$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bacb728f-d46f-3eac-afeb-6c48be7314a3.roa File: bacb728f-d46f-3eac-afeb-6c48be7314a3.roa (raw, json) Hash identifier: VBusxcWGyioNvx46PvhgEWsAAUwdaYzKP767x/Tjk8g= Subject key identifier: FA:AD:FD:C9:E3:6D:D4:A0:2C:6D:F8:ED:D5:5A:DB:AA:B0:7B:2E:EB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE8887B48B905F6085A7DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bacb728f-d46f-3eac-afeb-6c48be7314a3.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 7015 IP address blocks: 2001:559:c3a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e8:88:7b:48:b9:05:f6:08:5a:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=5fd4e28f-c173-47c0-a793-52df37cb8cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ed:e5:00:0a:25:fb:51:1b:3a:2f:dd:66:01: 2b:87:18:ac:be:a9:3f:09:b8:43:c4:fd:2d:27:e4: f7:f6:1b:4f:c8:f1:4f:8b:3b:c5:f5:0a:89:61:dc: 74:81:25:cb:d2:7c:13:2f:6e:d0:e4:81:c6:02:13: 34:66:62:16:13:0e:f2:59:13:cb:56:b0:61:db:77: 1a:72:f6:58:a0:d9:e6:8f:95:f4:0d:f0:0e:83:53: 08:70:1e:61:78:11:0e:69:b8:32:96:86:c4:87:63: 35:a5:60:81:79:8c:97:f4:4f:b4:df:b8:56:14:46: 95:6a:d5:b7:47:77:0b:5c:6f:51:22:16:5f:45:c7: a9:50:32:16:93:bd:b6:bd:0f:33:a1:b0:cc:11:ca: de:4c:7b:92:e7:5d:5e:44:65:35:02:21:b5:52:b5: d1:60:30:76:a8:d2:0d:21:91:14:6f:d1:24:3b:36: 98:95:3d:6a:9b:88:58:2c:16:1f:8f:ef:22:25:76: 2c:a4:32:ce:f8:40:25:52:3f:9c:05:18:23:1f:64: 08:5e:6c:8b:9a:01:ac:6d:2a:c9:d9:a2:88:ca:18: 0e:f0:01:a4:cd:56:60:56:4f:5c:74:b1:ce:fc:c1: f9:7e:ad:b7:1c:61:11:0a:d2:0c:0a:03:70:c8:8d: dd:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:AD:FD:C9:E3:6D:D4:A0:2C:6D:F8:ED:D5:5A:DB:AA:B0:7B:2E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bacb728f-d46f-3eac-afeb-6c48be7314a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:8e:e6:2b:2a:b7:bc:7f:1a:33:00:e4:66:a0:aa:be:a0:11: 6a:4f:73:f3:95:2f:39:9a:08:f5:0c:70:28:d4:10:e3:0d:2a: af:89:88:f6:72:1f:f4:20:7f:41:df:18:ad:9b:1c:54:f1:6c: 09:ed:5c:07:d9:f3:e8:29:5d:9d:3f:2c:c5:0d:8f:d8:2d:d4: a8:66:0a:04:22:7e:5c:7f:0d:29:bb:55:62:dc:06:4a:11:a2: df:f6:c5:18:b5:92:f3:13:d8:5c:8d:f4:50:a6:43:e9:7a:8f: 4f:1c:7c:1c:bc:40:34:77:47:bb:1a:47:b2:2e:b2:02:00:23: a8:da:58:16:a7:8b:a2:c9:a0:18:d0:b3:c7:11:24:74:fd:b4: dd:01:c4:d1:d8:e5:d1:c3:93:db:d2:55:38:38:88:88:7e:28: ea:e2:aa:3c:89:60:e2:9e:36:db:fb:39:f1:76:ae:27:b9:da: cf:94:12:15:0f:ee:83:84:ab:82:bc:f8:bb:dc:87:44:0e:7a: a6:0e:9f:94:0e:20:8f:cb:20:4f:6f:60:60:73:31:36:b6:d8: 76:55:be:79:09:24:a9:d0:87:ac:b4:9f:ab:24:31:e0:e6:87: 0b:d6:ba:32:67:8c:21:23:41:c4:46:29:26:06:9d:3a:a8:cf: bd:ea:e2:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96Ih7SLkF9ghafcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk NWZkNGUyOGYtYzE3My00N2MwLWE3OTMtNTJkZjM3Y2I4Y2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArO3lAAol+1EbOi/dZgErhxisvqk/CbhDxP0t J+T39htPyPFPizvF9QqJYdx0gSXL0nwTL27Q5IHGAhM0ZmIWEw7yWRPLVrBh23ca cvZYoNnmj5X0DfAOg1MIcB5heBEOabgylobEh2M1pWCBeYyX9E+037hWFEaVatW3 R3cLXG9RIhZfRcepUDIWk722vQ8zobDMEcreTHuS511eRGU1AiG1UrXRYDB2qNIN IZEUb9EkOzaYlT1qm4hYLBYfj+8iJXYspDLO+EAlUj+cBRgjH2QIXmyLmgGsbSrJ 2aKIyhgO8AGkzVZgVk9cdLHO/MH5fq23HGERCtIMCgNwyI3dNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPqt/cnjbdSgLG347dVa26qwey7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFjYjcyOGYtZDQ2Zi0z ZWFjLWFmZWItNmM0OGJlNzMxNGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcOp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJeO5isqt7x/GjMA5Gagqr6gEWpPc/OVLzmaCPUMcCjUEOMNKq+J iPZyH/Qgf0HfGK2bHFTxbAntXAfZ8+gpXZ0/LMUNj9gt1KhmCgQiflx/DSm7VWLc BkoRot/2xRi1kvMT2FyN9FCmQ+l6j08cfBy8QDR3R7saR7IusgIAI6jaWBani6LJ oBjQs8cRJHT9tN0BxNHY5dHDk9vSVTg4iIh+KOriqjyJYOKeNtv7OfF2rie52s+U EhUP7oOEq4K8+Lvch0QOeqYOn5QOII/LIE9vYGBzMTa22HZVvnkJJKnQh6y0n6sk MeDmhwvWujJnjCEjQcRGKSYGnTqoz73q4sM= -----END CERTIFICATE-----Generated at Mon Mar 2 06:02:13 2026 by rpki-client