$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8db15b-7de7-3d21-9238-9511f5ebb18d.roa File: df8db15b-7de7-3d21-9238-9511f5ebb18d.roa (raw, json) Hash identifier: d05PYcm5HlAj7EG5k0sTHfr0mWCzLcDb2IwSwlti6Ps= Subject key identifier: D5:6C:D1:2F:A7:73:F3:54:01:09:31:F5:65:81:A7:67:C6:32:0B:BF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498133314E5F23EFB43E2DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8db15b-7de7-3d21-9238-9511f5ebb18d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33662 IP address blocks: 2001:559:c452::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:33:31:4e:5f:23:ef:b4:3e:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bdba6fbf-4534-41de-abaf-ce74f87842c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:ec:1d:a1:31:51:11:8a:8c:9b:54:78:27: 06:f5:0b:b1:1c:28:ea:9e:90:47:30:c2:de:aa:78: 33:31:b0:e0:49:10:35:0d:0f:c6:46:a3:2f:cc:ff: 95:07:ed:6b:33:8f:84:b3:16:b3:27:95:6b:87:53: 08:34:f8:26:be:e1:31:05:d8:24:62:78:18:40:e1: 52:9f:28:37:98:05:23:44:84:74:32:1e:4d:8d:3c: 86:2b:a2:e2:e2:5c:2e:ab:38:35:14:48:0c:e7:16: 16:c6:3a:6f:9a:6e:57:0b:7b:fc:58:39:b1:21:a8: bb:86:bd:42:04:16:ef:c3:04:67:ae:f2:44:ac:26: 09:16:b9:8f:77:9b:87:58:e1:b4:0e:e8:5a:da:d5: 23:38:22:e4:2f:11:81:5d:73:61:4d:a9:a4:01:a2: 5e:14:c2:07:9d:34:ab:90:38:60:51:0b:d0:68:ff: 8f:c5:b5:6c:04:c2:b0:1a:50:81:2b:88:86:a1:85: c7:d5:f6:10:3d:ff:0b:cc:1c:8f:23:3a:92:87:33: 26:f8:ed:da:f0:28:23:8c:d3:9d:b5:e2:9d:b2:36: c1:b2:38:dc:ae:5a:4b:13:ac:de:60:eb:46:1b:ca: d9:bb:4a:a5:e0:17:4a:31:74:58:bd:c8:9e:36:30: 30:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6C:D1:2F:A7:73:F3:54:01:09:31:F5:65:81:A7:67:C6:32:0B:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8db15b-7de7-3d21-9238-9511f5ebb18d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c452::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:c6:e1:e3:f0:28:5b:89:4b:66:97:fc:77:d5:07:7a:b5:c4: 11:56:72:19:4a:72:60:21:07:0f:45:61:37:09:45:11:a4:18: 2c:fd:de:93:e3:2b:57:fe:6c:60:da:18:79:d5:42:a6:0e:86: 07:79:b6:30:47:ab:32:bd:f1:3b:99:d1:19:f9:f7:24:e5:40: 2d:22:aa:c0:f5:0e:eb:a3:2b:69:df:70:d9:a0:46:59:3f:ab: 62:4e:cc:2b:5e:1e:1e:bb:8f:5b:7d:9c:b1:a1:2c:da:85:aa: cd:0f:c1:de:bd:54:96:4f:6f:85:96:87:56:60:67:d5:b3:4f: 4b:eb:d4:09:dd:f7:99:d4:3e:78:4a:83:4c:dc:bd:d3:20:b9: 74:8b:06:c0:94:2e:8f:fd:0b:5c:0f:a3:54:f5:05:e5:60:b1: 61:36:7e:b1:00:ff:3c:5c:87:7a:b4:4c:06:5b:95:39:d5:d0: 66:7c:65:95:49:32:73:c2:5d:15:b6:d0:f1:f1:8f:0a:cb:17: 3a:57:28:28:a1:24:67:26:93:40:9e:62:aa:d8:70:b0:1d:2c: 7e:81:4a:18:21:8e:62:ea:4a:2c:aa:e1:48:18:0f:89:2d:c1: 1d:46:c0:24:96:4b:43:f6:15:f5:ef:59:bb:17:e4:ad:40:2b: 93:cd:a5:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgTMxTl8j77Q+LcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmRiYTZmYmYtNDUzNC00MWRlLWFiYWYtY2U3NGY4Nzg0MmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbHsHaExURGKjJtUeCcG9QuxHCjqnpBHMMLe qngzMbDgSRA1DQ/GRqMvzP+VB+1rM4+EsxazJ5Vrh1MINPgmvuExBdgkYngYQOFS nyg3mAUjRIR0Mh5NjTyGK6Li4lwuqzg1FEgM5xYWxjpvmm5XC3v8WDmxIai7hr1C BBbvwwRnrvJErCYJFrmPd5uHWOG0Duha2tUjOCLkLxGBXXNhTamkAaJeFMIHnTSr kDhgUQvQaP+PxbVsBMKwGlCBK4iGoYXH1fYQPf8LzByPIzqShzMm+O3a8CgjjNOd teKdsjbBsjjcrlpLE6zeYOtGG8rZu0ql4BdKMXRYvcieNjAwSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNVs0S+nc/NUAQkx9WWBp2fGMgu/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY4ZGIxNWItN2RlNy0z ZDIxLTkyMzgtOTUxMWY1ZWJiMThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcRS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADvG4ePwKFuJS2aX/HfVB3q1xBFWchlKcmAhBw9FYTcJRRGkGCz9 3pPjK1f+bGDaGHnVQqYOhgd5tjBHqzK98TuZ0Rn59yTlQC0iqsD1DuujK2nfcNmg Rlk/q2JOzCteHh67j1t9nLGhLNqFqs0Pwd69VJZPb4WWh1ZgZ9WzT0vr1And95nU PnhKg0zcvdMguXSLBsCULo/9C1wPo1T1BeVgsWE2frEA/zxch3q0TAZblTnV0GZ8 ZZVJMnPCXRW20PHxjwrLFzpXKCihJGcmk0CeYqrYcLAdLH6BShghjmLqSiyq4UgY D4ktwR1GwCSWS0P2FfXvWbsX5K1AK5PNpbA= -----END CERTIFICATE-----Generated at Fri Sep 25 15:28:25 2026 by rpki-client