$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa57878d-7243-3e1e-bd4d-5436fbe2d977.roa File: aa57878d-7243-3e1e-bd4d-5436fbe2d977.roa (raw, json) Hash identifier: 3Lx/6WJ7aAjielzye1tF+SC47f9169z9kyik6bfmfT8= Subject key identifier: 09:A0:33:7A:E7:17:29:29:19:94:F6:52:AD:E1:DA:D9:9C:33:B9:5B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8D03C63D7AD50DF121880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa57878d-7243-3e1e-bd4d-5436fbe2d977.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33287 IP address blocks: 2001:559:cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:d0:3c:63:d7:ad:50:df:12:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=cc436072-22de-4faa-8d2f-092d20e1af3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:30:ca:d4:df:3c:c8:55:3b:09:0d:8a:39:02: c6:a6:be:81:9a:e9:d3:8f:fa:6c:c7:c5:ea:1f:e9: 3c:d0:2a:c5:30:bc:1a:80:73:0f:e7:9f:d2:47:ee: 6f:22:11:c6:f9:cc:56:99:65:a2:f4:aa:8c:23:12: 46:21:9e:35:77:8b:c1:31:d1:bc:fe:ca:65:ec:b5: 26:98:5d:d9:f8:f2:69:bf:11:32:a4:ab:38:43:6f: a1:ce:09:76:19:f2:05:11:50:05:0d:89:c3:42:2a: 25:f4:7c:1f:d9:30:b5:b2:58:d0:2e:43:3a:38:00: c7:69:7a:0f:fb:1f:30:89:1a:8f:db:f7:49:89:02: dc:d6:8a:2d:c3:f3:55:86:12:84:e2:65:06:4a:84: 4a:47:03:f9:c2:fa:3e:21:7b:76:12:a1:10:bb:62: 95:a1:6d:17:0a:1f:8b:23:40:70:70:f2:be:c6:c2: fb:3c:8d:f7:99:3c:44:6d:f5:3c:ee:67:47:9f:dc: 2d:0a:62:f5:60:3c:6c:be:0b:26:27:3f:35:01:6e: 47:72:90:2b:38:89:8a:1b:1b:77:8a:c1:a1:26:3f: 69:45:04:bb:7e:6d:5d:43:28:78:87:1e:50:8d:c9: d1:4d:b6:23:e0:47:4d:90:ef:ed:22:ec:17:a1:dc: 1d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A0:33:7A:E7:17:29:29:19:94:F6:52:AD:E1:DA:D9:9C:33:B9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa57878d-7243-3e1e-bd4d-5436fbe2d977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:31:36:8c:33:3d:cb:3d:c3:0f:ec:84:70:ae:d9:32:b6:0e: 56:17:a3:69:74:d3:62:48:17:73:b3:04:16:f7:37:71:51:3c: 97:96:70:3a:ac:c8:1d:04:1a:26:92:d2:56:a6:3e:90:07:0d: 60:37:30:49:5c:01:6d:17:d5:c3:36:39:00:e2:44:65:85:c8: db:0c:02:13:d3:34:28:b2:18:d8:63:21:0c:2b:75:7d:d7:e7: fb:50:9e:49:f3:73:9e:c3:2e:1a:fe:8b:ad:c0:18:49:0a:0a: 32:fe:59:a0:4a:5f:23:bd:7f:04:85:28:ff:45:ae:5f:27:47: 32:a7:af:10:79:0a:3f:3f:fc:79:93:f8:23:7e:f0:48:90:30: 7d:79:6e:cd:c8:af:99:17:5c:a0:c6:f2:78:d3:35:3d:1b:68: e0:8f:8f:47:c1:1f:56:38:10:9d:32:6c:87:6b:cf:00:48:45: 89:78:97:1d:bd:29:13:98:d6:78:2b:b7:c9:e7:f1:a0:f7:5d: e1:5e:05:d2:f9:3f:ba:bf:de:26:37:0b:34:ca:1b:09:11:5f: 23:d4:f6:28:29:14:5b:d0:83:2d:f1:76:af:cb:2d:b3:b1:3d: 51:b6:5a:3f:9d:31:23:d6:1a:bc:7e:d1:16:b4:4e:0f:ee:61: d9:61:16:5d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96NA8Y9etUN8SGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk Y2M0MzYwNzItMjJkZS00ZmFhLThkMmYtMDkyZDIwZTFhZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTDK1N88yFU7CQ2KOQLGpr6BmunTj/psx8Xq H+k80CrFMLwagHMP55/SR+5vIhHG+cxWmWWi9KqMIxJGIZ41d4vBMdG8/spl7LUm mF3Z+PJpvxEypKs4Q2+hzgl2GfIFEVAFDYnDQiol9Hwf2TC1sljQLkM6OADHaXoP +x8wiRqP2/dJiQLc1ootw/NVhhKE4mUGSoRKRwP5wvo+IXt2EqEQu2KVoW0XCh+L I0BwcPK+xsL7PI33mTxEbfU87mdHn9wtCmL1YDxsvgsmJz81AW5HcpArOImKGxt3 isGhJj9pRQS7fm1dQyh4hx5QjcnRTbYj4EdNkO/tIuwXodwdJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAmgM3rnFykpGZT2Uq3h2tmcM7lbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE1Nzg3OGQtNzI0My0z ZTFlLWJkNGQtNTQzNmZiZTJkOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQDN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACgxNowzPcs9ww/shHCu2TK2DlYXo2l002JIF3OzBBb3N3FRPJeW cDqsyB0EGiaS0lamPpAHDWA3MElcAW0X1cM2OQDiRGWFyNsMAhPTNCiyGNhjIQwr dX3X5/tQnknzc57DLhr+i63AGEkKCjL+WaBKXyO9fwSFKP9Frl8nRzKnrxB5Cj8/ /HmT+CN+8EiQMH15bs3Ir5kXXKDG8njTNT0baOCPj0fBH1Y4EJ0ybIdrzwBIRYl4 lx29KROY1ngrt8nn8aD3XeFeBdL5P7q/3iY3CzTKGwkRXyPU9igpFFvQgy3xdq/L LbOxPVG2Wj+dMSPWGrx+0Ra0Tg/uYdlhFl0= -----END CERTIFICATE-----Generated at Mon Mar 2 00:43:59 2026 by rpki-client