$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab9dd4f-494a-346e-83ca-b2c50c86b411.roa File: aab9dd4f-494a-346e-83ca-b2c50c86b411.roa (raw, json) Hash identifier: 7nWPHmwqPdqYvixHYZsRSu3mvrJjtLg2+yBNgX8kX6Y= Subject key identifier: 9A:51:1C:3F:48:8D:0C:D6:5E:AE:3A:6C:B3:07:46:A6:52:BD:38:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE884CD2421C35A7C68EE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab9dd4f-494a-346e-83ca-b2c50c86b411.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 7015 IP address blocks: 2001:559:87bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:84:cd:24:21:c3:5a:7c:68:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=9133cf36-a963-4376-831f-a405abc091af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:24:2f:ed:cb:02:5a:0d:6e:8b:eb:51:88:55: 16:14:33:a9:19:dc:29:97:ca:c0:05:c9:dd:39:f1: 80:4e:c7:9a:6e:e2:2b:71:73:b4:a4:1e:67:db:c5: 73:2d:c1:23:d9:ed:a1:34:ed:34:a4:19:e5:1e:02: 6a:4c:53:e9:a9:d3:ae:bf:c1:82:2f:49:24:d2:b7: 44:10:78:a8:03:da:46:a8:15:0e:e8:8a:37:58:3a: a6:29:87:3e:f9:8d:2e:0b:13:d0:e2:f4:46:a8:9f: 88:8e:9a:d3:e5:05:90:87:fd:8c:bf:d1:0b:76:43: 59:45:e7:c9:ec:a4:72:0e:b3:b2:8e:99:f8:4a:0d: ed:3c:19:45:8f:20:cd:c9:6d:3a:b2:99:20:50:00: 77:56:83:a8:51:7b:62:c9:ac:17:e3:2c:cf:6b:44: 5c:e2:4c:12:be:ab:af:da:bf:9d:f7:d8:28:6c:e5: e1:55:bd:78:ae:94:4a:5a:a9:b7:f5:9c:79:65:4a: ca:ac:b9:ba:5a:85:7e:53:d4:8a:56:5b:e8:4e:6f: fc:11:73:8d:53:d6:b5:45:28:bd:d2:c3:15:96:de: 31:3a:d1:d0:f8:3c:ad:35:81:fc:47:27:b5:6c:5d: f3:14:ae:2b:4e:55:e5:54:16:17:0a:40:27:a8:10: d2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:51:1C:3F:48:8D:0C:D6:5E:AE:3A:6C:B3:07:46:A6:52:BD:38:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab9dd4f-494a-346e-83ca-b2c50c86b411.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87bd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f4:af:da:f9:0a:03:ea:bd:03:1e:fa:78:05:a2:01:07:fe: 78:61:98:57:32:48:a7:7c:f7:53:b9:23:bb:af:81:2d:d9:d0: 85:d5:f0:be:40:44:5b:9b:a6:a3:8b:f1:8d:65:75:e4:c6:d4: 95:5d:7f:5a:96:50:7a:9c:1f:5d:ca:02:ee:1b:05:5d:4b:04: 2a:b4:b7:e3:21:af:46:70:af:ea:c6:af:3c:99:c8:78:7c:54: fd:59:a5:a0:cc:c7:10:d5:f5:89:27:8e:73:a5:a4:6a:55:db: 7a:35:77:05:ee:a1:43:bd:e3:fe:4c:b0:e5:cd:a8:d1:e3:89: cc:4c:20:c0:96:73:da:7d:46:56:04:2c:1a:cd:70:44:19:81: 79:12:49:55:40:7a:89:9f:95:f9:f0:42:4d:18:6f:32:d0:2e: c0:8d:d3:3e:59:46:b0:e2:2b:8b:c0:70:85:e0:89:b8:75:41: 08:bf:58:c6:a4:e3:48:74:6e:10:49:75:4e:1d:7a:91:34:dc: 87:49:ce:9b:5f:b3:75:7d:2e:5a:55:96:cd:d4:4f:f3:91:89: 94:ee:7f:fb:27:6e:46:74:26:12:2f:8d:0e:a5:ff:b3:32:4b: 28:19:2e:29:fc:16:35:05:d0:ff:ae:6e:b5:f8:ce:56:89:d8: 39:ec:11:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96ITNJCHDWnxo7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk OTEzM2NmMzYtYTk2My00Mzc2LTgzMWYtYTQwNWFiYzA5MWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyQv7csCWg1ui+tRiFUWFDOpGdwpl8rABcnd OfGATseabuIrcXO0pB5n28VzLcEj2e2hNO00pBnlHgJqTFPpqdOuv8GCL0kk0rdE EHioA9pGqBUO6Io3WDqmKYc++Y0uCxPQ4vRGqJ+IjprT5QWQh/2Mv9ELdkNZRefJ 7KRyDrOyjpn4Sg3tPBlFjyDNyW06spkgUAB3VoOoUXtiyawX4yzPa0Rc4kwSvquv 2r+d99gobOXhVb14rpRKWqm39Zx5ZUrKrLm6WoV+U9SKVlvoTm/8EXONU9a1RSi9 0sMVlt4xOtHQ+DytNYH8Rye1bF3zFK4rTlXlVBYXCkAnqBDStwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJpRHD9IjQzWXq46bLMHRqZSvTjVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFiOWRkNGYtNDk0YS0z NDZlLTgzY2EtYjJjNTBjODZiNDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYe9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKL0r9r5CgPqvQMe+ngFogEH/nhhmFcySKd891O5I7uvgS3Z0IXV 8L5ARFubpqOL8Y1ldeTG1JVdf1qWUHqcH13KAu4bBV1LBCq0t+Mhr0Zwr+rGrzyZ yHh8VP1ZpaDMxxDV9YknjnOlpGpV23o1dwXuoUO94/5MsOXNqNHjicxMIMCWc9p9 RlYELBrNcEQZgXkSSVVAeomflfnwQk0YbzLQLsCN0z5ZRrDiK4vAcIXgibh1QQi/ WMak40h0bhBJdU4depE03IdJzptfs3V9LlpVls3UT/ORiZTuf/snbkZ0JhIvjQ6l /7MySygZLin8FjUF0P+ubrX4zlaJ2DnsEWc= -----END CERTIFICATE-----Generated at Sun Mar 1 18:42:09 2026 by rpki-client