$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3be98d58-fac8-3f8d-969a-7a52cef99578.roa File: 3be98d58-fac8-3f8d-969a-7a52cef99578.roa (raw, json) Hash identifier: K2pRnqGoniwk3ZWaAHjoBXrjsaGf4pRDOUJ0nVrheb4= Subject key identifier: 48:2F:CE:E1:18:2D:9B:97:50:54:EC:8D:5A:E9:13:0F:D8:B8:0D:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7A4F098B49E95B6DA4728500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3be98d58-fac8-3f8d-969a-7a52cef99578.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7015 IP address blocks: 2001:559:e035::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4f:09:8b:49:e9:5b:6d:a4:72:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=6b6e9d17-12a0-49c2-b519-33bfd2767ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:99:06:80:04:a5:9d:ad:72:df:f7:55:0a:04: cf:7b:b6:bc:66:8d:ad:86:1e:6d:0f:72:02:ba:ef: ea:bb:2b:31:25:41:13:47:05:79:01:ee:e1:a9:07: 3a:1a:ff:39:2e:8f:f7:27:e5:41:e5:30:5f:c2:05: d3:12:57:f1:da:92:e0:7a:e5:6e:6e:d3:67:c5:15: f9:af:d0:27:3e:ce:be:13:51:af:ab:90:32:ea:2c: cf:fc:81:8d:78:9a:9b:0b:3e:ba:03:ae:5d:6b:09: 5a:9e:75:dc:d0:75:05:40:2b:1c:d8:ac:59:d0:46: c1:f4:0d:1d:5c:d1:44:05:de:5f:f7:c2:52:e1:c1: 51:a2:9f:9b:73:82:89:ec:49:7c:28:88:99:48:cc: be:7e:30:b8:e2:ea:37:25:ba:44:05:d6:09:6d:f5: d3:70:26:c4:a6:21:db:8b:e0:b1:a7:83:c6:e5:55: 8a:f0:6c:1e:c0:da:d4:ee:15:28:3c:cf:b8:2d:0f: 2a:db:f6:cb:43:69:5f:d7:e6:a4:c0:e3:17:a6:fc: 90:51:c9:2f:a8:20:13:a2:56:35:e6:62:c3:1f:8b: 91:90:30:c6:73:ee:37:c1:4d:7d:1d:8b:a1:c1:e7: 4f:e8:40:39:12:3b:c9:e6:a7:db:4e:5e:38:08:9f: 0a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2F:CE:E1:18:2D:9B:97:50:54:EC:8D:5A:E9:13:0F:D8:B8:0D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3be98d58-fac8-3f8d-969a-7a52cef99578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:e035::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:35:aa:ee:ef:00:74:03:83:1d:79:ef:d9:ff:bd:26:90:a6: 68:19:18:6b:53:50:8e:f9:7d:10:18:30:d3:8c:79:3f:1c:9b: 94:de:b7:b3:69:15:bd:e2:d5:57:08:ea:1e:b7:41:67:3c:3f: 01:1d:42:d2:21:e9:68:6e:bd:a9:3c:4e:9a:74:4e:0c:81:26: 7b:96:36:c7:cd:d9:c8:7f:60:d5:d0:1f:a6:d7:5e:1f:11:1a: e4:96:eb:11:7b:e7:8a:e2:36:cc:1c:35:15:af:00:40:8e:22: cc:73:b3:36:c9:c7:71:3f:d4:26:ea:50:7c:67:98:83:2e:0e: 50:53:6d:69:18:42:44:27:59:1e:de:ec:82:a4:83:d7:91:97: 09:fa:77:d4:56:03:79:47:c8:66:c2:1b:0e:6a:c1:bb:69:c5: 04:17:46:5c:cf:cb:d1:ff:dd:6e:30:1d:d1:d0:68:ee:66:6d: 73:05:2c:72:41:d8:69:39:1a:f5:3e:32:5b:34:c0:88:79:4a: 65:77:7e:72:88:a2:45:3e:a4:8d:45:4b:a7:83:ea:1a:68:1c: 04:0b:8c:08:54:aa:70:b1:41:d8:d1:90:97:88:74:81:f1:42: 04:df:58:43:72:b3:6c:9d:24:f5:e2:89:79:33:97:9e:cd:ec: 89:e1:f1:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE96TwmLSelbbaRyhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk NmI2ZTlkMTctMTJhMC00OWMyLWI1MTktMzNiZmQyNzY3ZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5kGgASlna1y3/dVCgTPe7a8Zo2thh5tD3IC uu/quysxJUETRwV5Ae7hqQc6Gv85Lo/3J+VB5TBfwgXTElfx2pLgeuVubtNnxRX5 r9AnPs6+E1Gvq5Ay6izP/IGNeJqbCz66A65dawlannXc0HUFQCsc2KxZ0EbB9A0d XNFEBd5f98JS4cFRop+bc4KJ7El8KIiZSMy+fjC44uo3JbpEBdYJbfXTcCbEpiHb i+Cxp4PG5VWK8GwewNrU7hUoPM+4LQ8q2/bLQ2lf1+akwOMXpvyQUckvqCATolY1 5mLDH4uRkDDGc+43wU19HYuhwedP6EA5EjvJ5qfbTl44CJ8KywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEgvzuEYLZuXUFTsjVrpEw/YuA0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JlOThkNTgtZmFjOC0z ZjhkLTk2OWEtN2E1MmNlZjk5NTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEk1qu7vAHQDgx1579n/vSaQpmgZGGtTUI75fRAYMNOMeT8cm5Te t7NpFb3i1VcI6h63QWc8PwEdQtIh6Whuvak8Tpp0TgyBJnuWNsfN2ch/YNXQH6bX Xh8RGuSW6xF754riNswcNRWvAECOIsxzszbJx3E/1CbqUHxnmIMuDlBTbWkYQkQn WR7e7IKkg9eRlwn6d9RWA3lHyGbCGw5qwbtpxQQXRlzPy9H/3W4wHdHQaO5mbXMF LHJB2Gk5GvU+Mls0wIh5SmV3fnKIokU+pI1FS6eD6hpoHAQLjAhUqnCxQdjRkJeI dIHxQgTfWENys2ydJPXiiXkzl57N7Inh8cA= -----END CERTIFICATE-----Generated at Thu Nov 5 05:07:13 2026 by rpki-client