$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ec94e69-e4fd-376f-a2e1-2b745a8e5aa1.roa File: 8ec94e69-e4fd-376f-a2e1-2b745a8e5aa1.roa (raw, json) Hash identifier: P9VJ2Hf7p8Che+Qy1Mug2Ip+53uUM09AXjLmYAHrctQ= Subject key identifier: CE:64:A8:E3:6E:69:52:65:0D:50:1D:D9:72:9F:98:E1:C0:E7:0F:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F49805E791AF59C1D4E85FE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ec94e69-e4fd-376f-a2e1-2b745a8e5aa1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7016 IP address blocks: 2001:559:578::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:80:5e:79:1a:f5:9c:1d:4e:85:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e37c9b19-6258-49b3-908c-1e0edad3caff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:34:80:f1:14:9c:a7:77:6d:3e:8f:f9:85:be: a2:b3:26:48:12:dd:db:61:47:3b:09:fc:62:c0:7a: f7:31:9c:8f:4f:96:03:2f:a2:44:a9:8b:fa:97:62: 0f:36:e1:e3:5e:dd:35:2b:83:b3:9b:f6:3c:4a:ec: 25:9a:db:e6:06:0b:6c:5f:67:27:01:91:f8:0b:f6: 30:65:db:77:5b:fd:08:8d:37:70:10:27:a4:c0:62: eb:ad:fc:d9:ff:b4:8e:54:44:cd:d0:04:43:0f:c5: 78:95:83:0c:f2:0c:27:d9:c3:18:9c:70:5e:0a:db: 92:fe:af:95:3c:3f:51:ad:35:e1:50:fd:78:64:61: 07:9a:cb:90:77:d3:4f:88:21:34:8b:33:fe:1b:7b: b8:d9:b0:ae:49:fc:20:d8:e7:ec:50:ca:56:66:b8: 31:80:9e:0d:69:50:56:4d:a2:02:2e:74:6b:6e:c0: 17:36:7b:8e:b4:c4:c6:2a:34:f9:36:e7:03:53:9e: 3a:7f:a0:cf:27:4c:0d:a2:e0:45:3b:3a:ce:83:ae: cd:aa:44:ba:12:73:2f:db:5a:6f:18:8a:38:1e:c6: 1f:5d:19:01:05:61:d8:88:96:eb:7e:f3:c7:ab:34: 0e:ce:39:20:60:6c:58:0a:c5:56:8b:58:fe:1d:a9: aa:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:64:A8:E3:6E:69:52:65:0D:50:1D:D9:72:9F:98:E1:C0:E7:0F:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8ec94e69-e4fd-376f-a2e1-2b745a8e5aa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:578::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c4:06:dc:ed:44:11:38:33:4b:d1:42:05:3b:9b:0c:ce:9b: c3:8b:88:f1:b6:2e:80:c4:fb:61:0f:3d:04:2a:01:13:f1:f8: 7a:7a:aa:c3:60:19:ec:85:a8:3c:2f:29:06:6d:95:a4:69:27: b9:df:bd:59:2c:95:c2:e8:9f:7e:07:69:ee:20:18:46:d0:13: 17:01:fd:9e:62:44:f8:ec:83:5a:14:b1:ff:eb:18:5b:d4:18: eb:87:98:c0:32:71:df:c7:d3:52:17:3a:6c:26:be:be:5c:90: e0:ff:4d:0c:c2:d5:0b:71:b8:fe:48:64:61:f7:82:c5:9b:ed: 65:88:eb:45:89:bb:da:ee:58:26:13:92:de:ee:3f:c3:9a:5c: 36:2b:50:68:af:fb:53:4e:dc:e0:31:3b:ad:90:49:1b:fc:27: b4:dc:7a:87:c1:18:33:50:e6:ed:06:c3:76:ff:02:41:bb:52: 2e:86:32:f9:8f:ab:e2:55:dd:bd:db:9c:45:89:e2:9a:10:c8: 53:49:81:3c:ed:58:67:bd:a7:69:5e:6c:25:40:f7:c9:3a:4c: 09:62:48:40:4a:99:70:24:c1:6a:1c:62:cd:f2:90:96:ef:ef: 1d:75:b4:3f:6c:d6:aa:2e:ab:0e:9b:be:c0:6a:84:58:88:1b: dc:4c:65:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgF55GvWcHU6F/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTM3YzliMTktNjI1OC00OWIzLTkwOGMtMWUwZWRhZDNjYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzSA8RScp3dtPo/5hb6isyZIEt3bYUc7Cfxi wHr3MZyPT5YDL6JEqYv6l2IPNuHjXt01K4Ozm/Y8SuwlmtvmBgtsX2cnAZH4C/Yw Zdt3W/0IjTdwECekwGLrrfzZ/7SOVETN0ARDD8V4lYMM8gwn2cMYnHBeCtuS/q+V PD9RrTXhUP14ZGEHmsuQd9NPiCE0izP+G3u42bCuSfwg2OfsUMpWZrgxgJ4NaVBW TaICLnRrbsAXNnuOtMTGKjT5NucDU546f6DPJ0wNouBFOzrOg67NqkS6EnMv21pv GIo4HsYfXRkBBWHYiJbrfvPHqzQOzjkgYGxYCsVWi1j+HamqRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM5kqONuaVJlDVAd2XKfmOHA5w9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGVjOTRlNjktZTRmZC0z NzZmLWEyZTEtMmI3NDVhOGU1YWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQV4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFTEBtztRBE4M0vRQgU7mwzOm8OLiPG2LoDE+2EPPQQqARPx+Hp6 qsNgGeyFqDwvKQZtlaRpJ7nfvVkslcLon34Hae4gGEbQExcB/Z5iRPjsg1oUsf/r GFvUGOuHmMAycd/H01IXOmwmvr5ckOD/TQzC1QtxuP5IZGH3gsWb7WWI60WJu9ru WCYTkt7uP8OaXDYrUGiv+1NO3OAxO62QSRv8J7TceofBGDNQ5u0Gw3b/AkG7Ui6G MvmPq+JV3b3bnEWJ4poQyFNJgTztWGe9p2lebCVA98k6TAliSEBKmXAkwWocYs3y kJbv7x11tD9s1qouqw6bvsBqhFiIG9xMZdQ= -----END CERTIFICATE-----Generated at Wed Oct 21 19:43:38 2026 by rpki-client