$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac4128a-1d46-3a11-8cd4-a9f109120310.roa File: aac4128a-1d46-3a11-8cd4-a9f109120310.roa (raw, json) Hash identifier: 5JKLRj2GtnRtdRlieRG3auFcr6sNaFfTRINpJ6S7Cv4= Subject key identifier: AC:85:6A:98:D5:8B:0F:38:56:21:BC:09:36:71:68:37:71:64:C8:CA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8832163C1BEA699C2A0C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac4128a-1d46-3a11-8cd4-a9f109120310.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 7015 IP address blocks: 2001:559:8736::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:83:21:63:c1:be:a6:99:c2:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=740302f7-5bd8-4dfd-a2a8-46184f9664bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:82:36:e8:c4:22:07:e1:34:02:31:8f:52:13: 0a:70:f2:e0:c7:c2:94:36:3a:14:5f:76:56:83:04: 93:f5:45:9d:05:44:22:cd:45:ac:cb:17:72:a2:32: c2:5c:42:95:9d:b4:ec:64:6f:6a:9e:3a:50:23:72: 49:d2:1b:4f:57:34:78:69:d9:68:40:f7:0c:35:b1: ed:44:15:36:8a:a5:2f:be:58:86:41:11:e8:ea:60: 7b:a0:b2:c9:96:10:d2:17:4a:9c:33:45:d2:b7:4e: 64:52:0c:ea:e4:c9:06:ec:b9:69:a5:a5:a2:42:e8: d2:85:c8:3c:23:49:13:9f:b5:57:e4:8c:8e:3a:af: 3b:aa:1c:17:17:d7:68:6a:41:8f:8e:55:9f:a8:87: 1a:d7:04:b6:d0:cf:29:aa:87:24:3a:b6:9c:fd:3b: 63:3e:12:bc:45:8e:56:b3:7a:a2:c5:3e:fb:01:5f: b7:94:11:0f:03:49:cb:0e:c2:c2:70:1c:bd:34:89: 89:82:3d:e2:a7:8c:f2:91:13:9f:f8:aa:5e:75:45: bb:d7:c0:58:07:80:3b:8b:a1:ae:b2:6a:02:9b:26: 91:23:4f:e8:27:60:21:94:73:4e:6b:da:7c:85:5e: 0a:c8:0a:50:60:e6:83:1d:fe:1b:d2:af:49:fb:a8: 7e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:85:6A:98:D5:8B:0F:38:56:21:BC:09:36:71:68:37:71:64:C8:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aac4128a-1d46-3a11-8cd4-a9f109120310.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8736::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:61:6a:08:e5:3c:06:28:d4:c3:c5:d5:a2:7e:52:30:61:39: 70:d2:a1:90:95:21:b5:54:bb:1a:2e:35:7d:37:a5:21:9a:e0: 3e:bf:30:38:08:05:85:8f:27:85:19:e9:f7:2f:7a:3c:fe:9b: 39:19:09:19:a1:09:9a:89:6a:6a:b2:8f:2b:e5:cf:d8:3b:ce: 31:82:45:d1:b0:61:d8:ee:63:44:76:51:8f:98:f4:48:14:5d: 06:a4:80:b2:f4:52:d8:5e:bf:6f:c5:73:67:d1:7c:93:72:94: 0e:ef:ee:37:9d:9c:95:6e:0e:b3:fb:f0:ab:8b:dd:c8:98:4f: 5f:d4:f2:80:4f:93:1b:57:85:99:99:fb:03:53:46:18:3a:ce: 07:7e:2c:61:7e:56:59:95:1b:14:d6:6b:1c:c5:cc:57:5a:c0: ab:87:32:7e:e6:ae:04:34:91:c0:80:f9:83:59:84:16:bf:02: fa:e2:34:97:6e:22:57:a2:4f:64:c7:3a:ed:e1:51:5a:99:65: 04:b6:df:a5:51:71:6c:68:5c:31:0d:af:eb:b8:c6:e0:a3:e4: 64:a1:31:f7:d0:4f:42:c0:82:66:21:10:62:03:44:17:39:66: d4:54:5d:77:e5:6b:57:fb:a4:a6:9c:0b:fa:6c:3a:ac:35:74: 96:1a:b9:ee -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96IMhY8G+ppnCoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk NzQwMzAyZjctNWJkOC00ZGZkLWEyYTgtNDYxODRmOTY2NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/II26MQiB+E0AjGPUhMKcPLgx8KUNjoUX3ZW gwST9UWdBUQizUWsyxdyojLCXEKVnbTsZG9qnjpQI3JJ0htPVzR4adloQPcMNbHt RBU2iqUvvliGQRHo6mB7oLLJlhDSF0qcM0XSt05kUgzq5MkG7LlppaWiQujShcg8 I0kTn7VX5IyOOq87qhwXF9doakGPjlWfqIca1wS20M8pqockOrac/TtjPhK8RY5W s3qixT77AV+3lBEPA0nLDsLCcBy9NImJgj3ip4zykROf+KpedUW718BYB4A7i6Gu smoCmyaRI0/oJ2AhlHNOa9p8hV4KyApQYOaDHf4b0q9J+6h+UwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKyFapjViw84ViG8CTZxaDdxZMjKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFjNDEyOGEtMWQ0Ni0z YTExLThjZDQtYTlmMTA5MTIwMzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYc2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAFhagjlPAYo1MPF1aJ+UjBhOXDSoZCVIbVUuxouNX03pSGa4D6/ MDgIBYWPJ4UZ6fcvejz+mzkZCRmhCZqJamqyjyvlz9g7zjGCRdGwYdjuY0R2UY+Y 9EgUXQakgLL0Uthev2/Fc2fRfJNylA7v7jednJVuDrP78KuL3ciYT1/U8oBPkxtX hZmZ+wNTRhg6zgd+LGF+VlmVGxTWaxzFzFdawKuHMn7mrgQ0kcCA+YNZhBa/Avri NJduIleiT2THOu3hUVqZZQS236VRcWxoXDENr+u4xuCj5GShMffQT0LAgmYhEGID RBc5ZtRUXXfla1f7pKacC/psOqw1dJYaue4= -----END CERTIFICATE-----Generated at Sun Mar 1 20:55:42 2026 by rpki-client