$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c72b88af-5b24-3ad8-9874-60d7056873ea.roa File: c72b88af-5b24-3ad8-9874-60d7056873ea.roa (raw, json) Hash identifier: APl7qk0DUu4SKy0YNM+dYWWv00lECFLa0pq+ycOOvOw= Subject key identifier: D1:72:40:63:35:D8:25:09:39:B3:92:88:77:49:7E:C8:3D:BA:3E:C0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE9C726FBE97FF44E825240 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c72b88af-5b24-3ad8-9874-60d7056873ea.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 33651 IP address blocks: 2001:559:823f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:c7:26:fb:e9:7f:f4:4e:82:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=5bf9ba6a-2e89-4364-82c0-7af9d41d6a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ca:84:04:3f:17:d4:35:64:da:6d:f3:06:8d: fe:6a:79:1c:0d:e6:69:88:bc:8a:4c:cd:a4:cf:1d: 2f:08:8b:1d:58:43:24:70:22:65:2f:28:e6:44:1b: 8b:e9:01:a5:75:8b:eb:58:96:ce:be:7c:3c:04:cb: 3f:74:27:82:8d:9f:09:11:d8:4c:4a:b7:89:35:2d: 49:9e:03:e9:0a:de:70:2f:28:24:22:38:fb:0f:21: 61:80:99:0f:af:bc:63:e9:dd:08:52:f5:34:99:7b: 29:44:1a:5d:e3:fa:ab:c4:11:00:de:26:47:c5:d3: a4:46:85:1f:54:b2:9a:e1:e4:67:e7:f8:f7:34:ff: cd:94:ff:7c:9d:2f:4c:6e:f7:7d:21:e6:88:18:30: a7:a5:c5:6e:76:ce:17:6d:66:a0:23:b9:8d:16:27: 73:e0:ea:6f:50:9b:eb:ca:b4:54:7a:a0:cc:41:01: 95:33:a5:92:9c:89:5f:5f:01:51:cf:16:20:f9:ab: 6d:da:68:ff:9d:b7:52:6d:c5:cc:86:6d:a3:d4:af: 17:0c:6e:5c:b2:2b:43:4f:c8:4e:cb:35:98:69:da: c6:7c:03:e2:42:e7:7f:b9:15:4a:58:ff:bf:53:3c: 42:84:1d:83:07:90:bf:33:4c:82:04:b1:b4:d8:e1: 92:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:72:40:63:35:D8:25:09:39:B3:92:88:77:49:7E:C8:3D:BA:3E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c72b88af-5b24-3ad8-9874-60d7056873ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:823f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:29:d9:08:5e:2d:8c:59:dd:cb:da:4c:60:17:84:6b:86:3f: f5:60:2c:ed:0b:44:b5:ee:37:9e:ad:d1:78:d9:9d:67:2f:dc: 13:4e:2f:ca:3d:43:fa:5f:80:6c:f9:55:c3:15:a1:c2:03:52: 79:db:87:d1:7e:e2:1c:de:72:0b:72:a4:07:12:25:48:de:53: 89:46:15:13:e7:f1:c1:f8:fe:87:52:c2:86:cb:d3:9b:39:2b: 72:4e:a2:e2:9b:da:3f:09:fa:90:62:ca:d4:c7:1d:46:ee:fe: 33:b7:e9:ed:60:e3:df:85:9a:1d:c1:af:79:65:28:87:e6:33: d7:53:2e:51:8f:44:78:dc:8e:a3:28:f6:6b:40:3a:50:c6:5f: 14:67:27:f9:90:52:e5:01:a9:6b:23:6e:74:55:53:e5:eb:9e: 41:42:37:61:9c:0a:2d:fc:9d:00:1e:7f:74:e0:32:1e:d0:21: 81:41:32:49:80:f0:1e:a5:87:8b:bd:52:d3:f9:5e:84:7f:2b: 18:af:6d:a3:4a:51:e7:e4:c5:5d:6d:9a:5f:01:2f:a0:1d:ee: 32:92:5e:24:8c:1a:f8:56:17:45:fe:15:72:6c:10:24:f9:33: 24:d5:5e:37:f6:d7:cd:84:76:d9:12:6e:08:52:35:9c:f6:1e: 70:5b:4a:af -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96ccm++l/9E6CUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk NWJmOWJhNmEtMmU4OS00MzY0LTgyYzAtN2FmOWQ0MWQ2YTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8cqEBD8X1DVk2m3zBo3+ankcDeZpiLyKTM2k zx0vCIsdWEMkcCJlLyjmRBuL6QGldYvrWJbOvnw8BMs/dCeCjZ8JEdhMSreJNS1J ngPpCt5wLygkIjj7DyFhgJkPr7xj6d0IUvU0mXspRBpd4/qrxBEA3iZHxdOkRoUf VLKa4eRn5/j3NP/NlP98nS9Mbvd9IeaIGDCnpcVuds4XbWagI7mNFidz4OpvUJvr yrRUeqDMQQGVM6WSnIlfXwFRzxYg+att2mj/nbdSbcXMhm2j1K8XDG5csitDT8hO yzWYadrGfAPiQud/uRVKWP+/UzxChB2DB5C/M0yCBLG02OGSEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNFyQGM12CUJObOSiHdJfsg9uj7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzcyYjg4YWYtNWIyNC0z YWQ4LTk4NzQtNjBkNzA1Njg3M2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYI/ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMQp2QheLYxZ3cvaTGAXhGuGP/VgLO0LRLXuN56t0XjZnWcv3BNO L8o9Q/pfgGz5VcMVocIDUnnbh9F+4hzecgtypAcSJUjeU4lGFRPn8cH4/odSwobL 05s5K3JOouKb2j8J+pBiytTHHUbu/jO36e1g49+Fmh3Br3llKIfmM9dTLlGPRHjc jqMo9mtAOlDGXxRnJ/mQUuUBqWsjbnRVU+XrnkFCN2GcCi38nQAef3TgMh7QIYFB MkmA8B6lh4u9UtP5XoR/KxivbaNKUefkxV1tml8BL6Ad7jKSXiSMGvhWF0X+FXJs ECT5MyTVXjf2182EdtkSbghSNZz2HnBbSq8= -----END CERTIFICATE-----Generated at Mon Mar 2 10:15:23 2026 by rpki-client