$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4faf3b36-7618-3c2e-8f15-128d9d5ed850.roa File: 4faf3b36-7618-3c2e-8f15-128d9d5ed850.roa (raw, json) Hash identifier: R+U1cslWv4ce1ZoTpfNRZZe9VrSBuIltUWHvf2C68uE= Subject key identifier: 81:89:F7:1F:37:80:A2:4A:BE:D9:DA:19:84:BF:41:A9:E9:47:82:B5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78D07E61C742CA0288AC7B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4faf3b36-7618-3c2e-8f15-128d9d5ed850.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33651 IP address blocks: 2001:559:541::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8d:07:e6:1c:74:2c:a0:28:8a:c7:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=bc9e4ac1-9fc2-4831-9829-c2c7154ea742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fc:59:45:c8:6a:8a:f2:ce:56:35:81:e7:5e: d1:85:21:b2:64:f6:bc:b7:2c:b7:82:ed:64:59:63: 55:23:e3:3e:92:94:3c:a3:cf:83:20:2e:e5:e1:9c: 3f:17:64:4f:0a:bd:5b:02:50:78:43:33:b7:94:84: a5:38:01:62:15:93:96:f7:c0:73:53:13:5c:4f:12: b7:11:ec:17:3c:d0:7f:3a:4f:1e:81:d0:7b:1b:bd: c5:a3:0c:57:f8:5f:40:1f:83:5a:6d:0b:bb:d6:41: 73:24:39:5e:2a:78:18:13:6d:f9:e5:f9:09:58:fb: 8a:a5:8b:14:f2:a0:f9:af:85:2f:0f:3f:1b:b3:e3: f9:35:84:be:8c:1a:9f:b9:00:5a:73:a7:32:2e:d8: 75:84:c7:eb:38:c0:c0:89:2f:76:69:6c:dc:33:70: 67:fa:60:e4:6e:5d:f0:18:cb:50:86:cd:48:b3:7f: 5b:45:f4:14:de:32:f0:d7:99:c8:2a:01:fe:9a:5a: 16:c1:18:bb:9e:8b:43:83:67:15:39:10:f4:bd:31: 40:bd:04:f0:e4:f3:f3:2f:46:35:18:1c:bd:76:1d: 20:77:ef:79:d3:aa:30:7c:16:83:cd:fc:d3:ff:15: 54:42:b9:29:a4:cf:4d:8b:a3:e0:83:89:01:f1:5c: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:89:F7:1F:37:80:A2:4A:BE:D9:DA:19:84:BF:41:A9:E9:47:82:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4faf3b36-7618-3c2e-8f15-128d9d5ed850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:541::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:75:de:98:0d:ff:60:1d:db:28:e9:43:d4:5a:22:7a:23:11: ae:5a:93:4b:23:36:9e:ca:8f:38:29:59:50:11:d8:a6:04:93: 57:b0:23:8e:70:c4:06:60:45:5e:58:43:20:72:b0:56:1d:0a: 2e:0a:98:dd:f5:7d:af:5a:1f:36:2a:88:68:db:02:b9:49:30: 36:b6:eb:e0:13:1a:c5:e0:dc:14:71:f7:6c:e7:71:9e:b2:40: fa:a0:9c:5c:8e:25:1d:df:83:c2:4d:4c:07:24:79:35:69:d4: 9c:5e:f0:f3:0e:02:52:88:c4:89:fb:e5:4d:3d:28:eb:42:70: 06:5b:a9:68:65:38:d4:fe:63:7e:82:5f:e9:18:ae:c2:41:21: 21:a9:6f:63:96:af:63:0e:ca:c3:f1:bf:b4:b1:1d:b9:2a:47: 83:22:5d:96:27:2b:e1:dd:96:95:27:1b:23:ca:53:13:d0:df: 4b:94:b0:f1:cd:8d:96:6d:fc:18:14:1c:59:06:9b:5b:b1:b8: 76:1a:17:3e:e3:c1:98:fd:e5:f2:f6:90:7a:da:56:97:1a:56: c0:51:90:72:05:00:d1:6a:08:4e:0c:3e:ab:cc:d9:2b:52:10: 36:c9:64:44:a7:ae:d9:d1:a5:92:63:fb:f2:e8:dd:c7:ee:59: 11:7f:dc:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njQfmHHQsoCiKx7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YmM5ZTRhYzEtOWZjMi00ODMxLTk4MjktYzJjNzE1NGVhNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPxZRchqivLOVjWB517RhSGyZPa8tyy3gu1k WWNVI+M+kpQ8o8+DIC7l4Zw/F2RPCr1bAlB4QzO3lISlOAFiFZOW98BzUxNcTxK3 EewXPNB/Ok8egdB7G73FowxX+F9AH4NabQu71kFzJDleKngYE2355fkJWPuKpYsU 8qD5r4UvDz8bs+P5NYS+jBqfuQBac6cyLth1hMfrOMDAiS92aWzcM3Bn+mDkbl3w GMtQhs1Is39bRfQU3jLw15nIKgH+mloWwRi7notDg2cVORD0vTFAvQTw5PPzL0Y1 GBy9dh0gd+9506owfBaDzfzT/xVUQrkppM9Ni6Pgg4kB8VylJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIGJ9x83gKJKvtnaGYS/QanpR4K1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGZhZjNiMzYtNzYxOC0z YzJlLThmMTUtMTI4ZDlkNWVkODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQVB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANl13pgN/2Ad2yjpQ9RaInojEa5ak0sjNp7KjzgpWVAR2KYEk1ew I45wxAZgRV5YQyBysFYdCi4KmN31fa9aHzYqiGjbArlJMDa26+ATGsXg3BRx92zn cZ6yQPqgnFyOJR3fg8JNTAckeTVp1Jxe8PMOAlKIxIn75U09KOtCcAZbqWhlONT+ Y36CX+kYrsJBISGpb2OWr2MOysPxv7SxHbkqR4MiXZYnK+HdlpUnGyPKUxPQ30uU sPHNjZZt/BgUHFkGm1uxuHYaFz7jwZj95fL2kHraVpcaVsBRkHIFANFqCE4MPqvM 2StSEDbJZESnrtnRpZJj+/Lo3cfuWRF/3P0= -----END CERTIFICATE-----Generated at Fri Sep 4 22:51:58 2026 by rpki-client