$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321faa08-bac2-3639-9540-a20d6ffa33da.roa File: 321faa08-bac2-3639-9540-a20d6ffa33da.roa (raw, json) Hash identifier: QgZoY60NEVRQcnO4Dqcy07Zxjck1ppChP2+6I7wLNDA= Subject key identifier: 09:8F:6E:52:E7:1C:C6:B8:F4:22:D4:C2:00:F8:25:3A:39:AE:49:01 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4979144B59AF74DB0ABABA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321faa08-bac2-3639-9540-a20d6ffa33da.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7015 IP address blocks: 2001:559:8069::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:79:14:4b:59:af:74:db:0a:ba:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d630e970-7ee9-42c1-b1e1-3a926ed639e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a4:96:ed:f3:40:fd:8e:80:0a:69:f9:b1:25: 7b:0c:e7:90:5c:f5:1d:dd:e4:9f:ed:1b:cb:c9:06: ed:ae:89:63:fb:d0:fd:c9:7d:0c:a0:e7:a0:2d:fd: 15:e0:ba:b0:3a:d4:a0:1f:81:7e:ca:ab:e1:c7:12: 0e:bf:fc:84:85:23:e9:02:e9:a7:32:c5:2e:12:57: 42:1d:5e:4c:98:c5:be:c4:fb:97:88:f8:b2:20:f3: ee:bd:e0:36:da:cc:58:95:fc:bf:34:f7:cb:34:75: c5:8a:fd:ad:36:b5:6a:e7:a9:e0:63:77:f4:35:32: ba:e8:74:aa:0b:54:51:f0:e5:66:28:d2:22:47:26: f1:42:49:93:d8:63:90:95:b5:01:03:cf:54:d2:5d: ca:87:8d:b5:c1:e2:08:92:4b:00:db:61:f5:98:e6: d2:19:38:ab:50:06:6c:46:95:5d:be:c5:bb:17:1e: 16:2a:d5:cd:71:08:5a:ea:3f:52:e3:0e:2f:ac:7c: 30:ef:cc:88:c7:b4:bc:b9:41:71:4d:e0:23:1a:04: c2:d3:41:59:1e:6e:5a:cb:5b:b8:47:e4:af:ef:22: d6:f8:a2:1e:1f:12:fb:a3:5f:0a:61:e0:e9:a8:8f: 62:0e:93:40:87:8c:e7:97:9f:5a:dc:09:6b:a8:1f: 04:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:8F:6E:52:E7:1C:C6:B8:F4:22:D4:C2:00:F8:25:3A:39:AE:49:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321faa08-bac2-3639-9540-a20d6ffa33da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8069::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:0c:f8:39:a8:97:2f:4f:ca:99:b5:8c:cb:e2:dd:89:96:18: cd:2f:60:8e:c7:0b:82:94:a8:ad:fe:65:29:13:65:da:a9:b2: 4d:c5:1e:69:f1:60:fa:83:a4:ed:c7:0d:0c:04:cb:12:cc:99: e3:d3:9e:63:7a:67:dd:1d:e8:a3:c8:98:8d:45:75:f5:e8:25: 9e:ed:7c:ec:f7:4c:cf:1b:20:76:99:56:85:2f:e5:5c:2e:70: 06:c4:5f:42:15:1d:48:c7:65:58:e4:30:03:fb:59:bc:11:84: 83:ac:ca:fc:71:e1:e9:a1:85:d5:c1:ed:26:57:1a:10:e1:bc: d2:98:f2:30:e9:f5:29:f2:66:ec:72:d2:3d:ed:6d:4f:ea:79: da:28:b1:f1:6c:fb:89:6a:8d:c5:60:91:80:d1:71:04:52:56: ab:a8:f8:f6:97:d9:3a:1c:f2:3f:ab:8f:e0:6e:07:9b:d0:13: 4f:bd:b4:3d:7c:d4:98:b5:b8:0a:f3:12:52:ca:54:64:cb:48: 95:8a:ba:1c:52:d2:d4:e0:01:c5:75:c6:91:58:60:ce:65:ef: f3:ed:6f:da:cd:b6:13:92:00:a8:30:43:29:20:23:3f:4a:9a: 2e:70:d4:82:3b:68:03:9e:bd:19:b5:70:6e:2f:83:cd:04:ab: e5:4d:0c:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JeRRLWa902wq6ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDYzMGU5NzAtN2VlOS00MmMxLWIxZTEtM2E5MjZlZDYzOWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qSW7fNA/Y6ACmn5sSV7DOeQXPUd3eSf7RvL yQbtrolj+9D9yX0MoOegLf0V4LqwOtSgH4F+yqvhxxIOv/yEhSPpAumnMsUuEldC HV5MmMW+xPuXiPiyIPPuveA22sxYlfy/NPfLNHXFiv2tNrVq56ngY3f0NTK66HSq C1RR8OVmKNIiRybxQkmT2GOQlbUBA89U0l3Kh421weIIkksA22H1mObSGTirUAZs RpVdvsW7Fx4WKtXNcQha6j9S4w4vrHww78yIx7S8uUFxTeAjGgTC00FZHm5ay1u4 R+Sv7yLW+KIeHxL7o18KYeDpqI9iDpNAh4znl59a3AlrqB8E4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAmPblLnHMa49CLUwgD4JTo5rkkBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzIxZmFhMDgtYmFjMi0z NjM5LTk1NDAtYTIwZDZmZmEzM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYBp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkM+Dmoly9Pypm1jMvi3YmWGM0vYI7HC4KUqK3+ZSkTZdqpsk3F HmnxYPqDpO3HDQwEyxLMmePTnmN6Z90d6KPImI1FdfXoJZ7tfOz3TM8bIHaZVoUv 5VwucAbEX0IVHUjHZVjkMAP7WbwRhIOsyvxx4emhhdXB7SZXGhDhvNKY8jDp9Sny Zuxy0j3tbU/qedoosfFs+4lqjcVgkYDRcQRSVquo+PaX2Toc8j+rj+BuB5vQE0+9 tD181Ji1uArzElLKVGTLSJWKuhxS0tTgAcV1xpFYYM5l7/Ptb9rNthOSAKgwQykg Iz9Kmi5w1II7aAOevRm1cG4vg80Eq+VNDIE= -----END CERTIFICATE-----Generated at Thu Nov 5 05:29:49 2026 by rpki-client