$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85d2480d-345c-31bc-ba4b-99d2e5eeb954.roa File: 85d2480d-345c-31bc-ba4b-99d2e5eeb954.roa (raw, json) Hash identifier: GTELlT5dRIu+4Jxy6EhLpRL+wY1xmi+ntTfnKdB5LMs= Subject key identifier: 21:7B:EC:18:D6:47:79:7F:23:2B:D6:4C:1F:AE:BF:51:31:63:E4:3B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78D889C1A3D0AE03C55CDA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85d2480d-345c-31bc-ba4b-99d2e5eeb954.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7015 IP address blocks: 2001:559:2bb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8d:88:9c:1a:3d:0a:e0:3c:55:cd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e016cc4b-f951-42cc-ad91-daca2d7f6f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:1c:87:b4:5c:68:ad:e6:ce:e1:4d:58:11: 09:bc:ef:3e:40:c8:9d:98:ea:05:08:a5:9b:b9:1b: f3:e6:dc:97:a0:b1:60:d7:8e:da:98:a9:af:81:e5: 3a:d3:d4:fa:9f:3f:bf:9c:a4:3d:21:b5:e6:a8:4f: 4b:20:aa:ef:f5:57:0b:73:4d:12:0f:e0:7c:a7:2c: 17:a0:7e:38:82:e0:54:3b:1f:be:b6:b0:ca:86:99: 6e:2b:e6:37:d6:3f:f5:c5:be:13:69:71:ed:21:06: ea:fa:ea:11:61:c6:7f:15:c8:f5:a7:a3:55:22:69: 92:db:45:64:ca:f2:94:4c:16:a4:1a:f4:20:f9:30: f3:d4:2a:76:9f:34:61:a0:53:d8:a0:f6:ff:53:ad: 32:59:d8:58:10:e5:ae:b8:7b:6f:a6:b8:1d:22:4f: 2a:fb:02:22:0f:c2:63:18:82:86:fa:c2:a8:64:2a: 6e:80:2b:01:74:a0:e9:1a:ac:d0:41:c3:dc:4f:57: 07:ac:9d:e5:0c:d3:19:8a:6a:1c:b3:84:1f:8e:58: 7d:07:26:7f:bf:fe:55:5e:78:e0:4f:2e:6b:5d:a8: ff:72:25:c7:0c:3b:af:a6:3f:e2:7c:47:0f:ac:23: 8a:6d:75:d8:36:19:e4:5f:bd:ca:b2:b4:93:56:c8: 19:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7B:EC:18:D6:47:79:7F:23:2B:D6:4C:1F:AE:BF:51:31:63:E4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85d2480d-345c-31bc-ba4b-99d2e5eeb954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2bb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:af:28:57:f0:79:62:51:63:ce:0c:25:bc:7a:15:de:84:d2: 46:bc:7c:7f:1f:a6:91:0a:f8:43:2c:fb:4d:ab:61:c9:ce:e2: 18:4a:29:6d:96:0d:49:ea:eb:0e:14:9e:fe:89:0a:bb:f9:67: 68:a9:d8:ac:17:e6:ee:27:95:f3:76:58:37:cd:30:07:4b:6c: 42:d1:d3:99:8b:72:6d:96:85:46:4d:96:c1:48:99:93:dd:49: 24:67:53:13:5a:f9:79:c0:c4:e8:b6:24:d8:7c:a7:32:b7:7b: 70:15:24:3b:51:07:8c:79:fc:a1:e9:3a:35:a5:c5:ae:4a:ac: be:06:9e:8e:2b:93:df:50:e5:83:c4:15:08:34:69:03:38:ff: 04:74:a3:a0:7b:fa:09:54:fe:be:0f:3f:b8:89:e9:1c:4b:21: 61:a3:4b:8d:93:76:99:97:00:a8:fe:19:c6:ed:b2:16:85:d9: ef:7a:11:a0:82:24:ed:8c:0d:46:5d:8e:13:4b:28:ee:de:35: 2d:c7:ae:71:a4:0f:bf:89:66:4f:8e:4b:6f:2a:50:34:e3:9b: f8:c5:fb:8d:80:5a:d0:6a:4d:f1:76:fc:ca:34:56:fa:56:32: 8a:ea:9d:79:75:12:05:64:80:6d:a9:e8:79:d0:50:46:50:ea: 49:1c:c4:a7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njYicGj0K4DxVzaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTAxNmNjNGItZjk1MS00MmNjLWFkOTEtZGFjYTJkN2Y2ZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Ach7RcaK3mzuFNWBEJvO8+QMidmOoFCKWb uRvz5tyXoLFg147amKmvgeU609T6nz+/nKQ9IbXmqE9LIKrv9VcLc00SD+B8pywX oH44guBUOx++trDKhpluK+Y31j/1xb4TaXHtIQbq+uoRYcZ/Fcj1p6NVImmS20Vk yvKUTBakGvQg+TDz1Cp2nzRhoFPYoPb/U60yWdhYEOWuuHtvprgdIk8q+wIiD8Jj GIKG+sKoZCpugCsBdKDpGqzQQcPcT1cHrJ3lDNMZimocs4Qfjlh9ByZ/v/5VXnjg Ty5rXaj/ciXHDDuvpj/ifEcPrCOKbXXYNhnkX73KsrSTVsgZ5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCF77BjWR3l/IyvWTB+uv1ExY+Q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODVkMjQ4MGQtMzQ1Yy0z MWJjLWJhNGItOTlkMmU1ZWViOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQK7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMqvKFfweWJRY84MJbx6Fd6E0ka8fH8fppEK+EMs+02rYcnO4hhK KW2WDUnq6w4Unv6JCrv5Z2ip2KwX5u4nlfN2WDfNMAdLbELR05mLcm2WhUZNlsFI mZPdSSRnUxNa+XnAxOi2JNh8pzK3e3AVJDtRB4x5/KHpOjWlxa5KrL4Gno4rk99Q 5YPEFQg0aQM4/wR0o6B7+glU/r4PP7iJ6RxLIWGjS42TdpmXAKj+GcbtshaF2e96 EaCCJO2MDUZdjhNLKO7eNS3HrnGkD7+JZk+OS28qUDTjm/jF+42AWtBqTfF2/Mo0 VvpWMorqnXl1EgVkgG2p6HnQUEZQ6kkcxKc= -----END CERTIFICATE-----Generated at Wed Jul 29 05:05:08 2026 by rpki-client