$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b2a22ce-b699-38c0-93a8-a26b359ed20b.roa File: 8b2a22ce-b699-38c0-93a8-a26b359ed20b.roa (raw, json) Hash identifier: a2KAPSagthoTU+gl7nVpPAWbh2L3TBNwlhIkeigbzgk= Subject key identifier: 41:97:AA:B1:5E:C3:56:EB:C8:C2:38:2F:C7:95:3E:9C:27:8C:EF:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49822CD7418B12D306A79500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b2a22ce-b699-38c0-93a8-a26b359ed20b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 2001:559:597::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:2c:d7:41:8b:12:d3:06:a7:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=409769dc-095b-431d-bcae-807194eb640f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:77:76:88:5e:4f:5d:84:ca:e2:e1:dc:e0: b0:a5:74:61:08:1d:59:ad:b4:78:89:1b:3e:d1:f3: db:91:70:c7:17:c3:fe:23:48:5f:98:13:d5:20:44: d8:18:44:55:d8:d1:d5:a3:f8:0a:90:27:bd:57:eb: 3c:d5:8c:f8:ce:6e:e5:b5:cf:5d:0c:81:f0:6f:1b: c9:3c:41:e5:3b:da:53:e7:f7:22:78:dc:c9:e5:13: c6:31:2d:55:e6:20:d1:06:0d:68:5c:9b:60:6b:c2: 77:fb:1b:25:d2:74:e6:cf:9a:61:de:76:78:85:38: b1:54:7b:6a:0c:d1:f8:b3:d7:dd:2f:82:3f:41:dd: e1:2b:b8:9f:6e:bb:00:ff:9b:d0:39:5e:d0:b6:70: 4d:ac:e8:89:36:07:c8:b0:f0:4b:65:63:36:92:03: 4b:bc:0b:b0:25:09:7f:57:6f:09:15:e5:5d:b7:f6: b5:18:b2:1b:3a:bd:fd:5d:23:d6:be:7e:f8:26:d7: 70:35:ff:94:0d:91:82:52:ce:b6:79:21:49:d4:7d: 7d:1a:74:4f:ce:5e:e9:66:d8:17:a9:fb:9f:fb:80: 82:f0:9f:6a:1e:b3:3b:d2:f9:4b:46:4a:b1:25:d4: e7:46:ec:3e:6b:88:0a:e6:ad:7c:c1:b8:cd:64:cf: 18:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:97:AA:B1:5E:C3:56:EB:C8:C2:38:2F:C7:95:3E:9C:27:8C:EF:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b2a22ce-b699-38c0-93a8-a26b359ed20b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:597::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:2f:a7:42:62:21:8c:0f:45:b3:1d:98:fe:37:f6:69:2f:aa: 35:74:31:2a:fe:8a:19:fc:b5:86:f2:d9:f9:a8:00:06:d2:4a: 47:28:b9:f1:91:a7:b5:8d:b6:1a:c4:a1:e3:dc:9a:a6:8f:72: 13:76:88:7c:7a:99:c3:a5:b8:19:9a:2b:44:40:23:43:ee:b0: bd:f6:7b:3c:a7:29:5a:b5:b5:08:c9:b4:30:d9:ef:0d:a2:3d: 2a:57:19:23:ab:dc:a2:69:33:6a:94:e3:f3:98:1d:03:11:ad: 42:46:cc:c2:1c:1f:63:f1:64:f7:f1:b0:41:1b:2e:71:f3:65: 45:f0:b5:52:da:7c:46:13:28:b0:d4:cb:87:c0:24:d1:db:5b: 6c:63:99:8e:d7:cc:6c:4a:2a:3c:23:5c:cf:f1:c2:37:72:e6: dc:e0:bd:77:23:e8:05:a9:ad:2a:00:f9:26:05:53:6c:47:7a: ce:96:ec:f3:c1:2e:9c:da:32:9f:04:fa:d6:08:e9:74:99:29: 47:b8:66:af:95:a0:49:9a:08:9b:50:ea:4b:1f:19:a0:5f:80: 4c:32:0a:12:73:e6:47:21:6d:0e:6f:c5:86:b3:1c:1c:97:8e: 83:a6:3e:11:20:ea:87:d6:e8:e0:b2:51:8d:65:41:0c:39:79: 17:42:4e:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgizXQYsS0wanlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDA5NzY5ZGMtMDk1Yi00MzFkLWJjYWUtODA3MTk0ZWI2NDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioZ3doheT12EyuLh3OCwpXRhCB1ZrbR4iRs+ 0fPbkXDHF8P+I0hfmBPVIETYGERV2NHVo/gKkCe9V+s81Yz4zm7ltc9dDIHwbxvJ PEHlO9pT5/cieNzJ5RPGMS1V5iDRBg1oXJtga8J3+xsl0nTmz5ph3nZ4hTixVHtq DNH4s9fdL4I/Qd3hK7ifbrsA/5vQOV7QtnBNrOiJNgfIsPBLZWM2kgNLvAuwJQl/ V28JFeVdt/a1GLIbOr39XSPWvn74JtdwNf+UDZGCUs62eSFJ1H19GnRPzl7pZtgX qfuf+4CC8J9qHrM70vlLRkqxJdTnRuw+a4gK5q18wbjNZM8YmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEGXqrFew1bryMI4L8eVPpwnjO93MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGIyYTIyY2UtYjY5OS0z OGMwLTkzYTgtYTI2YjM1OWVkMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABsvp0JiIYwPRbMdmP439mkvqjV0MSr+ihn8tYby2fmoAAbSSkco ufGRp7WNthrEoePcmqaPchN2iHx6mcOluBmaK0RAI0PusL32ezynKVq1tQjJtDDZ 7w2iPSpXGSOr3KJpM2qU4/OYHQMRrUJGzMIcH2PxZPfxsEEbLnHzZUXwtVLafEYT KLDUy4fAJNHbW2xjmY7XzGxKKjwjXM/xwjdy5tzgvXcj6AWprSoA+SYFU2xHes6W 7PPBLpzaMp8E+tYI6XSZKUe4Zq+VoEmaCJtQ6ksfGaBfgEwyChJz5kchbQ5vxYaz HByXjoOmPhEg6ofW6OCyUY1lQQw5eRdCTo4= -----END CERTIFICATE-----Generated at Sat Sep 26 11:32:18 2026 by rpki-client