$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a9029e2-0295-3646-b54b-bed80ecdba5f.roa File: 8a9029e2-0295-3646-b54b-bed80ecdba5f.roa (raw, json) Hash identifier: mKuEAE+hZTyDACll9wpxdrB3UNk8qlCEaF7X8Ohv29w= Subject key identifier: B4:66:08:D1:B8:45:F7:97:C9:2C:FE:1F:67:D4:F7:68:FC:CE:1B:1E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498027310359B8094BA6A680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a9029e2-0295-3646-b54b-bed80ecdba5f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 2001:559:286::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:27:31:03:59:b8:09:4b:a6:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6b23fb99-5f2b-4fe6-83c3-040ff8787944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:0b:71:a8:5d:4e:54:f8:04:0f:7a:f3:e7: 35:76:66:21:8a:2a:25:86:de:a7:22:78:4f:25:da: da:ff:2a:23:33:ee:c8:b8:b5:13:2a:5a:19:50:15: 09:e5:71:c8:66:71:ac:64:0e:6b:b2:81:9b:d3:61: f6:6e:f3:33:36:e7:7b:f7:d2:f7:b4:99:2e:28:a8: 11:35:75:25:87:2b:e1:07:19:5b:db:9d:54:2a:d5: 16:6e:67:a3:39:a7:e7:a6:82:50:bc:56:ff:02:c7: 51:e9:85:df:e7:76:77:55:36:71:a1:f6:7c:db:e1: 6a:31:fe:a4:76:7b:52:4f:74:32:88:09:bc:dc:7b: b7:5e:bf:95:38:bf:50:67:c1:3e:30:60:69:42:cb: bc:99:82:8a:75:2f:58:d2:50:ea:9b:39:a6:89:a7: 86:d7:e0:26:2e:8b:2b:97:f2:d8:1a:5e:75:7e:57: bd:3d:4a:a9:80:84:6b:fe:c8:23:7c:f7:39:15:6a: 74:77:3c:e4:9d:a1:c4:f1:23:db:04:59:db:77:e7: 59:2c:95:d5:23:be:5e:1b:43:d6:47:35:68:5f:91: 33:85:2c:a2:9f:c6:eb:a9:70:b6:cc:e3:bd:cb:cf: 7b:99:6c:9c:17:82:85:a1:d4:51:fb:a0:8c:2e:d9: 1a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:66:08:D1:B8:45:F7:97:C9:2C:FE:1F:67:D4:F7:68:FC:CE:1B:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a9029e2-0295-3646-b54b-bed80ecdba5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:286::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:5c:19:25:ac:a9:45:44:f6:04:7a:ae:39:5a:ac:7e:7c:e5: 90:c5:69:76:eb:27:9d:5d:9f:d3:a2:57:df:0e:4b:df:47:93: 68:66:09:e1:51:97:be:ae:a4:6e:f3:8f:2a:12:ae:d5:b6:7d: 4e:49:7b:df:d5:d6:09:e2:12:59:5d:d1:b1:bc:5a:e4:b1:b0: d6:c2:77:22:8f:dc:a3:62:11:65:fd:ad:b0:a6:39:37:c1:d6: ee:3f:39:3e:26:82:d0:cb:34:8e:08:68:2b:38:60:8f:cf:cb: c7:46:d6:e7:fb:41:96:4a:4b:6b:69:a2:9d:bf:08:ae:0c:84: 94:80:34:b2:88:e6:09:04:83:4f:94:2c:8e:77:ba:74:ed:39: fb:71:1b:93:81:33:1c:22:ff:c6:ce:90:a0:f2:05:6d:66:3c: 4e:33:1f:86:9e:0b:2d:15:23:f5:da:fb:d2:be:75:99:cd:e9: 94:7c:b5:bd:8f:7a:41:21:dc:b4:f2:79:13:d7:51:cd:9c:fe: 9d:c4:05:78:66:88:3a:e9:75:3f:5a:f4:28:01:9f:cf:d3:97: 8f:da:2e:06:fc:ef:51:86:f7:83:83:33:f0:29:53:a1:97:93: 32:13:10:31:22:1a:54:9f:86:4b:51:9e:66:fb:33:55:72:38: 85:da:df:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgCcxA1m4CUumpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmIyM2ZiOTktNWYyYi00ZmU2LTgzYzMtMDQwZmY4Nzg3OTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptsLcahdTlT4BA968+c1dmYhiiolht6nInhP Jdra/yojM+7IuLUTKloZUBUJ5XHIZnGsZA5rsoGb02H2bvMzNud799L3tJkuKKgR NXUlhyvhBxlb251UKtUWbmejOafnpoJQvFb/AsdR6YXf53Z3VTZxofZ82+FqMf6k dntST3QyiAm83Hu3Xr+VOL9QZ8E+MGBpQsu8mYKKdS9Y0lDqmzmmiaeG1+AmLosr l/LYGl51fle9PUqpgIRr/sgjfPc5FWp0dzzknaHE8SPbBFnbd+dZLJXVI75eG0PW RzVoX5EzhSyin8brqXC2zOO9y897mWycF4KFodRR+6CMLtkaLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLRmCNG4RfeXySz+H2fU92j8zhseMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGE5MDI5ZTItMDI5NS0z NjQ2LWI1NGItYmVkODBlY2RiYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQKG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALZcGSWsqUVE9gR6rjlarH585ZDFaXbrJ51dn9OiV98OS99Hk2hm CeFRl76upG7zjyoSrtW2fU5Je9/V1gniElld0bG8WuSxsNbCdyKP3KNiEWX9rbCm OTfB1u4/OT4mgtDLNI4IaCs4YI/Py8dG1uf7QZZKS2tpop2/CK4MhJSANLKI5gkE g0+ULI53unTtOftxG5OBMxwi/8bOkKDyBW1mPE4zH4aeCy0VI/Xa+9K+dZnN6ZR8 tb2PekEh3LTyeRPXUc2c/p3EBXhmiDrpdT9a9CgBn8/Tl4/aLgb871GG94ODM/Ap U6GXkzITEDEiGlSfhktRnmb7M1VyOIXa33k= -----END CERTIFICATE-----Generated at Sat Sep 26 19:53:03 2026 by rpki-client