$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72c795c2-a103-3ee1-a6a3-9c7382cba09a.roa File: 72c795c2-a103-3ee1-a6a3-9c7382cba09a.roa (raw, json) Hash identifier: KxGeHr/dB4NtAacp7Rv40EIMtsyJX/xLKC5pJk90hKE= Subject key identifier: 92:D2:E8:A1:61:18:C2:65:5D:84:9B:78:51:64:A2:A4:9F:49:C6:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDEA5D09F94FD6FF166D3C50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72c795c2-a103-3ee1-a6a3-9c7382cba09a.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33287 IP address blocks: 2001:559:875d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:ea:5d:09:f9:4f:d6:ff:16:6d:3c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=3d06e21b-f7b5-476c-bc50-dde6cd4c284f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:13:e7:d7:e8:94:aa:95:3b:50:f1:04:83:f1: ca:b0:b7:9f:0f:50:44:9b:c2:61:89:f2:34:bb:7c: fb:81:7a:9e:5e:3d:3e:62:71:f4:06:5e:a2:cf:46: 9f:2c:94:a4:38:52:73:df:89:53:52:a4:b4:dc:4c: b8:60:2d:8a:7a:0c:63:0a:8e:b4:e1:7c:07:1b:d6: db:b5:05:b5:fa:6f:c5:f1:0c:28:dc:17:35:27:f4: 35:88:94:4f:25:0a:e3:54:5a:62:57:c6:d4:a1:ff: c3:35:63:23:31:72:41:f7:08:ae:a5:02:06:c9:6a: 14:46:a9:d1:e7:0b:f3:f5:1e:22:59:92:85:4d:9f: 62:2f:0c:d6:52:c2:9e:4e:cf:dc:83:e7:9f:75:60: 6a:5f:66:85:ea:c8:cb:f7:7e:71:04:b6:3c:5f:50: b7:f9:fc:47:d9:25:e5:b1:6e:89:6d:a2:e6:c4:92: 29:a2:16:d8:88:e5:ad:35:e6:0f:ce:bc:f5:56:9d: ad:50:95:eb:b9:f4:09:8f:43:ff:d2:82:57:cd:59: 0b:b0:51:1f:c0:17:03:4c:57:27:3e:e8:12:90:8e: ea:17:a9:89:df:36:41:95:64:21:98:c1:e9:3f:80: cd:b2:eb:05:a1:14:12:3a:9b:50:5e:91:5f:f3:50: 2d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D2:E8:A1:61:18:C2:65:5D:84:9B:78:51:64:A2:A4:9F:49:C6:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/72c795c2-a103-3ee1-a6a3-9c7382cba09a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:875d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:43:93:6b:fb:81:59:24:36:60:b4:0f:1a:95:93:6b:9c:33: 63:3c:a6:99:41:d0:76:41:12:e6:f7:ac:a7:2d:ce:75:b3:57: e1:1f:5a:dc:5b:61:97:fb:87:71:29:2c:bf:66:19:48:0c:17: b4:0a:ee:84:f1:ef:d1:cf:72:5b:0c:7e:85:00:f4:a8:6a:29: 36:65:b4:29:3e:3a:1a:77:44:48:9a:a4:b3:8a:b0:0c:c2:0c: 58:a3:93:b6:22:82:dc:43:42:5d:0b:fd:8c:f0:ca:22:d2:de: 91:20:c1:63:05:1f:ec:8c:ec:15:39:51:0d:cd:c9:da:56:7e: af:65:94:65:8f:ba:d2:6a:8f:80:b5:51:43:bd:d3:07:87:a0: 30:29:85:2f:78:3d:92:7f:f9:de:d4:a4:f5:39:8b:67:c3:e6: ac:f5:74:42:5a:2c:92:82:20:32:e1:c4:0c:c0:e3:6f:75:db: 25:60:20:4d:2f:dc:7b:7a:78:69:eb:66:54:67:b9:f9:55:03: fe:c4:91:6b:cc:17:c8:01:d4:a3:62:12:d2:41:36:0d:b2:66: a9:d5:2c:44:01:ac:e3:61:7d:c6:5e:a1:7a:60:6f:da:35:13: 80:91:55:8d:48:58:0a:44:df:f0:05:c5:2d:69:51:ce:86:7d: a5:e8:40:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96l0J+U/W/xZtPFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk M2QwNmUyMWItZjdiNS00NzZjLWJjNTAtZGRlNmNkNGMyODRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxPn1+iUqpU7UPEEg/HKsLefD1BEm8JhifI0 u3z7gXqeXj0+YnH0Bl6iz0afLJSkOFJz34lTUqS03Ey4YC2KegxjCo604XwHG9bb tQW1+m/F8Qwo3Bc1J/Q1iJRPJQrjVFpiV8bUof/DNWMjMXJB9wiupQIGyWoURqnR 5wvz9R4iWZKFTZ9iLwzWUsKeTs/cg+efdWBqX2aF6sjL935xBLY8X1C3+fxH2SXl sW6JbaLmxJIpohbYiOWtNeYPzrz1Vp2tUJXrufQJj0P/0oJXzVkLsFEfwBcDTFcn PugSkI7qF6mJ3zZBlWQhmMHpP4DNsusFoRQSOptQXpFf81At2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJLS6KFhGMJlXYSbeFFkoqSfScYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzJjNzk1YzItYTEwMy0z ZWUxLWE2YTMtOWM3MzgyY2JhMDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYdd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD1Dk2v7gVkkNmC0DxqVk2ucM2M8pplB0HZBEub3rKctznWzV+Ef WtxbYZf7h3EpLL9mGUgMF7QK7oTx79HPclsMfoUA9KhqKTZltCk+Ohp3REiapLOK sAzCDFijk7YigtxDQl0L/YzwyiLS3pEgwWMFH+yM7BU5UQ3NydpWfq9llGWPutJq j4C1UUO90weHoDAphS94PZJ/+d7UpPU5i2fD5qz1dEJaLJKCIDLhxAzA42912yVg IE0v3Ht6eGnrZlRnuflVA/7EkWvMF8gB1KNiEtJBNg2yZqnVLEQBrONhfcZeoXpg b9o1E4CRVY1IWApE3/AFxS1pUc6GfaXoQEE= -----END CERTIFICATE-----Generated at Sun Mar 1 18:46:34 2026 by rpki-client