$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/540fee2d-a0ee-3cd0-b6d6-0730db8a4b9e.roa File: 540fee2d-a0ee-3cd0-b6d6-0730db8a4b9e.roa (raw, json) Hash identifier: KzdE0/G3A6AXvdv0RN8b6rC2NSxvX1oWMiy/7NQae5g= Subject key identifier: 5A:58:74:A7:25:6C:5B:B7:F1:98:83:33:E4:49:87:79:1A:94:70:74 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDEA90FAA82C1FA3DCD4DA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/540fee2d-a0ee-3cd0-b6d6-0730db8a4b9e.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33659 IP address blocks: 2001:559:c3da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:90:fa:a8:2c:1f:a3:dc:d4:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=d4ab5c45-4e3d-4363-99cd-d4ddf9a562d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:29:2a:e6:22:7b:49:20:43:96:ff:73:d9: de:11:f2:b5:d2:98:85:2a:3c:80:62:b5:39:25:6c: 70:ba:3b:1d:a1:04:3a:67:ac:36:5e:a6:67:47:97: 2b:d3:c4:91:65:72:82:ef:1b:89:01:35:82:0b:4c: 34:8a:87:10:e2:20:75:91:16:43:fa:5c:db:4c:db: 8a:b5:f6:95:b4:8f:fb:9d:fa:b5:12:37:2a:1b:9e: c8:98:12:b0:0d:92:63:3b:0c:31:f9:2a:f7:9d:1b: 29:71:cc:a7:4d:a6:06:83:8f:64:64:7f:39:cd:f9: 5a:40:39:fe:5e:b5:14:36:5e:05:8c:c3:8e:35:78: 7d:10:9f:9f:13:e5:05:c6:53:6d:06:62:0f:29:bc: 2b:be:4e:28:87:5d:a3:28:27:08:81:fa:39:5c:1c: 6d:0d:78:22:1e:75:44:83:48:79:65:e8:64:52:20: 3a:2d:de:bd:dd:75:7b:f6:98:5c:11:33:4c:0e:8a: fc:5d:55:5b:3f:9b:25:e8:25:06:93:0c:77:99:c1: 48:c5:22:d1:f4:32:08:01:85:23:a7:3f:5b:05:ec: ca:e8:dd:a8:27:72:93:a5:1c:fb:07:44:37:7f:28: 0d:ac:3b:80:52:6b:6a:8b:d0:0c:7a:98:f9:18:9f: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:58:74:A7:25:6C:5B:B7:F1:98:83:33:E4:49:87:79:1A:94:70:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/540fee2d-a0ee-3cd0-b6d6-0730db8a4b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:a4:07:85:6c:28:b8:87:c5:1d:f0:46:33:00:85:72:cb:18: 1d:78:3d:15:de:31:8a:b1:80:ea:4b:e7:d1:f4:b5:73:ce:2c: 5e:6b:ea:a8:22:5f:e2:cb:de:1f:b3:c9:d3:6f:44:e8:11:a9: d6:7f:6d:0a:51:bb:56:b2:8a:34:d8:d5:92:bb:ad:8b:89:2d: 11:80:ba:4c:12:1c:05:a4:97:02:ab:ae:35:25:72:01:4e:db: 57:15:42:ba:49:47:b7:dd:89:22:f4:be:65:07:02:5b:31:10: 31:d9:8e:88:bf:49:ad:dd:ea:f0:cd:aa:2f:e6:e8:67:f7:6d: 4f:94:9e:e8:4c:e2:e3:41:a5:23:03:fb:9a:6a:3f:7b:15:48: e0:90:bb:af:1d:16:09:ce:66:6d:eb:83:68:69:7f:a4:10:46: f5:0c:63:36:d9:43:bc:21:41:bd:98:7b:75:46:6e:99:a3:9d: 63:38:5e:b4:ea:62:fd:06:c0:75:c2:05:22:bd:d4:65:7c:7a: 4b:97:59:ac:00:49:36:a0:01:1c:af:77:49:27:41:53:b8:df: c1:45:89:18:ff:bd:2b:fa:66:ec:5f:8b:6a:59:9b:b4:6c:96: 86:82:44:e0:33:4b:54:18:b8:6d:0e:13:21:1c:17:25:e5:28: 63:36:39:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96pD6qCwfo9zU2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk ZDRhYjVjNDUtNGUzZC00MzYzLTk5Y2QtZDRkZGY5YTU2MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZspKuYie0kgQ5b/c9neEfK10piFKjyAYrU5 JWxwujsdoQQ6Z6w2XqZnR5cr08SRZXKC7xuJATWCC0w0iocQ4iB1kRZD+lzbTNuK tfaVtI/7nfq1EjcqG57ImBKwDZJjOwwx+Sr3nRspccynTaYGg49kZH85zflaQDn+ XrUUNl4FjMOONXh9EJ+fE+UFxlNtBmIPKbwrvk4oh12jKCcIgfo5XBxtDXgiHnVE g0h5ZehkUiA6Ld693XV79phcETNMDor8XVVbP5sl6CUGkwx3mcFIxSLR9DIIAYUj pz9bBezK6N2oJ3KTpRz7B0Q3fygNrDuAUmtqi9AMepj5GJ82aQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFpYdKclbFu38ZiDM+RJh3kalHB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTQwZmVlMmQtYTBlZS0z Y2QwLWI2ZDYtMDczMGRiOGE0YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMekB4VsKLiHxR3wRjMAhXLLGB14PRXeMYqxgOpL59H0tXPOLF5r 6qgiX+LL3h+zydNvROgRqdZ/bQpRu1ayijTY1ZK7rYuJLRGAukwSHAWklwKrrjUl cgFO21cVQrpJR7fdiSL0vmUHAlsxEDHZjoi/Sa3d6vDNqi/m6Gf3bU+UnuhM4uNB pSMD+5pqP3sVSOCQu68dFgnOZm3rg2hpf6QQRvUMYzbZQ7whQb2Ye3VGbpmjnWM4 XrTqYv0GwHXCBSK91GV8ekuXWawASTagARyvd0knQVO438FFiRj/vSv6Zuxfi2pZ m7RsloaCROAzS1QYuG0OEyEcFyXlKGM2OYo= -----END CERTIFICATE-----Generated at Sun Mar 1 20:26:16 2026 by rpki-client