$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b70ff65e-fb5b-3cc0-9826-aae78dd082d3.roa File: b70ff65e-fb5b-3cc0-9826-aae78dd082d3.roa (raw, json) Hash identifier: CETrQh7hnu0IUQ6Jkz9KYB/3JCfMkfTIX21Sa/L0mX4= Subject key identifier: 6E:CD:DE:C6:8F:0E:42:70:2D:46:86:5A:B9:A9:B3:63:D1:61:4E:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78E407E0121A4139FA462C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b70ff65e-fb5b-3cc0-9826-aae78dd082d3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33287 IP address blocks: 2001:559:835b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8e:40:7e:01:21:a4:13:9f:a4:62:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=2b03603e-a577-4166-a5d0-b59ab12f91b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5f:45:14:cc:9e:82:e0:d0:99:b8:24:ba:33: c7:d5:a5:c7:02:d3:a5:78:96:bc:de:75:ef:9e:2d: 17:24:8e:5a:78:e9:52:39:d8:f2:73:00:b1:ef:d9: ad:06:cc:74:55:32:40:66:61:d6:66:af:b0:4c:2b: da:09:6f:f1:ff:cb:15:84:12:91:0a:bb:cf:c0:55: c5:36:1d:e5:54:d8:14:83:a3:54:ed:96:c0:c2:f3: 3e:dd:5a:f1:d5:21:44:f5:67:37:b2:40:48:df:22: 96:61:c4:30:a8:ed:a3:97:29:67:37:34:03:a6:ec: d1:0f:62:14:75:f5:07:54:ee:4d:f4:3f:06:0e:c3: 90:7a:03:20:ab:be:d0:86:12:fd:af:d9:68:08:3c: d3:ab:53:53:3c:9a:a8:a6:1d:81:db:1c:bc:70:06: b3:e6:bc:f9:d9:8a:74:22:84:b5:3f:1d:90:84:29: bb:65:c2:d7:54:c0:92:cf:94:e5:5a:7b:23:4a:8f: a4:c6:10:41:6c:9e:0a:fc:42:c1:25:10:34:38:8c: 4a:05:61:bf:b9:a0:e7:68:8c:7b:4e:4d:6d:fa:af: 76:cd:6f:85:dc:b2:d6:37:b2:ac:77:0a:05:34:7a: dd:91:60:65:8d:27:3b:b5:3b:24:d2:35:a3:24:dd: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CD:DE:C6:8F:0E:42:70:2D:46:86:5A:B9:A9:B3:63:D1:61:4E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b70ff65e-fb5b-3cc0-9826-aae78dd082d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:835b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:42:c0:10:49:a7:78:86:fa:a1:c6:fc:39:ce:cf:33:98:70: d2:8c:a4:61:91:5e:44:20:67:a7:ed:96:f6:c4:8e:65:2a:20: 5a:af:7b:84:b5:c5:80:11:e8:39:6f:5a:49:4a:a0:d1:7e:23: 7a:78:19:e4:58:7f:56:90:28:f7:62:85:5f:56:29:6d:5e:fe: bc:c2:d5:fa:49:60:b9:27:e1:1e:37:5b:42:8b:48:a5:4e:7e: a3:b9:5d:fc:60:bc:4b:a9:ad:3d:1a:fe:78:47:7e:9a:d4:24: c4:95:ad:20:4d:b5:ed:d7:e8:09:db:33:b6:82:bc:f8:2f:95: c7:44:8c:42:12:bf:a8:b9:eb:91:a4:94:47:b7:87:ff:52:4a: f5:d9:e8:93:56:68:a8:22:24:1f:47:9d:00:65:f9:fa:cc:56: 58:8f:91:b4:f2:1e:26:bd:f7:65:b5:d4:3c:0b:06:5b:3a:69: 2c:4b:aa:1e:d4:6d:a4:b0:c8:d7:3f:a9:27:5e:9e:c7:47:72: df:f5:3a:71:c6:31:fb:c9:4a:cb:19:1b:10:b1:43:b6:26:66: b9:8a:16:19:32:65:bb:c3:86:9a:1f:1d:2a:01:7e:e4:22:dd: 10:37:3f:d1:9d:55:4c:d8:5d:d8:89:42:dd:58:0f:51:68:de: b0:04:a7:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njkB+ASGkE5+kYsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MmIwMzYwM2UtYTU3Ny00MTY2LWE1ZDAtYjU5YWIxMmY5MWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm19FFMyeguDQmbgkujPH1aXHAtOleJa83nXv ni0XJI5aeOlSOdjycwCx79mtBsx0VTJAZmHWZq+wTCvaCW/x/8sVhBKRCrvPwFXF Nh3lVNgUg6NU7ZbAwvM+3Vrx1SFE9Wc3skBI3yKWYcQwqO2jlylnNzQDpuzRD2IU dfUHVO5N9D8GDsOQegMgq77QhhL9r9loCDzTq1NTPJqoph2B2xy8cAaz5rz52Yp0 IoS1Px2QhCm7ZcLXVMCSz5TlWnsjSo+kxhBBbJ4K/ELBJRA0OIxKBWG/uaDnaIx7 Tk1t+q92zW+F3LLWN7KsdwoFNHrdkWBljSc7tTsk0jWjJN2fzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG7N3saPDkJwLUaGWrmps2PRYU5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjcwZmY2NWUtZmI1Yi0z Y2MwLTk4MjYtYWFlNzhkZDA4MmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYNb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKtCwBBJp3iG+qHG/DnOzzOYcNKMpGGRXkQgZ6ftlvbEjmUqIFqv e4S1xYAR6DlvWklKoNF+I3p4GeRYf1aQKPdihV9WKW1e/rzC1fpJYLkn4R43W0KL SKVOfqO5XfxgvEuprT0a/nhHfprUJMSVrSBNte3X6AnbM7aCvPgvlcdEjEISv6i5 65GklEe3h/9SSvXZ6JNWaKgiJB9HnQBl+frMVliPkbTyHia992W11DwLBls6aSxL qh7UbaSwyNc/qSdensdHct/1OnHGMfvJSssZGxCxQ7YmZrmKFhkyZbvDhpofHSoB fuQi3RA3P9GdVUzYXdiJQt1YD1Fo3rAEp7w= -----END CERTIFICATE-----Generated at Wed Jul 29 08:31:32 2026 by rpki-client