$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d154570d-60be-317c-bd26-9a8a8ee86555.roa File: d154570d-60be-317c-bd26-9a8a8ee86555.roa (raw, json) Hash identifier: 9g3naRC6MAUyXmnktIecaLufL35fnXu8V2crVkVD2/o= Subject key identifier: D3:C9:80:5F:E8:BB:25:0B:A2:60:B2:3A:5A:6B:84:C4:69:E6:89:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4979F4F849DFE0AA0C692600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d154570d-60be-317c-bd26-9a8a8ee86555.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33287 IP address blocks: 2001:559:c38f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:f4:f8:49:df:e0:aa:0c:69:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cf1d39a9-e0b6-4080-b95f-b1d7d678e979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:37:d5:f1:dd:74:4b:34:22:59:ed:ac:31:b3: 7a:15:76:51:06:d5:82:82:d7:95:cc:27:52:f3:b1: 3d:4d:89:73:f3:fa:e7:67:6e:56:46:68:de:71:d0: 0a:bc:03:27:f0:91:55:05:b4:45:3a:c4:ff:86:28: cb:d1:95:1b:a8:43:90:79:ce:49:3f:34:d9:34:70: 0e:65:a8:ba:d8:59:4a:14:fa:31:a4:6b:b6:e5:62: df:d0:49:0d:38:e3:f1:e5:fa:43:9e:76:f6:9c:42: 9e:a4:68:0d:2e:6c:72:99:e4:44:fb:7a:9e:21:0c: 2a:70:0f:db:0f:36:df:dd:e9:87:7c:a7:3d:18:57: 8e:7b:57:e6:ad:c6:e6:ec:76:42:1e:8e:2c:78:77: ea:52:56:12:5b:95:ec:99:17:85:1c:93:d3:33:31: fb:1c:eb:83:96:ed:d1:e0:55:58:75:40:06:25:0e: 90:74:2d:25:ea:11:56:ed:d0:3b:f3:d3:47:0e:00: c0:32:71:34:08:42:f6:38:cb:c3:2f:49:b2:76:4d: 89:39:99:41:60:f3:6a:26:78:63:f0:2b:de:0c:f6: b8:7c:0d:48:68:42:a5:49:a0:46:d2:ca:70:f6:ee: 29:0b:12:3a:dc:62:12:50:8c:c4:be:ff:87:65:9e: 98:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C9:80:5F:E8:BB:25:0B:A2:60:B2:3A:5A:6B:84:C4:69:E6:89:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d154570d-60be-317c-bd26-9a8a8ee86555.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c38f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:62:ee:c6:95:6c:8c:1f:a5:a2:13:61:9b:6f:5d:1a:0e:e2: 6d:e4:96:ca:b7:16:07:ff:6f:7c:b0:bb:97:fb:e2:a8:71:11: 04:a5:2e:b8:3d:fd:5e:3d:da:0a:30:f5:f2:42:18:e2:e5:43: 2a:ce:03:c5:11:7d:f8:6b:72:1b:fc:25:27:94:84:bf:df:4b: d8:73:1c:a0:e5:fb:31:8f:8c:d7:87:c6:ca:d0:25:f9:7e:50: a2:ca:c6:4e:e2:8d:ca:60:36:65:aa:63:ce:d7:1d:2d:2b:ca: bd:d3:c7:12:bc:d1:59:7a:ec:67:de:c7:3d:94:d0:b0:84:3b: f7:24:61:55:f3:1b:99:09:11:40:54:41:88:6e:cf:5b:10:bf: 64:ed:6c:ff:22:f0:93:ca:79:67:c3:b7:49:05:ec:04:d7:44: 37:fb:26:41:dd:0b:3e:0c:0b:0b:4f:76:90:6d:0b:03:a8:c0: 06:2f:79:72:04:25:3f:4a:13:2e:90:30:ed:d6:e7:b0:d4:9f: 85:70:80:11:94:0e:a3:09:91:59:af:6d:5f:b2:33:18:d9:87: 68:df:eb:e4:55:3f:d8:6f:a7:54:79:28:7a:fc:ac:fa:09:77: 98:df:1f:15:cb:9f:14:6e:8a:ca:f7:41:ad:1d:de:20:58:2f: eb:19:27:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JefT4Sd/gqgxpJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2YxZDM5YTktZTBiNi00MDgwLWI5NWYtYjFkN2Q2NzhlOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TfV8d10SzQiWe2sMbN6FXZRBtWCgteVzCdS 87E9TYlz8/rnZ25WRmjecdAKvAMn8JFVBbRFOsT/hijL0ZUbqEOQec5JPzTZNHAO Zai62FlKFPoxpGu25WLf0EkNOOPx5fpDnnb2nEKepGgNLmxymeRE+3qeIQwqcA/b Dzbf3emHfKc9GFeOe1fmrcbm7HZCHo4seHfqUlYSW5XsmReFHJPTMzH7HOuDlu3R 4FVYdUAGJQ6QdC0l6hFW7dA789NHDgDAMnE0CEL2OMvDL0mydk2JOZlBYPNqJnhj 8CveDPa4fA1IaEKlSaBG0spw9u4pCxI63GISUIzEvv+HZZ6YUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNPJgF/ouyULomCyOlprhMRp5ok5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE1NDU3MGQtNjBiZS0z MTdjLWJkMjYtOWE4YThlZTg2NTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcOP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABBi7saVbIwfpaITYZtvXRoO4m3klsq3Fgf/b3ywu5f74qhxEQSl Lrg9/V492gow9fJCGOLlQyrOA8URffhrchv8JSeUhL/fS9hzHKDl+zGPjNeHxsrQ Jfl+UKLKxk7ijcpgNmWqY87XHS0ryr3TxxK80Vl67Gfexz2U0LCEO/ckYVXzG5kJ EUBUQYhuz1sQv2TtbP8i8JPKeWfDt0kF7ATXRDf7JkHdCz4MCwtPdpBtCwOowAYv eXIEJT9KEy6QMO3W57DUn4VwgBGUDqMJkVmvbV+yMxjZh2jf6+RVP9hvp1R5KHr8 rPoJd5jfHxXLnxRuisr3Qa0d3iBYL+sZJ+0= -----END CERTIFICATE-----Generated at Sun Sep 27 09:00:13 2026 by rpki-client