$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaf75af4-f8cd-32eb-895b-5647a0d47793.roa File: aaf75af4-f8cd-32eb-895b-5647a0d47793.roa (raw, json) Hash identifier: r2mHLh6fjQlJvd0eGkO1jjaFFTKXo+C+nx1rqvYd4Cg= Subject key identifier: 07:5E:58:6B:5E:21:24:9D:A0:B7:36:E6:D1:AD:CA:67:68:2B:A7:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8885AC6F5B636D80CDF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaf75af4-f8cd-32eb-895b-5647a0d47793.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 7015 IP address blocks: 2001:559:c39c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:88:5a:c6:f5:b6:36:d8:0c:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=d128a78c-6f73-43b3-9b4b-950f0d138e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:42:e3:35:52:86:a6:6a:b8:57:9d:d0:b6:13: 0a:89:19:c3:d1:58:3e:da:6b:41:24:40:26:1f:63: 83:a8:21:c1:7a:7f:ee:aa:8e:5c:91:dd:01:28:0d: 87:6b:89:fb:bb:48:91:30:02:50:f3:93:1b:57:46: 99:63:2c:a3:94:09:4d:61:5e:3e:f5:15:18:90:dc: 06:fc:00:97:6e:38:97:96:8d:33:3b:e6:25:ca:6a: 6c:72:f0:8f:90:80:57:d1:a1:34:bd:c4:14:41:ac: ea:b4:cd:5c:5f:17:d6:44:4c:9e:33:5d:02:62:b1: bb:53:21:44:ae:5c:00:94:ba:27:bf:1c:8a:41:9c: df:01:45:b9:80:58:cf:60:ac:00:c4:03:b5:7b:4f: 82:a4:48:77:6c:32:c7:94:ce:0b:b5:5a:6e:a0:2f: 84:b6:42:5f:8f:da:d3:bb:bc:cb:13:c3:fc:73:33: 80:83:f5:03:bf:ec:fc:d6:6a:3a:c5:ff:d9:7b:cf: ff:e7:1d:28:55:f2:34:fa:ae:f0:29:4f:af:60:c6: b2:db:e8:5a:cd:bd:fc:d6:b2:30:87:b4:dd:97:9f: ac:4a:34:e2:97:da:a0:9d:a6:68:88:c6:12:ea:11: b9:b9:ea:79:1f:88:2c:6e:cb:24:93:1f:ca:27:0c: fa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5E:58:6B:5E:21:24:9D:A0:B7:36:E6:D1:AD:CA:67:68:2B:A7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaf75af4-f8cd-32eb-895b-5647a0d47793.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c39c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b4:f9:05:9a:26:51:78:6a:63:20:89:1e:57:a5:86:b6:0b: 1a:4f:83:7b:61:1f:10:45:61:30:39:a3:aa:c4:29:4c:e4:d0: 1b:59:47:fe:01:38:4a:7b:f1:78:75:c1:cd:be:76:c0:c3:61: 5d:2a:92:45:c5:73:5b:15:e2:9d:4c:eb:dd:60:64:14:af:f9: 53:da:d2:06:3b:7f:87:32:31:20:6e:39:c3:62:b1:5a:35:c0: 06:23:a1:7a:04:bf:90:c1:36:27:40:66:80:1e:20:3f:7b:4c: af:d6:13:6b:11:bf:3a:13:2f:ca:37:38:8d:b3:10:96:bb:52: 02:03:94:1a:30:29:d2:5a:66:bc:62:c7:5c:07:fd:7e:7f:93: 10:77:22:bd:81:df:0a:40:fb:0f:05:eb:b8:e8:e1:f1:bb:9f: e5:95:67:1e:88:fd:9a:98:59:08:7a:ef:0d:54:3d:b9:89:63: df:7c:08:ca:ec:be:20:17:4e:7a:9f:a4:ad:4c:82:b1:de:6c: c7:81:b9:cb:83:09:d6:76:9a:f3:bc:6e:b3:a2:e6:2b:90:c2: d1:58:c6:43:68:8d:99:2d:10:81:b9:4d:93:c6:95:9f:f4:eb: 93:b0:90:d0:62:58:a9:ec:8d:cd:fa:38:8f:1a:10:9e:cc:98: a9:b1:bb:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96IhaxvW2NtgM3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk ZDEyOGE3OGMtNmY3My00M2IzLTliNGItOTUwZjBkMTM4ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkLjNVKGpmq4V53QthMKiRnD0Vg+2mtBJEAm H2ODqCHBen/uqo5ckd0BKA2Ha4n7u0iRMAJQ85MbV0aZYyyjlAlNYV4+9RUYkNwG /ACXbjiXlo0zO+YlympscvCPkIBX0aE0vcQUQazqtM1cXxfWREyeM10CYrG7UyFE rlwAlLonvxyKQZzfAUW5gFjPYKwAxAO1e0+CpEh3bDLHlM4LtVpuoC+EtkJfj9rT u7zLE8P8czOAg/UDv+z81mo6xf/Ze8//5x0oVfI0+q7wKU+vYMay2+hazb381rIw h7Tdl5+sSjTil9qgnaZoiMYS6hG5uep5H4gsbsskkx/KJwz6YQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAdeWGteISSdoLc25tGtymdoK6cfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFmNzVhZjQtZjhjZC0z MmViLTg5NWItNTY0N2EwZDQ3NzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcOc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADe0+QWaJlF4amMgiR5XpYa2CxpPg3thHxBFYTA5o6rEKUzk0BtZ R/4BOEp78Xh1wc2+dsDDYV0qkkXFc1sV4p1M691gZBSv+VPa0gY7f4cyMSBuOcNi sVo1wAYjoXoEv5DBNidAZoAeID97TK/WE2sRvzoTL8o3OI2zEJa7UgIDlBowKdJa Zrxix1wH/X5/kxB3Ir2B3wpA+w8F67jo4fG7n+WVZx6I/ZqYWQh67w1UPbmJY998 CMrsviAXTnqfpK1MgrHebMeBucuDCdZ2mvO8brOi5iuQwtFYxkNojZktEIG5TZPG lZ/065OwkNBiWKnsjc36OI8aEJ7MmKmxuxE= -----END CERTIFICATE-----Generated at Mon Mar 2 16:12:19 2026 by rpki-client