$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bcfd5d-bf56-3c0f-9bcc-be8432b76ce1.roa File: 21bcfd5d-bf56-3c0f-9bcc-be8432b76ce1.roa (raw, json) Hash identifier: 7RO1/LiB5mxLIKBZ3McyDl9dkO1VzMnrfIlvfe1IsUw= Subject key identifier: 7C:45:6C:2F:1B:63:31:03:3A:1E:CA:06:CC:53:2B:A8:84:1B:0E:56 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE8637B6851D58072EDD7080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bcfd5d-bf56-3c0f-9bcc-be8432b76ce1.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 33651 IP address blocks: 2001:559:8538::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:86:37:b6:85:1d:58:07:2e:dd:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=a76aa717-1327-4c9c-a800-354dc7fdf430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:fa:3d:4f:ec:6c:3a:12:03:dc:c0:a7:19: 4c:f5:7a:88:61:e2:34:e4:ab:21:95:bc:d9:02:0d: ae:9f:98:bd:ab:2f:00:84:a9:83:bb:77:16:4a:ec: bf:e3:fe:e3:7d:32:08:ba:98:34:5b:4c:50:50:1d: cf:6d:5f:91:38:a0:7d:1d:02:fc:52:05:79:82:c0: 05:e7:1b:7c:05:f2:5f:dc:22:47:8a:e0:82:41:fa: 77:4d:32:6c:12:58:3c:fe:0d:dd:8f:16:33:9b:18: 7a:b5:75:5f:e9:fa:7e:89:65:ee:c5:e4:3f:b6:0c: 89:57:54:50:ca:30:23:7a:1d:f2:cd:35:a4:53:87: 65:0c:79:4d:32:93:b2:9c:ab:bc:06:78:16:ee:fc: 52:71:60:47:3e:2c:7b:b5:05:93:73:63:26:77:74: b8:01:a5:67:dc:bf:0c:e3:a1:67:98:b4:29:5c:6f: ed:3f:ef:3c:fa:fc:31:98:f6:83:6e:5e:d5:8b:c0: 32:3e:e5:e2:67:03:d9:92:68:32:79:49:e8:c8:36: 4a:37:23:67:37:89:77:f8:71:7f:65:a3:a3:c6:18: 53:7f:23:3f:d1:6b:61:bf:3a:61:df:59:d3:76:4c: d0:ae:39:92:5f:48:32:4b:ae:97:36:5a:df:6f:09: da:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:45:6C:2F:1B:63:31:03:3A:1E:CA:06:CC:53:2B:A8:84:1B:0E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bcfd5d-bf56-3c0f-9bcc-be8432b76ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8538::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:14:d3:0c:bf:7e:73:8b:c9:f5:0d:7a:5e:e9:71:ce:27:2c: 98:e3:25:8f:b1:58:27:f3:42:ed:75:5d:a4:b7:ef:be:38:39: 63:cf:9e:26:2a:d9:e8:6d:89:35:0f:2b:15:ed:67:6c:ba:99: 0d:0e:62:93:ba:15:f7:e2:f5:0e:3d:d3:07:d2:46:82:e5:2c: 7b:73:c2:b4:4f:29:8a:19:fb:ba:12:3c:4b:32:ac:7b:b0:0c: 51:b3:38:3e:38:67:5e:17:62:72:46:9d:0d:b4:fc:17:28:71: 74:b8:54:25:74:84:dd:5f:93:e9:61:43:47:c7:0f:75:be:f3: 4f:09:79:76:b5:df:42:33:bb:67:ca:c3:58:7b:35:b5:52:e0: de:c3:32:b3:0f:48:a1:77:9a:d1:68:81:e7:53:26:65:ea:fb: 13:a2:41:d0:0a:c1:02:68:3a:22:c6:bc:39:a0:d4:3f:92:8f: f5:23:14:cb:07:9d:bd:62:59:a1:f5:3a:26:0c:54:1f:16:d5: 24:d9:59:82:4b:96:19:ba:56:68:af:96:dd:96:60:89:d7:1e: a7:6e:35:14:e3:c3:04:c7:9c:9c:65:5c:58:22:df:1c:e6:fd: 60:c7:7d:73:9d:1c:74:b8:0f:92:21:f1:2b:8a:b7:0e:52:4c: 53:6e:e9:c5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3ehje2hR1YBy7dcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk YTc2YWE3MTctMTMyNy00YzljLWE4MDAtMzU0ZGM3ZmRmNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBf6PU/sbDoSA9zApxlM9XqIYeI05KshlbzZ Ag2un5i9qy8AhKmDu3cWSuy/4/7jfTIIupg0W0xQUB3PbV+ROKB9HQL8UgV5gsAF 5xt8BfJf3CJHiuCCQfp3TTJsElg8/g3djxYzmxh6tXVf6fp+iWXuxeQ/tgyJV1RQ yjAjeh3yzTWkU4dlDHlNMpOynKu8BngW7vxScWBHPix7tQWTc2Mmd3S4AaVn3L8M 46FnmLQpXG/tP+88+vwxmPaDbl7Vi8AyPuXiZwPZkmgyeUnoyDZKNyNnN4l3+HF/ ZaOjxhhTfyM/0Wthvzph31nTdkzQrjmSX0gyS66XNlrfbwnapQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHxFbC8bYzEDOh7KBsxTK6iEGw5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFiY2ZkNWQtYmY1Ni0z YzBmLTliY2MtYmU4NDMyYjc2Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYU4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkU0wy/fnOLyfUNel7pcc4nLJjjJY+xWCfzQu11XaS37744OWPP niYq2ehtiTUPKxXtZ2y6mQ0OYpO6Fffi9Q490wfSRoLlLHtzwrRPKYoZ+7oSPEsy rHuwDFGzOD44Z14XYnJGnQ20/BcocXS4VCV0hN1fk+lhQ0fHD3W+808JeXa130Iz u2fKw1h7NbVS4N7DMrMPSKF3mtFogedTJmXq+xOiQdAKwQJoOiLGvDmg1D+Sj/Uj FMsHnb1iWaH1OiYMVB8W1STZWYJLlhm6Vmivlt2WYInXHqduNRTjwwTHnJxlXFgi 3xzm/WDHfXOdHHS4D5Ih8SuKtw5STFNu6cU= -----END CERTIFICATE-----Generated at Sat Jun 6 15:51:28 2026 by rpki-client