$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aec00a60-9e65-3a12-ada3-54bf3640c131.roa File: aec00a60-9e65-3a12-ada3-54bf3640c131.roa (raw, json) Hash identifier: tuYGwee6v5LoIqUqYMwqaE9tOEDCdZIYUJpSBV3RDyg= Subject key identifier: AC:46:B9:AD:2B:70:28:12:70:4F:A6:20:13:10:04:0C:46:AF:B9:6C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497A34EB2B7F5DA78EE81BC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aec00a60-9e65-3a12-ada3-54bf3640c131.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33657 IP address blocks: 2001:559:84de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:34:eb:2b:7f:5d:a7:8e:e8:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3a9c59f6-5e5d-47d3-ad12-38f5b7575eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:38:e2:2d:1f:e1:1a:5b:4e:16:cc:63:64:33: ba:fe:5e:0a:68:2e:a4:db:f3:a3:83:ef:78:f3:70: 69:bb:24:0e:b9:a7:0f:15:2c:21:20:f2:21:be:b3: 2b:61:20:cf:5b:11:c8:f5:1f:4f:fd:79:b8:fe:d6: 53:6c:e0:da:02:22:2d:0f:1a:17:5d:35:a6:65:2e: 5e:84:11:fb:18:3c:b6:b2:29:4b:f6:c0:bb:8d:a4: 3f:4e:42:f6:f5:7e:19:53:12:20:f1:4e:3d:03:47: 2a:32:cb:2f:60:bc:f5:ea:93:fc:d2:1c:15:af:41: 9c:bb:2f:7f:94:31:7c:a3:2e:91:82:7f:79:9f:43: 85:4e:a1:65:31:0f:00:8e:9e:88:cf:8e:f5:67:e3: 19:5b:c3:d3:2d:a0:4a:f6:3e:e4:71:03:6a:33:7c: a8:e1:73:31:b0:79:0e:06:c4:fc:15:b6:17:90:0f: ec:34:99:e7:b3:34:7b:ee:e9:3e:de:0b:67:43:f3: dc:73:e3:6b:c9:10:fa:c3:b4:56:ba:53:a6:e6:89: c0:b2:b9:14:f6:35:c6:c0:a3:fb:af:9e:78:f8:05: d3:7f:6d:06:76:03:e4:aa:b7:28:00:d7:4a:19:12: ef:2c:57:95:39:34:95:60:c7:3e:32:d6:ea:64:5d: f6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:46:B9:AD:2B:70:28:12:70:4F:A6:20:13:10:04:0C:46:AF:B9:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aec00a60-9e65-3a12-ada3-54bf3640c131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:84de::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:90:24:b0:94:a7:b9:32:ea:93:2f:03:aa:d8:3f:d1:a1:dc: ea:77:03:1d:83:2b:e4:28:7a:63:97:2a:63:25:27:86:c5:74: 24:71:5e:e6:f4:af:48:30:1e:09:81:99:a8:86:15:ff:60:be: cd:c4:a3:1e:44:cd:cb:83:45:0a:59:c3:01:a4:8a:0a:3c:d4: 6d:6e:68:5c:a7:40:a3:ff:80:1a:28:1d:89:b9:db:3a:38:25: da:19:bf:31:14:53:8c:6b:15:63:45:be:fa:4f:19:15:d4:2f: 82:7b:34:0c:b4:8b:7a:f4:3e:c0:2c:c7:34:ce:99:41:7b:b3: 73:dd:98:75:bf:60:6e:50:73:57:e0:12:f0:f0:d9:aa:d8:a5: 0d:37:2d:89:e9:d1:72:6e:eb:21:9a:06:56:3f:cc:2e:b6:c4: a3:e0:93:17:54:54:7a:48:25:23:0f:2d:71:29:7d:ec:f5:8f: 96:32:eb:ee:f3:c7:92:c4:b3:27:4d:97:d8:87:33:b7:38:d9: f0:bd:c5:db:d0:05:de:dc:e4:b1:82:26:90:f7:fd:9f:9c:7d: 07:50:47:3e:54:a7:ae:1b:e0:54:5b:8f:b5:12:3a:d5:5d:85: 88:a0:a8:32:dd:36:57:04:2f:13:c0:eb:c4:3b:90:8c:8f:e9: 26:89:e5:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JejTrK39dp47oG8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2E5YzU5ZjYtNWU1ZC00N2QzLWFkMTItMzhmNWI3NTc1ZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTjiLR/hGltOFsxjZDO6/l4KaC6k2/Ojg+94 83BpuyQOuacPFSwhIPIhvrMrYSDPWxHI9R9P/Xm4/tZTbODaAiItDxoXXTWmZS5e hBH7GDy2silL9sC7jaQ/TkL29X4ZUxIg8U49A0cqMssvYLz16pP80hwVr0Gcuy9/ lDF8oy6Rgn95n0OFTqFlMQ8Ajp6Iz471Z+MZW8PTLaBK9j7kcQNqM3yo4XMxsHkO BsT8FbYXkA/sNJnnszR77uk+3gtnQ/Pcc+NryRD6w7RWulOm5onAsrkU9jXGwKP7 r554+AXTf20GdgPkqrcoANdKGRLvLFeVOTSVYMc+MtbqZF32mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKxGua0rcCgScE+mIBMQBAxGr7lsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWVjMDBhNjAtOWU2NS0z YTEyLWFkYTMtNTRiZjM2NDBjMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYTe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD+QJLCUp7ky6pMvA6rYP9Gh3Op3Ax2DK+QoemOXKmMlJ4bFdCRx Xub0r0gwHgmBmaiGFf9gvs3Eox5EzcuDRQpZwwGkigo81G1uaFynQKP/gBooHYm5 2zo4JdoZvzEUU4xrFWNFvvpPGRXUL4J7NAy0i3r0PsAsxzTOmUF7s3PdmHW/YG5Q c1fgEvDw2arYpQ03LYnp0XJu6yGaBlY/zC62xKPgkxdUVHpIJSMPLXEpfez1j5Yy 6+7zx5LEsydNl9iHM7c42fC9xdvQBd7c5LGCJpD3/Z+cfQdQRz5Up64b4FRbj7US OtVdhYigqDLdNlcELxPA68Q7kIyP6SaJ5fI= -----END CERTIFICATE-----Generated at Thu Oct 22 02:17:05 2026 by rpki-client