$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2a4f9e7-c2b9-3338-9bd1-535cb0529f9d.roa File: f2a4f9e7-c2b9-3338-9bd1-535cb0529f9d.roa (raw, json) Hash identifier: zpPGcVYqikiN9Yd4e9aDMGxVYuwK07eHwWvvk3YyNcY= Subject key identifier: F5:8F:47:6E:84:E8:12:18:AE:29:AB:92:20:B2:AA:2C:E3:30:F7:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4979A70A664DE8147EE7AAC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2a4f9e7-c2b9-3338-9bd1-535cb0529f9d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13367 IP address blocks: 2001:559:372::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:a7:0a:66:4d:e8:14:7e:e7:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=611d90cf-bb0c-4505-9877-ff3fbf54145f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c8:d1:a2:84:dd:ce:67:e6:e2:0d:ce:23:da: 02:98:db:4c:13:68:7e:da:b6:86:de:4b:63:51:e7: 4c:42:29:b0:5d:17:4e:6c:f9:ef:ed:17:93:d6:2a: 05:9b:e9:12:fb:20:07:ad:72:65:ff:30:02:ab:a2: 34:2a:59:db:ec:4d:47:a9:4d:5b:56:b4:3f:e0:39: c9:e8:ec:8d:5a:f3:52:e1:39:22:a8:f8:53:e1:38: c4:88:5a:4e:f7:ec:36:a4:2c:5b:ad:2b:dc:7e:4c: 4d:99:23:08:06:a5:81:6b:fe:bd:2f:9d:9a:82:24: 5c:a1:e0:ba:e2:c0:8d:30:5e:be:57:d6:82:cf:0a: 4e:5f:90:d0:30:d6:55:ed:2e:ab:9c:f7:95:3f:62: 34:63:57:b1:5d:8d:a1:59:7a:38:4f:c2:eb:c4:50: d2:62:59:a5:cf:72:8d:f5:c5:8d:39:a1:05:89:a4: 12:e9:1f:9f:f0:5b:08:80:88:c1:95:ff:0d:da:06: a4:54:ef:c0:bf:16:56:4e:6c:d3:64:cb:08:58:ea: 3a:8e:30:c5:89:13:1c:cc:1b:55:b2:84:96:2c:66: 94:e1:4d:4d:e0:25:24:ec:ff:ec:f9:05:25:17:5b: 99:e3:01:17:68:c2:b3:b2:a3:ed:aa:ba:f8:46:79: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8F:47:6E:84:E8:12:18:AE:29:AB:92:20:B2:AA:2C:E3:30:F7:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2a4f9e7-c2b9-3338-9bd1-535cb0529f9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:372::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d7:5e:a1:8d:0e:18:a5:79:02:f4:a4:40:06:3d:63:52:07: 57:aa:31:0d:20:6c:ee:8b:bb:1d:16:d1:a8:c0:7a:3f:ad:29: 79:fb:6e:91:80:7f:3f:4a:27:5b:1f:71:a5:61:33:75:2a:46: de:e6:ee:e7:3d:bc:3c:23:02:2a:14:2d:38:b4:85:86:4f:f3: 37:5e:84:d9:0b:fd:ef:6c:d2:09:82:14:9c:eb:45:ee:6f:58: a7:1e:59:70:5a:e0:79:55:da:28:dc:cd:6a:52:e0:54:bc:d1: 97:f0:47:4f:36:26:d2:14:9f:b4:28:e1:a7:4d:06:9b:0a:4d: 4a:3c:9c:5b:bc:d6:7e:ad:58:b4:d2:3a:8a:ab:d6:84:b3:45: 4d:9f:46:64:c5:93:a8:3e:d2:a0:6f:84:1a:0e:45:4c:ed:b1: d5:30:f5:9b:e1:ae:80:32:7d:7f:66:44:69:33:93:e4:d4:ed: 6d:df:ce:5a:2f:ef:05:f1:4b:2a:e9:4e:e1:de:39:43:b4:0d: 74:b9:af:30:3b:43:81:87:72:8a:b5:61:da:3b:b6:6b:af:77: 00:d9:85:9c:01:56:a6:d9:fa:ed:f6:0b:db:d3:7f:e6:a1:9c: a9:fb:2f:27:15:8e:ce:d2:54:eb:44:5d:9c:e8:e2:8a:02:c7: 8f:23:ba:80 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JeacKZk3oFH7nqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjExZDkwY2YtYmIwYy00NTA1LTk4NzctZmYzZmJmNTQxNDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8sjRooTdzmfm4g3OI9oCmNtME2h+2raG3ktj UedMQimwXRdObPnv7ReT1ioFm+kS+yAHrXJl/zACq6I0Klnb7E1HqU1bVrQ/4DnJ 6OyNWvNS4TkiqPhT4TjEiFpO9+w2pCxbrSvcfkxNmSMIBqWBa/69L52agiRcoeC6 4sCNMF6+V9aCzwpOX5DQMNZV7S6rnPeVP2I0Y1exXY2hWXo4T8LrxFDSYlmlz3KN 9cWNOaEFiaQS6R+f8FsIgIjBlf8N2gakVO/AvxZWTmzTZMsIWOo6jjDFiRMczBtV soSWLGaU4U1N4CUk7P/s+QUlF1uZ4wEXaMKzsqPtqrr4RnmcvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPWPR26E6BIYrimrkiCyqizjMPdCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjJhNGY5ZTctYzJiOS0z MzM4LTliZDEtNTM1Y2IwNTI5ZjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQNy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfXXqGNDhileQL0pEAGPWNSB1eqMQ0gbO6Lux0W0ajAej+tKXn7 bpGAfz9KJ1sfcaVhM3UqRt7m7uc9vDwjAioULTi0hYZP8zdehNkL/e9s0gmCFJzr Re5vWKceWXBa4HlV2ijczWpS4FS80ZfwR082JtIUn7Qo4adNBpsKTUo8nFu81n6t WLTSOoqr1oSzRU2fRmTFk6g+0qBvhBoORUztsdUw9ZvhroAyfX9mRGkzk+TU7W3f zlov7wXxSyrpTuHeOUO0DXS5rzA7Q4GHcoq1Ydo7tmuvdwDZhZwBVqbZ+u32C9vT f+ahnKn7LycVjs7SVOtEXZzo4ooCx48juoA= -----END CERTIFICATE-----Generated at Mon Sep 28 17:59:45 2026 by rpki-client