$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ee0dff-caf3-3fb1-b4e2-80c4b67139c8.roa File: a7ee0dff-caf3-3fb1-b4e2-80c4b67139c8.roa (raw, json) Hash identifier: 1M1AJknolQUhma42xRK5PbNGBK/4EuupLHLcN6sjI4U= Subject key identifier: 42:6F:80:9E:47:7F:1C:BC:98:0D:4E:92:51:FB:3F:F3:9B:0D:3C:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE87735961F1CFD7DB6ED480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ee0dff-caf3-3fb1-b4e2-80c4b67139c8.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 33667 IP address blocks: 2001:558:fe32::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:87:73:59:61:f1:cf:d7:db:6e:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=3d944276-3f51-4d7e-adb5-4e8c40d847a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:36:aa:87:72:a3:8c:b0:41:b4:5a:17:4f:21: 85:a2:38:3f:ac:c1:05:3b:b3:a5:bf:c2:2c:1b:30: d3:8a:d9:46:54:c1:ad:7b:34:e9:d8:42:7c:78:df: 6e:66:7b:3b:bc:15:a0:3e:c6:db:ff:af:2d:60:d5: 60:1b:a3:4c:c2:f2:37:07:eb:d1:bb:9c:bb:42:43: 00:3d:5f:65:57:ac:bf:1b:7b:bc:e0:5b:ea:e6:41: 5e:f4:6d:56:a3:49:01:82:e3:60:f2:e9:c0:e9:60: e6:ee:c2:95:70:ac:b4:d3:26:a2:5e:f0:ed:0c:41: f5:05:1a:b1:6e:ca:6a:d7:4b:d6:40:56:05:06:a5: 7a:36:de:78:69:4e:86:fa:f0:9c:b2:88:db:6d:a0: a2:04:49:cb:85:d6:26:a0:e7:d6:3c:c8:51:3d:52: 90:6b:ee:a5:a3:a3:b4:d7:1b:45:01:d9:32:35:16: e5:81:21:4c:02:78:aa:e2:39:b4:3e:46:bb:7b:db: 79:fd:a2:56:fb:93:39:fa:2f:2e:07:6c:6c:10:b9: 13:15:e1:59:59:da:31:94:fd:46:8f:ad:b1:36:e5: ed:3e:fd:24:54:b7:98:8a:73:bd:1c:3f:99:f5:14: 13:c7:43:75:a1:dd:38:67:22:3d:32:5e:1f:64:a8: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6F:80:9E:47:7F:1C:BC:98:0D:4E:92:51:FB:3F:F3:9B:0D:3C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ee0dff-caf3-3fb1-b4e2-80c4b67139c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:fe32::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ec:69:ce:09:11:89:34:43:ca:8d:26:6f:60:3a:c1:03:6f: 76:b9:a4:fb:bd:2e:e7:83:a9:ee:31:88:6a:19:72:5b:23:29: 5f:a8:7d:07:d8:ab:21:a8:77:57:e2:27:14:e3:8a:84:33:51: 26:4b:0a:db:67:7e:6f:d1:b3:7c:a6:33:ba:21:f2:b5:97:64: 29:1d:ef:51:e7:43:02:d5:92:45:39:24:31:f9:b4:00:da:ac: df:48:53:58:06:e9:93:f5:bc:18:d0:f2:71:f1:0c:aa:c1:e0: 4a:94:c1:dd:af:03:22:2c:33:6c:7c:80:94:c2:e5:1a:4e:9b: 72:31:d8:6e:61:16:89:a6:7f:3d:23:f5:10:05:0b:26:62:9c: 47:27:ed:f4:dd:fe:5f:bd:4e:31:c8:d9:6f:4c:41:ce:2c:ff: e9:63:44:07:fc:b5:fe:67:dd:f6:e0:26:e2:c1:58:83:93:1d: f1:bf:89:7a:21:f8:8b:4d:7b:07:3a:65:01:e6:fe:3e:b1:32: 9b:9e:95:3b:ee:62:10:0a:6c:f1:7a:de:9b:94:8d:ec:3c:13: 7c:9d:32:bc:e6:e1:41:1a:7c:8a:76:dc:99:f1:c0:f0:5c:e7: 5d:9c:5f:e5:ca:33:42:76:7c:d7:d4:83:98:f4:48:76:9d:f4: 7d:db:f1:02 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3eh3NZYfHP19tu1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk M2Q5NDQyNzYtM2Y1MS00ZDdlLWFkYjUtNGU4YzQwZDg0N2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jaqh3KjjLBBtFoXTyGFojg/rMEFO7Olv8Is GzDTitlGVMGtezTp2EJ8eN9uZns7vBWgPsbb/68tYNVgG6NMwvI3B+vRu5y7QkMA PV9lV6y/G3u84Fvq5kFe9G1Wo0kBguNg8unA6WDm7sKVcKy00yaiXvDtDEH1BRqx bspq10vWQFYFBqV6Nt54aU6G+vCcsojbbaCiBEnLhdYmoOfWPMhRPVKQa+6lo6O0 1xtFAdkyNRblgSFMAniq4jm0Pka7e9t5/aJW+5M5+i8uB2xsELkTFeFZWdoxlP1G j62xNuXtPv0kVLeYinO9HD+Z9RQTx0N1od04ZyI9Ml4fZKhksQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEJvgJ5Hfxy8mA1OklH7P/ObDTwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdlZTBkZmYtY2FmMy0z ZmIxLWI0ZTItODBjNGI2NzEzOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWP4y MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHDsac4JEYk0Q8qNJm9gOsEDb3a5pPu9LueDqe4xiGoZclsjKV+o fQfYqyGod1fiJxTjioQzUSZLCttnfm/Rs3ymM7oh8rWXZCkd71HnQwLVkkU5JDH5 tADarN9IU1gG6ZP1vBjQ8nHxDKrB4EqUwd2vAyIsM2x8gJTC5RpOm3Ix2G5hFomm fz0j9RAFCyZinEcn7fTd/l+9TjHI2W9MQc4s/+ljRAf8tf5n3fbgJuLBWIOTHfG/ iXoh+ItNewc6ZQHm/j6xMpuelTvuYhAKbPF63puUjew8E3ydMrzm4UEafIp23Jnx wPBc512cX+XKM0J2fNfUg5j0SHad9H3b8QI= -----END CERTIFICATE-----Generated at Sat Jun 13 14:25:17 2026 by rpki-client