$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8c38faa-e5d7-3b56-b593-2c419fdd1371.roa File: b8c38faa-e5d7-3b56-b593-2c419fdd1371.roa (raw, json) Hash identifier: fO+BikI3OLMWN8O9qWnCC/Kaooxq/ZaQJH1Gi0svq44= Subject key identifier: 36:8B:9D:8D:32:80:B5:6A:DA:46:65:DF:53:F6:FB:79:9E:D5:5C:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78D88C66725EDDAE17D5FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8c38faa-e5d7-3b56-b593-2c419fdd1371.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7015 IP address blocks: 2001:559:2c9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8d:88:c6:67:25:ed:da:e1:7d:5f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=09a1935a-1d75-467b-b0ad-fa2799928648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a9:9c:e9:dd:49:5a:42:60:bf:2c:b8:20:fd: 92:32:99:76:57:c9:88:1f:0a:e8:26:e3:06:5a:9c: 2d:94:8a:71:fe:44:8a:9f:1e:26:46:95:ac:ab:a5: a6:ae:68:a4:39:dc:47:d4:84:db:0e:80:eb:a0:b4: b7:01:f9:45:d5:58:8e:ea:c5:af:d8:8e:d3:21:fc: 81:37:cc:8b:fa:3b:af:e5:47:4e:f9:79:f9:26:ab: 26:60:24:66:a0:28:9a:69:e5:67:56:72:ae:c0:d3: 4d:82:38:b4:3a:4a:ae:95:58:62:fe:36:5a:26:04: 2e:c8:13:07:ba:2d:07:6d:d8:86:8a:0b:45:f4:f3: 94:ee:a3:83:68:82:c7:1a:8a:7f:ee:64:f8:2f:78: 07:6b:c9:2a:b7:99:4d:08:cb:1f:8c:ed:89:95:5f: 8a:ce:b1:ee:03:e0:a3:1a:18:41:9f:9e:f5:5b:ec: 82:90:86:79:c4:0a:04:dc:06:89:20:54:c1:f2:4a: d8:b3:4f:31:1d:64:05:4b:04:32:14:f0:66:b9:85: 41:05:19:f6:50:0e:80:89:cd:fa:11:50:90:08:a2: aa:fd:cb:8d:2e:b7:64:e7:c6:30:42:0d:f6:84:c1: cd:9c:91:e9:ee:30:3b:f4:1f:c8:1e:49:7f:46:24: a6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8B:9D:8D:32:80:B5:6A:DA:46:65:DF:53:F6:FB:79:9E:D5:5C:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b8c38faa-e5d7-3b56-b593-2c419fdd1371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2c9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:68:76:19:50:f4:9d:d9:26:6c:2c:4f:72:7b:1c:36:e7:ab: 2c:d5:98:95:b4:b0:cb:80:e8:df:59:92:3e:03:86:dc:9f:18: 71:f5:bc:98:36:49:70:04:3d:5c:65:3e:ac:0b:b6:d6:16:f6: 5f:f1:c7:d7:29:b5:be:bb:41:01:9f:cc:44:c0:df:80:bc:06: 82:3a:03:71:f2:94:61:c8:01:18:4c:2f:ae:ec:f4:d8:30:73: 5d:fd:61:f8:3f:c7:8e:98:27:da:80:d1:d5:a2:92:bc:e8:27: a5:fc:48:80:a7:70:fe:82:ee:bb:d0:8f:7e:74:c2:2c:d0:db: 56:c6:70:0f:81:3a:c0:81:7e:34:34:34:c7:30:b6:43:e1:a5: 51:4d:13:d3:7a:bd:c3:67:ef:ca:7e:7c:f5:79:e5:83:47:91: db:d1:bb:37:5c:60:3d:d1:41:08:a7:4e:06:5f:f8:b2:61:cb: 5c:61:f1:c7:48:32:e2:7c:83:e1:c5:95:ad:cd:b2:d7:c4:95: 5c:3c:04:5e:7f:e9:0d:67:de:4c:9d:69:cf:65:26:3e:7b:c7: aa:31:a0:e6:0f:32:6c:c7:86:3b:d2:0a:c9:39:59:53:fa:a7: 86:f0:67:42:e6:7e:85:2a:55:e6:7e:51:af:7f:a8:98:61:dd: 74:e8:22:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njYjGZyXt2uF9X8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MDlhMTkzNWEtMWQ3NS00NjdiLWIwYWQtZmEyNzk5OTI4NjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqamc6d1JWkJgvyy4IP2SMpl2V8mIHwroJuMG WpwtlIpx/kSKnx4mRpWsq6WmrmikOdxH1ITbDoDroLS3AflF1ViO6sWv2I7TIfyB N8yL+juv5UdO+Xn5JqsmYCRmoCiaaeVnVnKuwNNNgji0OkqulVhi/jZaJgQuyBMH ui0HbdiGigtF9POU7qODaILHGop/7mT4L3gHa8kqt5lNCMsfjO2JlV+KzrHuA+Cj GhhBn571W+yCkIZ5xAoE3AaJIFTB8krYs08xHWQFSwQyFPBmuYVBBRn2UA6Aic36 EVCQCKKq/cuNLrdk58YwQg32hMHNnJHp7jA79B/IHkl/RiSmowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDaLnY0ygLVq2kZl31P2+3me1VyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjhjMzhmYWEtZTVkNy0z YjU2LWI1OTMtMmM0MTlmZGQxMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQLJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAClodhlQ9J3ZJmwsT3J7HDbnqyzVmJW0sMuA6N9Zkj4DhtyfGHH1 vJg2SXAEPVxlPqwLttYW9l/xx9cptb67QQGfzETA34C8BoI6A3HylGHIARhML67s 9Ngwc139Yfg/x46YJ9qA0dWikrzoJ6X8SICncP6C7rvQj350wizQ21bGcA+BOsCB fjQ0NMcwtkPhpVFNE9N6vcNn78p+fPV55YNHkdvRuzdcYD3RQQinTgZf+LJhy1xh 8cdIMuJ8g+HFla3NstfElVw8BF5/6Q1n3kydac9lJj57x6oxoOYPMmzHhjvSCsk5 WVP6p4bwZ0LmfoUqVeZ+Ua9/qJhh3XToIjg= -----END CERTIFICATE-----Generated at Thu Jul 30 03:02:59 2026 by rpki-client