$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f4fb82e-0e40-3ba1-8e0a-5f12cb6c80c9.roa File: 3f4fb82e-0e40-3ba1-8e0a-5f12cb6c80c9.roa (raw, json) Hash identifier: e7+1gyxj3dg99UtNlIpw98m/mE4/kEaUWM+xdJkFKTc= Subject key identifier: 3A:55:90:07:6A:87:1F:DB:44:65:DE:30:25:D9:51:0A:ED:06:6F:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78B7D653C898B11EA0F8D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f4fb82e-0e40-3ba1-8e0a-5f12cb6c80c9.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7922 IP address blocks: 2001:558::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8b:7d:65:3c:89:8b:11:ea:0f:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ac5d1f3d-4b24-4184-b9f6-42cd9a7e5924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cb:1a:67:2c:15:29:70:7b:39:4a:44:14:73: ef:e5:0a:47:a0:bd:76:49:1c:09:ce:41:35:ae:20: 0d:bc:ea:bc:8b:0a:8b:60:86:68:da:31:c0:88:c0: d7:34:a8:28:4d:6b:81:74:c6:4a:cc:50:56:64:4c: 96:e6:1a:bf:58:fe:b4:83:54:48:33:57:ff:70:c4: 4f:6f:fa:30:07:d9:de:d5:92:58:31:d5:32:24:31: 31:57:4f:74:df:c8:0f:b7:9a:e4:8b:9b:9c:59:a5: c7:53:d3:3a:06:c1:dc:e4:fe:3f:3a:84:41:07:ee: ad:81:5f:e6:3d:7a:3c:a3:42:3c:6a:02:6a:92:17: 81:09:ba:3c:04:c2:11:ee:36:c4:d8:1a:42:bb:09: 60:2c:70:89:de:19:41:39:02:71:96:e4:2a:6e:c7: 19:a8:7e:e4:f6:ef:a1:fb:92:95:86:ad:19:f3:dc: 89:86:91:d7:eb:d0:84:28:79:1f:bb:05:d4:ad:43: 16:d5:e6:e2:18:c3:73:91:20:2d:19:91:b2:0d:22: bc:16:d2:1f:f0:6e:e8:93:c2:9d:6c:c2:61:d5:78: 91:a8:14:51:18:1f:4a:c4:d9:28:cb:6c:4f:e3:93: b1:23:b0:74:51:de:70:58:f9:5a:2a:0e:1b:cf:e8: 66:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:55:90:07:6A:87:1F:DB:44:65:DE:30:25:D9:51:0A:ED:06:6F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f4fb82e-0e40-3ba1-8e0a-5f12cb6c80c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558::/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:c0:5b:90:47:16:e0:11:79:8c:14:67:ae:b0:40:ee:22:e1: 55:00:75:6c:6b:0f:fb:f2:02:dd:9d:74:65:16:0d:1a:21:72: 31:fa:05:a2:54:09:e1:5e:80:d1:e2:83:f7:1b:57:52:15:9a: 47:ab:47:2a:32:6f:1a:87:8a:dc:1b:dc:e5:68:8b:75:a5:73: ee:c2:51:5e:22:02:8e:f3:43:f2:12:b1:ff:25:3c:d1:d4:05: ac:51:bf:68:76:66:0b:44:a2:fa:c1:17:2c:a5:29:fb:4a:e7: 19:1f:a7:a0:98:1c:ba:88:4e:e8:ec:6d:cd:b0:95:db:11:e8: e4:c8:01:fe:b1:56:54:b7:4f:e0:88:3f:45:7b:d2:82:84:c8: 08:19:cd:6e:d2:33:f8:21:bc:6c:90:d6:db:88:e3:e1:ea:28: b6:7c:25:da:c0:69:a8:fe:51:26:c5:6b:38:82:71:09:ae:5d: c5:68:7c:fe:e5:16:72:f3:2f:2a:78:4b:8a:a4:ea:ef:3c:dd: f2:57:28:fd:c4:b8:6f:f1:91:c8:49:64:01:8c:d5:1d:29:d5: 06:e8:1c:d3:4b:41:fe:47:c7:7d:84:0c:71:64:7a:11:7a:81: c4:86:35:28:32:36:d1:fd:83:64:a3:c3:0a:de:ef:3f:0f:78: e9:e7:f9:a2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6ni31lPImLEeoPjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWM1ZDFmM2QtNGIyNC00MTg0LWI5ZjYtNDJjZDlhN2U1OTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAissaZywVKXB7OUpEFHPv5QpHoL12SRwJzkE1 riANvOq8iwqLYIZo2jHAiMDXNKgoTWuBdMZKzFBWZEyW5hq/WP60g1RIM1f/cMRP b/owB9ne1ZJYMdUyJDExV09038gPt5rki5ucWaXHU9M6BsHc5P4/OoRBB+6tgV/m PXo8o0I8agJqkheBCbo8BMIR7jbE2BpCuwlgLHCJ3hlBOQJxluQqbscZqH7k9u+h +5KVhq0Z89yJhpHX69CEKHkfuwXUrUMW1ebiGMNzkSAtGZGyDSK8FtIf8G7ok8Kd bMJh1XiRqBRRGB9KxNkoy2xP45OxI7B0Ud5wWPlaKg4bz+hmRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFDpVkAdqhx/bRGXeMCXZUQrtBm9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y0ZmI4MmUtMGU0MC0z YmExLThlMGEtNWYxMmNiNmM4MGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDIAEFWDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA5wFuQRxbgEXmMFGeusEDuIuFVAHVsaw/78gLdnXRlFg0aIXIx+gWi VAnhXoDR4oP3G1dSFZpHq0cqMm8ah4rcG9zlaIt1pXPuwlFeIgKO80PyErH/JTzR 1AWsUb9odmYLRKL6wRcspSn7SucZH6egmBy6iE7o7G3NsJXbEejkyAH+sVZUt0/g iD9Fe9KChMgIGc1u0jP4IbxskNbbiOPh6ii2fCXawGmo/lEmxWs4gnEJrl3FaHz+ 5RZy8y8qeEuKpOrvPN3yVyj9xLhv8ZHISWQBjNUdKdUG6BzTS0H+R8d9hAxxZHoR eoHEhjUoMjbR/YNko8MK3u8/D3jp5/mi -----END CERTIFICATE-----Generated at Wed Jul 29 05:05:02 2026 by rpki-client