$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/989d0985-da2c-362c-b6ae-61e3b3050345.roa File: 989d0985-da2c-362c-b6ae-61e3b3050345.roa (raw, json) Hash identifier: YccQS3YxP3NUaIOKP949PVhcms+jN/J+xtZ6pXPkzpI= Subject key identifier: 2A:4E:32:39:E4:5D:17:9A:2E:20:72:89:BE:B5:71:AD:A9:EB:46:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE86A27A27ADD34D1E94D380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/989d0985-da2c-362c-b6ae-61e3b3050345.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 33287 IP address blocks: 2001:559:8373::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:86:a2:7a:27:ad:d3:4d:1e:94:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=d262ee3e-e00b-47bd-b4aa-9368a73ffd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:88:c2:30:d4:97:f2:74:fb:31:6c:ba:59:c2: 80:cd:ce:94:c8:fe:02:fb:04:ce:df:b7:96:e0:7e: 2e:7e:27:6e:03:fd:f4:75:c3:57:cf:99:9e:83:d0: b1:bc:18:44:3b:6e:30:6a:15:f1:99:3f:7c:60:cf: 34:c1:e7:78:b6:6e:0a:f9:dc:52:20:e9:9a:76:61: f8:5a:00:de:4b:20:c7:6c:b4:e0:3c:d8:81:43:9f: 61:3c:e7:89:4d:3f:f7:22:80:53:a2:b4:f8:c5:a3: 46:ed:64:42:99:6f:0c:27:98:0a:88:07:2b:03:45: 7c:05:5c:02:ac:e4:9c:98:c7:fc:c9:48:82:9c:e6: 4a:1b:77:e5:79:ab:0c:41:1e:be:7c:05:b7:65:a4: 78:20:4d:3b:2f:64:98:11:38:25:19:b6:6c:d2:06: a8:39:39:98:cc:dd:58:2f:66:46:a6:dc:3d:71:ba: 31:ba:0c:f5:52:0e:83:be:06:32:98:ed:9b:63:49: bc:3e:d6:9f:2d:9e:44:4e:63:19:45:48:26:84:a5: c2:f1:a6:d8:6f:9a:c4:3c:21:ce:6b:46:d5:0c:14: ad:73:54:b6:52:d2:7e:f1:cc:65:24:f8:8b:86:0c: 76:12:5f:a2:1b:bf:95:fd:b1:86:09:cb:49:88:97: 69:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4E:32:39:E4:5D:17:9A:2E:20:72:89:BE:B5:71:AD:A9:EB:46:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/989d0985-da2c-362c-b6ae-61e3b3050345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8373::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:9e:d7:f0:12:4e:d5:85:18:c7:57:b9:1f:bc:1e:89:e0:4d: e9:40:cb:93:c6:1c:c9:60:fd:9e:e3:d3:ca:a1:79:3f:5c:28: 86:10:36:d6:d0:34:e9:35:d0:bf:95:02:93:55:6e:9d:05:fa: 4d:49:55:93:50:b8:9e:9d:ca:a3:2a:60:8f:20:0f:68:ea:12: e1:dd:dc:11:9d:11:cc:0e:a5:79:05:91:b3:67:c5:0c:02:93: 74:33:00:2b:62:fe:01:12:e2:1c:b5:6e:f5:bc:fe:09:81:fa: cb:7c:74:b3:64:b6:3b:64:18:9b:2d:fb:c7:28:df:fb:a2:cc: b5:fb:55:9c:f5:b3:c7:06:23:58:bb:ad:2a:52:fd:d1:77:4d: b0:8e:63:9f:62:d2:49:8e:50:30:ef:bd:a1:33:8f:69:17:58: 07:81:96:31:84:10:78:2b:88:cf:a0:40:93:24:84:87:0e:04: 20:75:26:e1:8e:06:d1:64:9c:be:06:e0:60:b9:0d:a1:10:b5: aa:78:08:15:95:54:a9:0c:e4:73:9e:1e:68:0a:d9:cc:40:2c: cf:37:30:19:78:79:90:b2:d4:6f:a5:19:ce:7b:6d:7c:a2:99: 2d:5d:74:60:e3:9f:3e:07:cf:cb:d4:a8:f1:86:8b:77:36:03: 60:e1:a0:cb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3ehqJ6J63TTR6U04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk ZDI2MmVlM2UtZTAwYi00N2JkLWI0YWEtOTM2OGE3M2ZmZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwojCMNSX8nT7MWy6WcKAzc6UyP4C+wTO37eW 4H4ufiduA/30dcNXz5meg9CxvBhEO24wahXxmT98YM80wed4tm4K+dxSIOmadmH4 WgDeSyDHbLTgPNiBQ59hPOeJTT/3IoBTorT4xaNG7WRCmW8MJ5gKiAcrA0V8BVwC rOScmMf8yUiCnOZKG3fleasMQR6+fAW3ZaR4IE07L2SYETglGbZs0gaoOTmYzN1Y L2ZGptw9cboxugz1Ug6DvgYymO2bY0m8PtafLZ5ETmMZRUgmhKXC8abYb5rEPCHO a0bVDBStc1S2UtJ+8cxlJPiLhgx2El+iG7+V/bGGCctJiJdpvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCpOMjnkXReaLiByib61ca2p60ZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTg5ZDA5ODUtZGEyYy0z NjJjLWI2YWUtNjFlM2IzMDUwMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYNz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANye1/ASTtWFGMdXuR+8HongTelAy5PGHMlg/Z7j08qheT9cKIYQ NtbQNOk10L+VApNVbp0F+k1JVZNQuJ6dyqMqYI8gD2jqEuHd3BGdEcwOpXkFkbNn xQwCk3QzACti/gES4hy1bvW8/gmB+st8dLNktjtkGJst+8co3/uizLX7VZz1s8cG I1i7rSpS/dF3TbCOY59i0kmOUDDvvaEzj2kXWAeBljGEEHgriM+gQJMkhIcOBCB1 JuGOBtFknL4G4GC5DaEQtap4CBWVVKkM5HOeHmgK2cxALM83MBl4eZCy1G+lGc57 bXyimS1ddGDjnz4Hz8vUqPGGi3c2A2DhoMs= -----END CERTIFICATE-----Generated at Sat Jun 13 19:51:04 2026 by rpki-client