+1+Li1LWbKo7it52RbVLVef+ 3+pIAHJRHqDl9H0+Bat+KtQaTsVxZ65V+Eq1NDAdtWz/8J8UrS8/7ThBGgjeVFYX FmyH149/Dvo2B4ET/5f8bXwcxd5vWl/cNXg= -----END CERTIFICATE-----Generated at Wed Jul 29 09:11:59 2026 by rpki-client