$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa File: 3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa (raw, json) Hash identifier: QGia7CFXXvcAMTcu9AqPivW+jFmU8hQzyIYCPc6RANc= Subject key identifier: E8:D5:03:04:8F:41:63:93:82:AF:9F:33:E3:6C:7C:D8:49:A6:F7:1C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F20F7C7100BBFE10B65431380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 33657 IP address blocks: 2001:559:a03b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c7:10:0b:bf:e1:0b:65:43:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=6574d5bd-3da9-489d-bc59-228a8412f279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:20:1e:a2:06:e2:e3:71:b7:f7:77:5e:21:79: 5d:93:06:50:9c:29:53:48:4a:02:c1:a1:66:c0:73: d8:df:7e:6e:af:d8:ac:22:72:4e:25:1d:03:20:74: c7:79:e3:bb:68:2a:64:f6:b0:44:58:76:14:10:16: b4:25:20:98:e3:f5:fb:13:9b:9c:f5:35:7c:dd:e4: 9a:32:84:9a:bf:98:0c:7f:2e:2c:50:63:39:14:d0: 6f:8c:3e:8a:62:91:28:80:ff:5c:f4:d3:c4:99:ad: 8c:57:8e:85:d9:2c:1d:fa:82:ac:f2:e9:7c:5e:14: 44:fb:6a:22:4d:2a:b1:8e:9e:38:c7:73:a4:44:16: 89:f6:1f:41:28:23:85:40:38:70:a1:15:7c:49:bd: dd:f9:54:58:bf:d2:42:ca:90:26:ae:f4:79:d1:b3: a6:49:86:f3:63:c7:26:34:f8:3e:5b:54:e3:9c:ab: 03:65:3a:a4:c7:a0:6b:9e:90:fa:90:36:3f:83:87: 23:3c:0a:c9:9a:68:1f:a7:c5:10:9d:3d:08:e6:4c: 62:45:2f:df:1f:be:a1:c6:8f:d1:67:99:d4:cc:3f: 93:6e:f1:87:d3:01:5d:ad:02:2a:10:15:36:87:df: ec:22:dc:65:23:5f:6b:55:a8:b5:9f:04:1e:bc:88: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D5:03:04:8F:41:63:93:82:AF:9F:33:E3:6C:7C:D8:49:A6:F7:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a03b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f3:87:57:08:af:99:e1:21:df:0b:8b:a0:de:7d:a6:8a:75: 74:04:df:c5:41:da:a1:5f:49:4f:5b:fd:22:f9:42:77:ca:fa: 50:bc:bc:01:0c:15:ca:30:3d:41:c9:ab:0e:e2:aa:a5:4a:ac: 46:09:45:33:4a:f9:95:a3:3c:43:da:9b:9e:fd:b7:dd:fc:6b: 43:f7:28:5d:4d:13:29:a8:a3:36:9f:ef:e9:e5:7b:83:63:68: 89:f3:6b:d8:14:1e:c2:73:fa:e3:d2:95:59:73:f3:33:b5:d3: 87:72:74:a1:97:d6:dc:26:ed:f5:e0:67:b7:0d:69:a9:89:1e: d6:d4:18:ca:7a:6b:64:ae:20:d5:13:03:f5:73:17:81:f2:d3: 64:3b:0a:83:20:34:cb:43:2a:f0:90:f8:a5:76:28:88:13:5d: 15:59:dc:a3:fb:01:bf:1d:77:a3:9b:1a:7e:55:41:ac:98:09: cf:ce:9e:0b:30:0d:92:7c:24:a0:53:80:bf:3f:6b:c3:c9:e1: 72:56:e8:77:9a:a0:d6:15:6b:e1:5b:72:50:d6:ea:af:80:05: 00:c7:f8:a9:ca:b8:56:f5:b3:20:b9:ff:5f:37:ae:4c:c5:fa: 6c:36:3b:29:28:c3:55:10:ca:dd:e9:3e:b1:0b:3f:f0:af:1b: 6e:9f:13:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8g98cQC7/hC2VDE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NjU3NGQ1YmQtM2RhOS00ODlkLWJjNTktMjI4YTg0MTJmMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyAeogbi43G393deIXldkwZQnClTSEoCwaFm wHPY335ur9isInJOJR0DIHTHeeO7aCpk9rBEWHYUEBa0JSCY4/X7E5uc9TV83eSa MoSav5gMfy4sUGM5FNBvjD6KYpEogP9c9NPEma2MV46F2Swd+oKs8ul8XhRE+2oi TSqxjp44x3OkRBaJ9h9BKCOFQDhwoRV8Sb3d+VRYv9JCypAmrvR50bOmSYbzY8cm NPg+W1TjnKsDZTqkx6BrnpD6kDY/g4cjPArJmmgfp8UQnT0I5kxiRS/fH76hxo/R Z5nUzD+TbvGH0wFdrQIqEBU2h9/sItxlI19rVai1nwQevIgPywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOjVAwSPQWOTgq+fM+NsfNhJpvccMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NmYWU3ZDctZjk3OC0z MWQ2LWIwNjUtODFlYmQ5OWE4Yjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLzh1cIr5nhId8Li6DefaaKdXQE38VB2qFfSU9b/SL5QnfK+lC8 vAEMFcowPUHJqw7iqqVKrEYJRTNK+ZWjPEPam579t938a0P3KF1NEymoozaf7+nl e4NjaInza9gUHsJz+uPSlVlz8zO104dydKGX1twm7fXgZ7cNaamJHtbUGMp6a2Su INUTA/VzF4Hy02Q7CoMgNMtDKvCQ+KV2KIgTXRVZ3KP7Ab8dd6ObGn5VQayYCc/O ngswDZJ8JKBTgL8/a8PJ4XJW6HeaoNYVa+FbclDW6q+ABQDH+KnKuFb1syC5/183 rkzF+mw2Oykow1UQyt3pPrELP/CvG26fE9M= -----END CERTIFICATE-----Generated at Sun Sep 27 06:50:39 2026 by rpki-client