$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1f89a2d-13e6-35ac-a29a-96f63c0d3a71.roa File: d1f89a2d-13e6-35ac-a29a-96f63c0d3a71.roa (raw, json) Hash identifier: Gj7CywC71yJPwTsdALeIJx11tnXiEXJp2LFyZl1VJF8= Subject key identifier: B1:71:72:9F:E3:6C:E6:C0:DD:CC:49:B7:4B:BB:44:83:9C:4A:B7:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584CFDE9A664B71500A098A21100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1f89a2d-13e6-35ac-a29a-96f63c0d3a71.roa Signing time: Thu 26 Feb 2026 14:00:40 +0000 ROA not before: Thu 26 Feb 2026 14:00:40 +0000 ROA not after: Wed 27 May 2026 13:00:40 +0000 asID: 22258 IP address blocks: 2001:559:820e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:e9:a6:64:b7:15:00:a0:98:a2:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 26 14:00:40 2026 GMT Not After : May 27 13:00:40 2026 GMT Subject: CN=fa2106ee-6b44-419a-8a1b-0fdc03e02ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:41:38:b7:b4:bd:93:ce:0f:1c:83:b7:57: 1a:24:a5:1b:85:cf:ec:07:01:50:71:8b:bc:d4:b9: 61:b0:4a:b5:f1:89:90:af:b0:74:63:d1:fd:56:05: 10:61:90:b2:ed:b2:e9:77:3a:cb:d2:4b:b7:cb:d3: 1d:73:66:d6:c5:1d:97:67:34:7c:31:33:31:bf:08: c7:9f:a4:04:07:e7:fd:ce:fc:fb:37:a5:76:ab:6d: c3:56:80:9b:3a:af:c3:45:1a:55:a0:56:a8:e7:bd: 9b:1f:3e:dd:23:c9:8c:87:05:55:98:cb:34:f5:2c: ab:25:b8:3e:8c:8e:50:a2:ea:65:5a:1a:2f:03:f9: 4f:27:85:1e:fd:d9:1c:f8:1a:7e:58:1d:8e:f1:d4: 0e:7a:83:88:39:27:4a:81:3f:18:8d:8f:b3:52:21: 08:69:7e:20:e1:80:7b:d0:8a:5a:3c:a9:ff:33:30: cb:f0:53:92:36:e3:25:76:b5:9c:17:d1:83:e6:52: 88:6f:14:f3:d2:de:98:a1:ef:d4:86:21:01:5c:37: 20:f9:d7:43:a4:b0:89:8a:f3:c4:38:e9:b1:39:6e: 59:0b:a6:d2:1d:5e:df:fc:71:b5:b7:fc:1c:94:15: ce:9c:4f:ac:6c:01:dc:dc:e2:41:3b:84:58:42:f9: e8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:71:72:9F:E3:6C:E6:C0:DD:CC:49:B7:4B:BB:44:83:9C:4A:B7:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1f89a2d-13e6-35ac-a29a-96f63c0d3a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:820e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:77:9c:dd:26:12:ed:ef:e2:cc:f3:90:7d:e3:e9:b5:87:db: f7:ea:5a:ab:52:35:36:4b:20:7d:4f:b0:14:fb:58:58:36:05: f5:d0:dc:e7:a2:a2:9f:13:e5:0d:59:3b:78:6c:ec:ea:ca:b5: 78:c5:69:af:ae:d5:43:0d:44:ee:c2:5e:07:60:e2:bb:30:09: 10:ce:66:4c:31:90:76:dc:af:3d:e0:1d:af:a2:26:7f:9a:11: 57:2e:2f:58:41:ab:40:06:83:f6:d1:43:43:2b:8d:5f:44:7c: 0b:fd:20:41:6b:36:8c:5a:f4:bf:32:c4:04:fd:eb:b3:6e:80: fb:5e:06:73:67:3e:00:1b:cd:1c:b2:8f:82:ef:d8:8d:7f:00: 9b:73:d1:15:a6:34:8c:ac:89:84:00:79:46:9a:54:99:68:f8: fb:02:37:86:e8:9f:33:62:48:e3:d6:d5:ab:cd:d5:e9:a2:2d: 86:7b:67:10:1c:0b:29:ff:b6:f3:36:91:b6:9a:17:ad:93:46: 0b:4f:1a:ad:32:e7:7d:ec:50:86:09:9f:09:6b:ad:d4:a6:56: e6:8e:a4:6d:e5:a4:ed:54:e0:33:36:4a:95:7e:50:b4:da:c7: 2d:f9:15:e3:0d:17:51:8a:8b:79:33:f7:4b:e9:6e:b7:04:b7: f3:5a:22:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz96aZktxUAoJiiEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk ZmEyMTA2ZWUtNmI0NC00MTlhLThhMWItMGZkYzAzZTAyZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUpBOLe0vZPODxyDt1caJKUbhc/sBwFQcYu8 1LlhsEq18YmQr7B0Y9H9VgUQYZCy7bLpdzrL0ku3y9Mdc2bWxR2XZzR8MTMxvwjH n6QEB+f9zvz7N6V2q23DVoCbOq/DRRpVoFao572bHz7dI8mMhwVVmMs09SyrJbg+ jI5QouplWhovA/lPJ4Ue/dkc+Bp+WB2O8dQOeoOIOSdKgT8YjY+zUiEIaX4g4YB7 0IpaPKn/MzDL8FOSNuMldrWcF9GD5lKIbxTz0t6Yoe/UhiEBXDcg+ddDpLCJivPE OOmxOW5ZC6bSHV7f/HG1t/wclBXOnE+sbAHc3OJBO4RYQvnoMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLFxcp/jbObA3cxJt0u7RIOcSreoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDFmODlhMmQtMTNlNi0z NWFjLWEyOWEtOTZmNjNjMGQzYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYIO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADJ3nN0mEu3v4szzkH3j6bWH2/fqWqtSNTZLIH1PsBT7WFg2BfXQ 3Oeiop8T5Q1ZO3hs7OrKtXjFaa+u1UMNRO7CXgdg4rswCRDOZkwxkHbcrz3gHa+i Jn+aEVcuL1hBq0AGg/bRQ0MrjV9EfAv9IEFrNoxa9L8yxAT967NugPteBnNnPgAb zRyyj4Lv2I1/AJtz0RWmNIysiYQAeUaaVJlo+PsCN4bonzNiSOPW1avN1emiLYZ7 ZxAcCyn/tvM2kbaaF62TRgtPGq0y533sUIYJnwlrrdSmVuaOpG3lpO1U4DM2SpV+ ULTaxy35FeMNF1GKi3kz90vpbrcEt/NaItE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:38:10 2026 by rpki-client