$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d5a7c43-52f0-3e2b-a9aa-a7f222f5cbc8.roa File: 3d5a7c43-52f0-3e2b-a9aa-a7f222f5cbc8.roa (raw, json) Hash identifier: KwDpj5nJojPCg31NQtg1IfquL0XSe7P5gRIAWYuLHTc= Subject key identifier: 2C:E9:2B:77:5F:4B:8B:0A:1D:44:64:3D:DB:98:04:23:AB:1E:FC:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F7E7DD69825DCC9DE7962E4A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d5a7c43-52f0-3e2b-a9aa-a7f222f5cbc8.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 36040 IP address blocks: 2001:559:0:72::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d6:98:25:dc:c9:de:79:62:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=99d8432d-6f09-4390-84a3-30e1724a4cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:fd:ea:0b:5b:98:c1:0a:4a:19:bf:e3:07: 68:68:4f:05:93:eb:8b:60:1d:95:c4:8b:b3:47:6c: 19:c7:fb:bf:19:5a:e5:f7:ef:41:d6:09:3d:b4:ee: 04:b5:76:c1:e0:f9:84:70:da:40:04:f9:8b:02:6c: 68:77:16:5c:0f:86:2f:f8:4c:93:8e:3e:86:c9:3c: e8:fa:1b:aa:56:d5:f3:ee:1d:ee:92:38:e7:5d:92: c7:49:5f:7b:dc:6a:c1:0a:80:41:01:10:29:a2:5d: 07:f5:a7:8a:40:fa:1a:a1:67:e7:b7:7d:3d:7d:3b: 24:32:2e:11:3a:07:0e:b6:1c:9d:a6:c5:ab:0f:aa: fe:f9:3d:b4:cc:ed:0d:9e:dd:ee:c4:6f:ce:2a:78: d1:39:85:54:f3:37:b4:dd:7f:ac:7e:b4:73:39:1c: eb:c6:d4:ac:43:24:07:18:7d:8d:98:0c:ad:a9:a0: dd:82:e2:24:14:f8:4e:51:45:a5:dd:a6:5e:56:d0: 4d:1f:cd:2e:46:2b:f3:46:15:f7:58:57:ac:c3:0e: 2d:9a:f7:06:5d:68:e5:71:08:f0:aa:5a:d7:1d:53: 44:52:fd:c4:6f:fe:6a:55:56:e0:fd:ab:e1:60:61: 1b:25:f5:fa:43:38:fb:73:bf:10:3a:79:d1:c3:63: 99:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E9:2B:77:5F:4B:8B:0A:1D:44:64:3D:DB:98:04:23:AB:1E:FC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d5a7c43-52f0-3e2b-a9aa-a7f222f5cbc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:0:72::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:dd:90:c8:56:a3:93:16:e9:ab:12:16:44:b8:56:6f:8b:f3: 60:65:77:a3:71:9d:bd:f6:6d:0a:b2:e1:4c:76:85:ee:57:88: 0d:07:1c:c1:56:bd:1a:43:3d:0d:0f:8e:82:d3:f9:2f:ff:f2: 18:7d:24:2a:80:48:9c:20:8a:08:2c:4d:4f:7a:4f:9e:69:30: 7b:88:3b:11:e2:b4:46:a7:fb:73:3f:43:e2:1e:25:1c:3d:f3: fa:d3:a3:53:48:79:ac:fc:d8:5c:7b:81:14:bf:13:67:42:a1: af:e9:4d:2b:3f:1b:99:c5:ff:bc:72:84:01:79:ae:9d:6a:4d: 10:96:37:1f:1b:da:48:f5:ed:b2:2a:71:09:4d:c6:16:7b:49: ad:a3:9d:e1:9a:91:93:a7:d7:6f:f2:32:cb:4e:6b:38:13:66: 04:69:ab:f0:78:d2:c8:73:57:c9:3b:cf:1f:cd:68:22:7d:23: 94:60:30:2f:22:73:4d:45:47:f3:31:ef:fd:dc:4b:e6:ab:92: 45:f1:b3:8b:74:41:5b:bf:11:03:6a:71:82:c7:2c:f9:fe:86: 17:b8:30:0a:87:d0:82:81:08:fd:40:50:8c:ba:3f:6d:3f:2e: 2c:a8:fe:62:8e:03:31:8b:f7:8d:d8:2f:d5:ea:d7:8b:5d:f3: 14:00:71:89 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE9+fdaYJdzJ3nli5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk OTlkODQzMmQtNmYwOS00MzkwLTg0YTMtMzBlMTcyNGE0Y2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls396gtbmMEKShm/4wdoaE8Fk+uLYB2VxIuz R2wZx/u/GVrl9+9B1gk9tO4EtXbB4PmEcNpABPmLAmxodxZcD4Yv+EyTjj6GyTzo +huqVtXz7h3ukjjnXZLHSV973GrBCoBBARApol0H9aeKQPoaoWfnt309fTskMi4R OgcOthydpsWrD6r++T20zO0Nnt3uxG/OKnjROYVU8ze03X+sfrRzORzrxtSsQyQH GH2NmAytqaDdguIkFPhOUUWl3aZeVtBNH80uRivzRhX3WFesww4tmvcGXWjlcQjw qlrXHVNEUv3Eb/5qVVbg/avhYGEbJfX6Qzj7c78QOnnRw2OZmwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCzpK3dfS4sKHURkPduYBCOrHvwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Q1YTdjNDMtNTJmMC0z ZTJiLWE5YWEtYTdmMjIyZjVjYmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA AHIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAVt2QyFajkxbpqxIWRLhWb4vzYGV3o3GdvfZtCrLhTHaF7leI DQccwVa9GkM9DQ+OgtP5L//yGH0kKoBInCCKCCxNT3pPnmkwe4g7EeK0Rqf7cz9D 4h4lHD3z+tOjU0h5rPzYXHuBFL8TZ0Khr+lNKz8bmcX/vHKEAXmunWpNEJY3Hxva SPXtsipxCU3GFntJraOd4ZqRk6fXb/Iyy05rOBNmBGmr8HjSyHNXyTvPH81oIn0j lGAwLyJzTUVH8zHv/dxL5quSRfGzi3RBW78RA2pxgscs+f6GF7gwCofQgoEI/UBQ jLo/bT8uLKj+Yo4DMYv3jdgv1erXi13zFABxiQ== -----END CERTIFICATE-----Generated at Sat Oct 24 08:28:26 2026 by rpki-client