$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678f0e57-76f7-305f-b925-1ee5533eaf72.roa File: 678f0e57-76f7-305f-b925-1ee5533eaf72.roa (raw, json) Hash identifier: xg7KJLhfedSpkM/PIgQK7Ze9C/CbwxD3+ueHkSQuI2A= Subject key identifier: 42:A9:28:9D:D8:0C:55:B5:8B:DF:4C:58:12:20:6E:7B:B1:32:DB:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8DF43262B4AAD55463700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678f0e57-76f7-305f-b925-1ee5533eaf72.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33287 IP address blocks: 2001:559:8698::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:df:43:26:2b:4a:ad:55:46:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=f852be40-eac4-4929-8fa6-d993f2f0c77c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:37:f8:12:cb:d6:10:d9:1d:11:e3:ac:09: a1:4a:f3:7e:13:55:29:31:9c:43:fd:c6:ce:18:9e: a4:61:a3:e5:dd:1c:19:98:f6:bb:08:6f:e9:b3:e5: aa:ff:cd:28:51:b5:a3:47:16:59:5d:5f:0b:b8:96: b4:8f:f1:ed:4a:a4:bd:ca:e1:b8:eb:6a:f0:78:27: ca:44:3c:72:6a:5c:26:22:cd:d1:b3:d4:36:12:bd: 3c:dc:36:b9:bf:62:cc:2a:a2:cd:5f:92:c9:2f:38: df:db:7c:41:d4:4f:d1:45:5e:aa:c7:8a:d9:8f:3d: 09:33:ca:b3:00:23:07:44:12:18:85:03:75:4e:5f: 1d:3f:93:fd:6f:d6:3d:d8:7a:7c:7e:b4:de:8f:23: 0d:e9:d3:bb:7b:b1:36:15:93:36:31:81:38:3a:1b: 0c:00:93:cf:21:77:36:dd:65:4d:3a:e2:6f:f8:15: 5d:16:c9:5f:a6:77:13:06:eb:2e:81:f6:53:74:f9: 11:70:4b:99:fe:f2:aa:70:25:0e:7b:75:4f:13:ba: 98:1b:3c:d9:73:ae:ba:b7:c3:4f:99:33:48:a0:bb: e7:5a:7b:2a:2a:54:4c:e7:5d:a3:a1:cf:7b:db:e8: ca:f2:d4:23:13:a4:27:38:05:87:a9:12:2a:71:4f: b9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A9:28:9D:D8:0C:55:B5:8B:DF:4C:58:12:20:6E:7B:B1:32:DB:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/678f0e57-76f7-305f-b925-1ee5533eaf72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8698::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:9b:b5:53:39:3e:ec:a9:b8:23:6c:42:89:bd:64:9c:fc:80: 37:6f:cf:51:3b:60:72:68:52:e7:c2:01:39:eb:46:a2:2a:64: 3c:86:37:51:64:c1:78:d0:00:e2:7a:93:ff:87:58:82:b6:0c: 03:59:4f:ee:60:50:e9:ec:e2:86:5b:ff:31:41:c4:48:be:a1: 95:cf:9f:10:a3:c2:c9:49:4c:9c:05:29:46:46:1e:bd:78:2e: 46:f7:a6:09:de:a5:4b:73:89:01:ff:6f:c9:e2:05:00:1c:6a: 42:41:92:e7:7e:96:3d:1b:44:ba:7c:f5:df:79:ca:d3:50:fc: 71:9c:23:4d:e0:87:08:79:40:87:92:d5:0c:b1:5a:d5:73:a8: b6:f8:65:e1:ed:35:55:c8:30:a7:e0:cd:19:79:b6:f2:79:22: b6:a2:81:40:1c:78:8d:48:56:61:dd:3d:f4:56:1b:9e:2c:c5: 6b:32:51:40:51:3b:32:24:b6:ad:ab:e8:1b:57:cd:a2:87:86: b3:6a:70:18:6f:11:c4:d1:95:c4:42:7c:fa:8c:0d:e7:ff:b1: 60:5b:f0:c7:f2:ee:a3:fc:9d:ed:a9:17:bf:43:59:cd:3a:92: 20:91:11:5e:cb:04:22:aa:17:d6:05:a3:14:58:a7:9d:23:a6: 6b:12:d5:66 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96N9DJitKrVVGNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk Zjg1MmJlNDAtZWFjNC00OTI5LThmYTYtZDk5M2YyZjBjNzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8c3+BLL1hDZHRHjrAmhSvN+E1UpMZxD/cbO GJ6kYaPl3RwZmPa7CG/ps+Wq/80oUbWjRxZZXV8LuJa0j/HtSqS9yuG462rweCfK RDxyalwmIs3Rs9Q2Er083Da5v2LMKqLNX5LJLzjf23xB1E/RRV6qx4rZjz0JM8qz ACMHRBIYhQN1Tl8dP5P9b9Y92Hp8frTejyMN6dO7e7E2FZM2MYE4OhsMAJPPIXc2 3WVNOuJv+BVdFslfpncTBusugfZTdPkRcEuZ/vKqcCUOe3VPE7qYGzzZc666t8NP mTNIoLvnWnsqKlRM512joc972+jK8tQjE6QnOAWHqRIqcU+5WQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEKpKJ3YDFW1i99MWBIgbnuxMtsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjc4ZjBlNTctNzZmNy0z MDVmLWI5MjUtMWVlNTUzM2VhZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYaY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANObtVM5PuypuCNsQom9ZJz8gDdvz1E7YHJoUufCATnrRqIqZDyG N1FkwXjQAOJ6k/+HWIK2DANZT+5gUOns4oZb/zFBxEi+oZXPnxCjwslJTJwFKUZG Hr14Lkb3pgnepUtziQH/b8niBQAcakJBkud+lj0bRLp89d95ytNQ/HGcI03ghwh5 QIeS1QyxWtVzqLb4ZeHtNVXIMKfgzRl5tvJ5IraigUAceI1IVmHdPfRWG54sxWsy UUBROzIktq2r6BtXzaKHhrNqcBhvEcTRlcRCfPqMDef/sWBb8Mfy7qP8ne2pF79D Wc06kiCREV7LBCKqF9YFoxRYp50jpmsS1WY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:25:12 2026 by rpki-client