$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43c3db4b-456b-30ea-93d6-eb3b6b80abd1.roa File: 43c3db4b-456b-30ea-93d6-eb3b6b80abd1.roa (raw, json) Hash identifier: xM1gFLh60iqPQzbx2zW0jPPp+WXOA8N17VGvSDUP8FA= Subject key identifier: B0:E1:F6:0B:40:7D:3C:E4:84:5B:F1:BA:18:81:6E:29:C7:24:47:28 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49802881221D4460B887CD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43c3db4b-456b-30ea-93d6-eb3b6b80abd1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22909 IP address blocks: 2001:559:5c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:28:81:22:1d:44:60:b8:87:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=964fce12-6c6b-49e3-be56-1bf30522d4f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c3:8a:a3:05:b4:dc:9a:42:b3:76:da:58:ee: 26:f9:b6:2a:9d:c5:67:8f:13:fd:74:87:8b:b4:51: df:eb:25:2b:04:f4:c3:d5:48:90:40:73:9e:09:fe: 0a:56:76:bd:7f:b7:e7:20:b4:ea:b7:a4:75:1e:e3: e4:01:af:49:9d:21:10:9c:31:5e:73:12:fe:1d:c4: b0:19:3c:66:ca:17:35:65:36:11:41:ca:e6:54:f1: c3:ab:42:c0:43:15:18:a3:a9:45:34:ec:2a:63:ae: 6b:6b:4f:a9:30:ec:6a:82:75:f4:c9:87:b7:3c:df: d2:b5:65:48:18:03:c1:27:b6:b7:6f:e1:12:9f:71: 04:e2:71:0c:4a:f5:24:37:e7:e0:23:d9:3a:a4:4e: 00:dc:ed:3c:16:c1:86:31:66:43:5c:84:f8:71:03: c0:fd:37:76:fe:26:18:86:7d:12:ff:3d:c0:39:ae: cc:5f:e5:5d:e4:57:c7:48:97:c6:9c:5e:9e:1d:aa: 6e:83:ee:f7:2e:55:25:bb:39:70:42:7c:6b:7c:20: 0a:93:5c:4f:8c:76:cf:47:2b:81:05:25:b6:a2:d4: d6:fb:37:84:50:8e:75:7e:2e:62:00:e7:ab:4b:50: a2:59:5a:9e:28:5b:0d:d2:6d:11:2b:93:fe:4d:be: 7f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E1:F6:0B:40:7D:3C:E4:84:5B:F1:BA:18:81:6E:29:C7:24:47:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43c3db4b-456b-30ea-93d6-eb3b6b80abd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:5c0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:24:c8:e5:c7:69:59:37:f6:12:4c:57:3a:47:99:a0:01:97: 89:58:0e:f5:45:c9:17:d8:6c:30:5c:12:d2:6f:a0:4c:95:e9: e4:d1:63:39:3c:50:87:f8:08:22:bf:27:a0:62:74:fe:b1:cc: fc:1b:6b:c1:9c:d6:93:70:72:71:ad:2e:b8:68:1f:33:48:94: 35:19:de:44:5b:8b:fa:4f:eb:24:13:1b:59:b7:3a:c6:a4:7f: 61:4e:79:25:5d:91:e4:0f:52:37:a4:74:83:30:02:2d:e9:68: a8:d3:e4:9c:5b:e5:7f:a3:15:1d:16:7d:e9:56:af:6a:bb:bd: 9b:e0:45:1d:78:77:12:95:d1:ff:51:d6:ba:3a:51:31:e6:c9: 8b:64:a3:e5:06:5b:29:32:c4:5d:09:b7:8a:92:61:62:d4:c2: e6:39:6e:80:47:58:90:86:e5:1e:53:a8:a1:c6:74:21:37:e9: ca:6c:fc:89:1c:ce:7e:5a:fe:03:08:d9:4e:80:da:6f:67:28: 5c:9a:33:83:c5:45:42:70:0e:f1:af:55:ac:ef:9e:dd:ac:98: c9:61:1d:92:5a:4f:19:a8:e4:0a:a3:7c:ac:4d:a3:82:97:a0: 2d:16:6c:e0:d5:8d:3f:57:5b:75:04:dc:a4:27:8b:5d:55:03: e9:cd:da:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgCiBIh1EYLiHzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTY0ZmNlMTItNmM2Yi00OWUzLWJlNTYtMWJmMzA1MjJkNGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8OKowW03JpCs3baWO4m+bYqncVnjxP9dIeL tFHf6yUrBPTD1UiQQHOeCf4KVna9f7fnILTqt6R1HuPkAa9JnSEQnDFecxL+HcSw GTxmyhc1ZTYRQcrmVPHDq0LAQxUYo6lFNOwqY65ra0+pMOxqgnX0yYe3PN/StWVI GAPBJ7a3b+ESn3EE4nEMSvUkN+fgI9k6pE4A3O08FsGGMWZDXIT4cQPA/Td2/iYY hn0S/z3AOa7MX+Vd5FfHSJfGnF6eHapug+73LlUluzlwQnxrfCAKk1xPjHbPRyuB BSW2otTW+zeEUI51fi5iAOerS1CiWVqeKFsN0m0RK5P+Tb5/rQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLDh9gtAfTzkhFvxuhiBbinHJEcoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNjM2RiNGItNDU2Yi0z MGVhLTkzZDYtZWIzYjZiODBhYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQXA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJkkyOXHaVk39hJMVzpHmaABl4lYDvVFyRfYbDBcEtJvoEyV6eTR Yzk8UIf4CCK/J6BidP6xzPwba8Gc1pNwcnGtLrhoHzNIlDUZ3kRbi/pP6yQTG1m3 Osakf2FOeSVdkeQPUjekdIMwAi3paKjT5Jxb5X+jFR0WfelWr2q7vZvgRR14dxKV 0f9R1ro6UTHmyYtko+UGWykyxF0Jt4qSYWLUwuY5boBHWJCG5R5TqKHGdCE36cps /Ikczn5a/gMI2U6A2m9nKFyaM4PFRUJwDvGvVazvnt2smMlhHZJaTxmo5AqjfKxN o4KXoC0WbODVjT9XW3UE3KQni11VA+nN2ko= -----END CERTIFICATE-----Generated at Thu Oct 22 09:53:24 2026 by rpki-client