$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09b4646-87fd-3095-9037-b9c44acefd5a.roa File: a09b4646-87fd-3095-9037-b9c44acefd5a.roa (raw, json) Hash identifier: 3dQMNDw6Q8+dOeAQsnWu/I3WAOu7H/uxnkn7MFE8JbQ= Subject key identifier: 58:52:E3:91:95:CA:40:2D:96:6C:AF:22:D9:CE:72:F8:4A:A1:4E:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78C3D0B8AA4A5C06C35EBC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09b4646-87fd-3095-9037-b9c44acefd5a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 22909 IP address blocks: 2001:558:5011::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8c:3d:0b:8a:a4:a5:c0:6c:35:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a440a812-1ae0-4924-a05a-e4268bf3bdcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:33:f7:96:10:77:e9:a0:3d:fd:03:5f:33:49: 59:b7:3b:4e:53:bd:e8:c0:d9:58:e3:20:09:92:1f: 7a:ca:b0:68:67:9b:a6:9b:b1:25:9b:09:36:c7:4d: 76:f5:2e:6c:5f:99:7c:b9:c8:fe:78:da:85:78:a0: 67:af:45:7c:26:06:1e:2b:30:7e:fa:85:6d:8f:da: e4:9d:b9:fa:c0:6d:d7:93:8c:a1:f9:d8:31:f0:2c: a9:7a:aa:96:3b:1c:38:1d:68:7b:96:1b:37:e9:b0: 6d:3f:e6:ba:ba:7a:75:0a:6c:15:4f:ff:3f:bc:a6: 5b:98:14:c6:74:cd:21:c8:41:85:f9:24:71:df:95: 76:9c:52:a9:c1:a9:70:ca:1d:6d:54:bc:a9:37:59: 2c:cd:b0:00:01:f0:21:37:5a:b0:2f:64:75:a3:1f: a5:93:f9:ed:e8:b7:19:26:1e:e9:18:61:e7:4e:6b: 01:44:a8:5b:12:a1:ef:c9:5d:a5:35:a0:98:63:14: 7d:40:45:fc:80:f6:d9:a5:cf:fc:1b:bd:65:fd:a8: a5:05:4f:20:e1:c4:11:ba:f6:70:40:28:be:cb:d3: 40:73:2a:93:4d:9b:3a:2f:36:a2:a5:f5:1e:97:08: d0:f9:be:9a:fa:54:de:ec:54:90:01:2e:4e:33:29: d3:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:52:E3:91:95:CA:40:2D:96:6C:AF:22:D9:CE:72:F8:4A:A1:4E:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a09b4646-87fd-3095-9037-b9c44acefd5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:5011::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:f8:c0:f9:a1:a6:77:84:6b:fe:23:7b:56:72:a5:9d:3a:9f: 73:4b:38:73:47:c5:0d:5b:e0:8e:d9:19:2c:df:da:b6:8f:ca: 43:02:00:c8:39:bb:9e:23:57:94:58:47:63:35:fe:b2:8e:c0: dc:60:a2:2b:98:ea:eb:e2:5a:d7:6e:d9:35:4f:41:0b:b7:7c: 92:58:3d:ff:f5:be:ee:33:05:b3:cb:06:03:da:f7:84:1b:05: f0:c9:5e:d4:39:79:1a:6d:7d:29:87:39:4d:98:12:e7:8a:df: 37:c3:09:6d:64:83:5a:5d:8c:c0:fe:49:1e:eb:fa:d7:68:1f: 4c:ed:5b:d7:f1:2c:97:84:eb:c6:c7:39:bd:7d:a9:57:84:c8: 39:b8:5e:63:55:6f:7d:cc:9d:3c:22:f1:42:87:00:29:d1:ca: 97:a9:f5:1f:74:d8:7a:8f:3b:5e:62:f3:95:c9:9c:c1:eb:12: a1:e9:2d:72:41:57:e6:ce:c2:44:d8:50:a7:c9:55:06:6b:05: 4b:92:73:c7:a2:4b:3c:39:d6:b9:0e:37:9b:b5:8e:b7:9c:73: f2:ca:63:35:0a:15:cc:24:3e:70:73:dc:05:03:00:55:6e:66: 35:a3:cd:3f:83:62:80:7d:32:83:ad:06:6c:eb:e5:75:31:b4: f4:b4:e6:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njD0LiqSlwGw168AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTQ0MGE4MTItMWFlMC00OTI0LWEwNWEtZTQyNjhiZjNiZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTP3lhB36aA9/QNfM0lZtztOU73owNlY4yAJ kh96yrBoZ5umm7Elmwk2x0129S5sX5l8ucj+eNqFeKBnr0V8JgYeKzB++oVtj9rk nbn6wG3Xk4yh+dgx8CypeqqWOxw4HWh7lhs36bBtP+a6unp1CmwVT/8/vKZbmBTG dM0hyEGF+SRx35V2nFKpwalwyh1tVLypN1kszbAAAfAhN1qwL2R1ox+lk/nt6LcZ Jh7pGGHnTmsBRKhbEqHvyV2lNaCYYxR9QEX8gPbZpc/8G71l/ailBU8g4cQRuvZw QCi+y9NAcyqTTZs6LzaipfUelwjQ+b6a+lTe7FSQAS5OMynTWwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFhS45GVykAtlmyvItnOcvhKoU5/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA5YjQ2NDYtODdmZC0z MDk1LTkwMzctYjljNDRhY2VmZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWFAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJv4wPmhpneEa/4je1ZypZ06n3NLOHNHxQ1b4I7ZGSzf2raPykMC AMg5u54jV5RYR2M1/rKOwNxgoiuY6uviWtdu2TVPQQu3fJJYPf/1vu4zBbPLBgPa 94QbBfDJXtQ5eRptfSmHOU2YEueK3zfDCW1kg1pdjMD+SR7r+tdoH0ztW9fxLJeE 68bHOb19qVeEyDm4XmNVb33MnTwi8UKHACnRypep9R902HqPO15i85XJnMHrEqHp LXJBV+bOwkTYUKfJVQZrBUuSc8eiSzw51rkON5u1jrecc/LKYzUKFcwkPnBz3AUD AFVuZjWjzT+DYoB9MoOtBmzr5XUxtPS05ks= -----END CERTIFICATE-----Generated at Wed Jul 29 04:54:59 2026 by rpki-client