$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e37197e-64fb-3df3-9d21-b6a3f3de8413.roa File: 8e37197e-64fb-3df3-9d21-b6a3f3de8413.roa (raw, json) Hash identifier: Q9uTkOjH0fGdDOK5pSthcdL6pMLb+z/l1V4SSxL03OY= Subject key identifier: 71:BC:3C:16:14:D5:24:4C:05:42:05:8E:AE:E5:D3:3A:DC:1E:75:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584D55BB413B17B98F94F4446800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e37197e-64fb-3df3-9d21-b6a3f3de8413.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 33662 IP address blocks: 2001:559:852e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bb:41:3b:17:b9:8f:94:f4:44:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=0647b6cc-6eac-4731-b7d3-cb8248a65afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:17:54:a9:cc:9b:43:b0:e3:06:fa:48:27:0a: 8f:40:58:16:b3:92:af:ee:ba:04:10:61:77:fd:2a: 37:1e:91:cd:48:eb:4a:78:c4:9d:6f:a3:8e:0b:b2: 23:f4:9e:65:4e:b1:90:1a:81:40:c7:60:f6:bc:bc: eb:db:b2:9d:dc:d3:88:f5:65:67:2d:be:dd:df:d3: da:3e:1d:a9:ba:29:fe:e4:e1:41:d0:c3:9b:f5:10: 78:b3:6e:5b:89:54:1d:66:98:d7:8e:3f:3c:01:56: 4f:5d:de:68:50:0c:20:ab:26:40:2a:7c:ab:44:4c: c7:49:ba:29:fc:56:22:87:ee:0f:98:1e:8b:25:2e: c9:1b:8d:20:da:a1:94:36:61:c5:95:3c:2b:c2:90: 8d:7c:4c:74:53:b4:82:8d:82:f2:56:7c:74:c1:d0: 03:6c:aa:1e:62:1d:dc:d8:ae:84:34:98:eb:d2:1a: ed:9d:a8:12:8f:d2:1c:47:1e:fe:61:09:56:42:4b: 7b:b2:e3:cf:ea:c2:42:3d:22:c8:fd:74:f0:d8:8d: 9f:aa:15:e6:e6:ec:a9:f5:06:71:22:6a:a9:92:2e: 18:44:f8:26:08:ee:8d:91:54:27:31:f6:f1:0b:48: 07:86:fb:20:57:67:57:73:a3:c1:c9:ae:9d:29:37: 44:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BC:3C:16:14:D5:24:4C:05:42:05:8E:AE:E5:D3:3A:DC:1E:75:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e37197e-64fb-3df3-9d21-b6a3f3de8413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:852e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:85:a0:6a:5f:1a:10:71:fc:e1:cb:81:01:06:a1:c8:8a:76: 35:dd:a8:8d:2e:62:96:8d:2b:e0:56:60:ac:d7:d3:d5:a5:a4: bd:b9:16:b4:4b:1d:2b:88:fa:ff:ce:46:5a:ff:b1:16:88:e7: 1b:11:f6:2b:21:80:02:fb:34:da:47:a9:c2:d6:e9:2e:9c:3b: 28:03:fc:d0:bc:2a:59:9b:8c:67:81:83:ac:1a:65:db:44:c8: ca:1e:47:e3:9f:02:ac:ca:60:18:c9:01:9a:65:d1:7b:55:6d: 45:9f:26:dd:2e:0c:23:4e:cc:9b:7a:db:53:10:d6:5f:27:7e: 4d:19:7c:a5:3e:6e:0d:ac:22:5b:db:7f:67:af:c7:b3:e7:b3: 87:48:17:c9:44:c0:3a:c8:78:fb:4f:47:96:f5:df:b2:67:80: 06:7e:47:51:87:b4:f5:b8:14:40:2c:a6:65:2e:96:15:d2:74: e0:eb:fd:b4:ed:c6:d6:20:4a:8b:2a:71:50:07:8e:dd:89:15: ac:31:bc:4b:ac:b6:00:e1:d6:65:44:13:50:c4:20:33:3b:d9: b5:4c:f3:fd:e5:b4:e3:0a:82:2d:52:33:bc:e7:62:a8:5e:f3: c9:b8:de:24:94:6a:06:d0:35:40:da:2d:ba:8d:41:b2:c3:7f: 3d:02:b2:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Vu0E7F7mPlPREaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MDY0N2I2Y2MtNmVhYy00NzMxLWI3ZDMtY2I4MjQ4YTY1YWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BdUqcybQ7DjBvpIJwqPQFgWs5Kv7roEEGF3 /So3HpHNSOtKeMSdb6OOC7Ij9J5lTrGQGoFAx2D2vLzr27Kd3NOI9WVnLb7d39Pa Ph2puin+5OFB0MOb9RB4s25biVQdZpjXjj88AVZPXd5oUAwgqyZAKnyrREzHSbop /FYih+4PmB6LJS7JG40g2qGUNmHFlTwrwpCNfEx0U7SCjYLyVnx0wdADbKoeYh3c 2K6ENJjr0hrtnagSj9IcRx7+YQlWQkt7suPP6sJCPSLI/XTw2I2fqhXm5uyp9QZx Imqpki4YRPgmCO6NkVQnMfbxC0gHhvsgV2dXc6PBya6dKTdE5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHG8PBYU1SRMBUIFjq7l0zrcHnWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGUzNzE5N2UtNjRmYi0z ZGYzLTlkMjEtYjZhM2YzZGU4NDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYUu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE+FoGpfGhBx/OHLgQEGociKdjXdqI0uYpaNK+BWYKzX09WlpL25 FrRLHSuI+v/ORlr/sRaI5xsR9ishgAL7NNpHqcLW6S6cOygD/NC8KlmbjGeBg6wa ZdtEyMoeR+OfAqzKYBjJAZpl0XtVbUWfJt0uDCNOzJt621MQ1l8nfk0ZfKU+bg2s Ilvbf2evx7Pns4dIF8lEwDrIePtPR5b137JngAZ+R1GHtPW4FEAspmUulhXSdODr /bTtxtYgSosqcVAHjt2JFawxvEustgDh1mVEE1DEIDM72bVM8/3ltOMKgi1SM7zn Yqhe88m43iSUagbQNUDaLbqNQbLDfz0CsmI= -----END CERTIFICATE-----Generated at Fri Apr 17 10:31:11 2026 by rpki-client