$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e2e0d7e-34b4-3e11-9911-c906d1695ab0.roa File: 8e2e0d7e-34b4-3e11-9911-c906d1695ab0.roa (raw, json) Hash identifier: 6EJ5QKoaNX7Zm2/dwjWau8RBtpfD/HSfXr1U8qXhrrI= Subject key identifier: A2:AC:EC:88:02:DA:DE:DA:22:52:40:9E:85:3C:49:B9:E0:D4:95:24 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F498106DD7F3D46B90BA5BF18 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e2e0d7e-34b4-3e11-9911-c906d1695ab0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33651 IP address blocks: 2001:559:c146::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:81:06:dd:7f:3d:46:b9:0b:a5:bf:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c19d6fc6-c62a-4850-92fc-bb3ba6837c62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2b:ae:c3:14:d1:45:96:ce:1d:2d:6b:9c:f6: fb:db:62:bc:36:79:30:e4:53:99:5d:21:24:8c:ff: 5a:82:87:b1:67:10:ae:a8:88:f3:90:d2:96:a4:55: 2d:00:66:0b:6f:31:08:ac:be:be:21:b5:ab:29:42: f7:a6:5c:37:7c:f1:6e:fd:58:35:df:5d:fd:63:16: f6:d7:53:33:94:ef:db:f2:c2:e2:91:03:16:58:3e: d1:c8:39:ac:13:13:06:dc:43:62:ac:cc:a6:f9:a2: a3:a8:9b:14:59:e1:f3:62:c9:aa:36:b5:72:3e:82: fd:1d:02:74:42:bc:55:2d:2e:9c:f1:3e:1d:a7:4c: 7e:00:f5:67:9e:f5:14:3c:94:ef:75:e4:42:56:09: 39:6a:c9:44:ae:f6:fb:dd:3c:12:4b:07:53:8f:bd: d0:35:ab:c8:d8:c8:65:42:63:ee:4f:ff:50:70:9f: 48:d0:c2:7a:29:6f:ab:4a:cb:19:e5:4e:ca:3c:67: 08:61:0d:65:ba:97:1f:1d:51:9a:b3:4a:5c:80:60: 58:84:85:96:1a:23:0c:90:24:3f:bc:40:bb:e7:f3: fa:6b:75:83:e7:0c:00:0a:50:c3:73:68:7f:af:08: 31:95:99:3f:4f:ae:cc:8f:a6:39:b6:88:98:8c:0f: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:AC:EC:88:02:DA:DE:DA:22:52:40:9E:85:3C:49:B9:E0:D4:95:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e2e0d7e-34b4-3e11-9911-c906d1695ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c146::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0c:e7:1a:78:9a:98:9d:3f:fb:f4:b1:b0:89:6e:af:29:b0: f5:5e:10:05:88:5a:98:33:67:eb:a4:94:69:4d:5b:d5:1e:98: aa:a2:9e:31:3b:af:64:99:cd:a7:69:45:4f:b7:51:b7:92:c1: 3b:64:e7:50:65:c3:26:da:bd:97:7f:73:22:3d:97:77:11:bc: fa:f8:22:e2:7c:40:16:38:6d:da:e4:1e:e6:f5:30:51:55:eb: 87:59:30:25:1a:37:e6:5a:9e:9c:87:b6:0d:41:d5:b3:ca:2c: 7a:62:f1:16:ed:14:19:5c:d7:0c:10:8f:4e:e7:8f:72:5b:ba: 78:6d:2a:10:dc:b8:7f:b3:c5:0b:bd:72:3c:9d:e8:d9:fd:b9: 3c:39:be:28:06:44:bb:49:2b:be:20:07:2f:9a:e1:ce:2b:8a: 63:65:78:33:ae:39:51:f9:59:06:94:fe:65:ad:8f:17:a0:30: 94:e9:72:93:aa:6a:5a:50:22:9e:b9:e4:e0:5d:12:fb:fe:fd: cf:d9:02:e4:9a:de:1b:ea:23:49:96:8f:fd:d7:8c:b6:88:c9: c8:d5:9e:68:b1:7c:59:6a:bf:df:19:1d:6d:97:72:a7:aa:a3: 1d:91:59:9a:43:a6:49:43:49:1a:06:1e:17:fb:51:bb:5a:75: dc:7e:67:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgQbdfz1GuQulvxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzE5ZDZmYzYtYzYyYS00ODUwLTkyZmMtYmIzYmE2ODM3YzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSuuwxTRRZbOHS1rnPb722K8Nnkw5FOZXSEk jP9agoexZxCuqIjzkNKWpFUtAGYLbzEIrL6+IbWrKUL3plw3fPFu/Vg13139Yxb2 11MzlO/b8sLikQMWWD7RyDmsExMG3ENirMym+aKjqJsUWeHzYsmqNrVyPoL9HQJ0 QrxVLS6c8T4dp0x+APVnnvUUPJTvdeRCVgk5aslErvb73TwSSwdTj73QNavI2Mhl QmPuT/9QcJ9I0MJ6KW+rSssZ5U7KPGcIYQ1lupcfHVGas0pcgGBYhIWWGiMMkCQ/ vEC75/P6a3WD5wwAClDDc2h/rwgxlZk/T67Mj6Y5toiYjA9w0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKKs7IgC2t7aIlJAnoU8Sbng1JUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGUyZTBkN2UtMzRiNC0z ZTExLTk5MTEtYzkwNmQxNjk1YWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcFG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABoM5xp4mpidP/v0sbCJbq8psPVeEAWIWpgzZ+uklGlNW9UemKqi njE7r2SZzadpRU+3UbeSwTtk51BlwybavZd/cyI9l3cRvPr4IuJ8QBY4bdrkHub1 MFFV64dZMCUaN+ZanpyHtg1B1bPKLHpi8RbtFBlc1wwQj07nj3JbunhtKhDcuH+z xQu9cjyd6Nn9uTw5vigGRLtJK74gBy+a4c4rimNleDOuOVH5WQaU/mWtjxegMJTp cpOqalpQIp655OBdEvv+/c/ZAuSa3hvqI0mWj/3XjLaIycjVnmixfFlqv98ZHW2X cqeqox2RWZpDpklDSRoGHhf7Ubtaddx+Z3I= -----END CERTIFICATE-----Generated at Tue Oct 20 12:21:30 2026 by rpki-client