$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c97eaa5-4ac0-35bc-9568-69f472364e7e.roa File: 3c97eaa5-4ac0-35bc-9568-69f472364e7e.roa (raw, json) Hash identifier: m/VMgCnMzGbgOUFOnjsCbRwAOT1mSo0WaI/9kljBptc= Subject key identifier: 42:6B:57:7A:00:32:32:72:5C:C3:33:16:53:5C:71:CD:CD:64:E5:1C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78EB2D06ABB9FB540CB0F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c97eaa5-4ac0-35bc-9568-69f472364e7e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33659 IP address blocks: 2001:559:785::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8e:b2:d0:6a:bb:9f:b5:40:cb:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1a0d0cd0-c33a-45be-99cf-3ebcd8993247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:73:b7:32:60:b7:40:64:37:77:1c:66:88:c5: 25:c9:50:dd:f5:e8:01:b8:18:80:db:c3:4f:85:47: a8:c0:13:a7:d7:b8:5a:1c:a7:c3:b8:e8:da:a9:ac: 1d:d9:df:e0:5b:66:fe:36:ea:71:fe:77:9d:f0:54: fc:3e:31:a1:97:53:89:b6:c6:00:d4:f7:62:b7:2d: 31:82:cf:52:19:42:72:2e:b2:a6:7a:ce:4f:79:db: 94:b3:70:ec:59:ce:46:e8:b8:f0:3f:1a:90:ae:c2: 54:d3:4d:9f:81:60:99:4a:55:c5:04:eb:9c:c6:62: bb:15:a2:03:b5:ad:1d:25:dc:cd:0a:4d:a2:c5:e9: d5:d3:21:61:e0:a8:c3:aa:f3:03:51:ac:9a:2c:b9: 91:5c:de:f3:d2:8b:b3:65:98:6f:4c:4d:7d:92:ff: 42:1b:b8:7d:8b:00:5c:7f:48:6c:14:85:bf:9a:56: 51:d0:9f:01:57:aa:70:4a:36:5a:8f:3f:8b:49:54: 14:e8:12:04:2a:43:94:25:d2:dd:3d:f4:9b:c7:7b: 9a:72:0a:42:69:09:a7:aa:9e:97:a6:c3:f2:9a:cc: f1:60:ba:6c:e3:89:72:a6:55:b6:d3:6c:ff:d2:b4: b6:ef:43:86:8b:65:d8:7f:51:f6:08:b7:87:44:2f: 6f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6B:57:7A:00:32:32:72:5C:C3:33:16:53:5C:71:CD:CD:64:E5:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c97eaa5-4ac0-35bc-9568-69f472364e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:785::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:b2:ce:c4:f6:8f:7a:0c:5e:bf:ad:9c:f0:74:cd:3e:bd:f6: 2b:c8:ea:c7:60:30:eb:80:cf:43:25:d6:e1:ec:29:24:ed:c7: c2:20:d1:cf:bb:60:cf:42:e4:64:fe:a1:34:11:ad:dd:f3:fa: 81:fa:e0:ca:48:cb:17:01:b8:d4:21:ce:d7:b7:71:84:da:d6: 1e:83:b2:e4:f9:6c:f3:21:36:d5:43:63:7b:32:cf:97:09:f3: ed:10:ca:99:46:c5:28:70:70:f0:66:07:80:b5:8d:cd:83:53: 37:07:1f:2c:6a:b0:28:c5:70:1e:f4:61:04:61:99:d1:6e:af: 29:45:1c:84:3f:d2:6c:a5:06:28:d8:73:0b:fb:97:f7:d7:8a: 04:3d:df:b8:12:dd:74:2a:70:ab:93:13:72:37:73:32:a1:c9: 8a:39:ed:c4:87:64:43:aa:e9:4a:31:9e:32:e0:5a:ba:29:98: 15:3c:6f:31:98:4f:3d:ed:93:6d:a7:62:3e:a0:8a:7e:4e:9e: 6b:13:89:b4:4e:5e:67:fa:b2:e7:86:9e:1e:ac:27:2e:28:a9: ad:63:d6:09:24:aa:bb:55:e3:02:ca:24:ba:1f:cf:fe:89:0c: a3:20:b7:e6:f7:3d:9e:cf:fc:f2:44:bf:43:fc:00:0a:36:d8: 85:ae:09:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njrLQaruftUDLDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWEwZDBjZDAtYzMzYS00NWJlLTk5Y2YtM2ViY2Q4OTkzMjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHO3MmC3QGQ3dxxmiMUlyVDd9egBuBiA28NP hUeowBOn17haHKfDuOjaqawd2d/gW2b+Nupx/ned8FT8PjGhl1OJtsYA1Pdity0x gs9SGUJyLrKmes5PeduUs3DsWc5G6LjwPxqQrsJU002fgWCZSlXFBOucxmK7FaID ta0dJdzNCk2ixenV0yFh4KjDqvMDUayaLLmRXN7z0ouzZZhvTE19kv9CG7h9iwBc f0hsFIW/mlZR0J8BV6pwSjZajz+LSVQU6BIEKkOUJdLdPfSbx3uacgpCaQmnqp6X psPymszxYLps44lyplW202z/0rS270OGi2XYf1H2CLeHRC9vTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEJrV3oAMjJyXMMzFlNccc3NZOUcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M5N2VhYTUtNGFjMC0z NWJjLTk1NjgtNjlmNDcyMzY0ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQeF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADyyzsT2j3oMXr+tnPB0zT699ivI6sdgMOuAz0Ml1uHsKSTtx8Ig 0c+7YM9C5GT+oTQRrd3z+oH64MpIyxcBuNQhzte3cYTa1h6DsuT5bPMhNtVDY3sy z5cJ8+0QyplGxShwcPBmB4C1jc2DUzcHHyxqsCjFcB70YQRhmdFurylFHIQ/0myl BijYcwv7l/fXigQ937gS3XQqcKuTE3I3czKhyYo57cSHZEOq6UoxnjLgWropmBU8 bzGYTz3tk22nYj6gin5OnmsTibROXmf6sueGnh6sJy4oqa1j1gkkqrtV4wLKJLof z/6JDKMgt+b3PZ7P/PJEv0P8AAo22IWuCfI= -----END CERTIFICATE-----Generated at Fri Sep 4 21:22:26 2026 by rpki-client