$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc6a5408-be0b-342a-9f24-4d66344e0d6f.roa File: bc6a5408-be0b-342a-9f24-4d66344e0d6f.roa (raw, json) Hash identifier: kuPq/VFUB9nRX5VvG7Coal6AthnZiE5VfjH67LT3BQo= Subject key identifier: BD:64:F0:AA:53:6F:3F:97:B3:1D:A2:94:7F:C9:85:A6:F4:27:63:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584DDE86CABF4480FCD75DE58980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc6a5408-be0b-342a-9f24-4d66344e0d6f.roa Signing time: Mon 18 May 2026 01:00:24 +0000 ROA not before: Mon 18 May 2026 01:00:24 +0000 ROA not after: Sun 16 Aug 2026 01:00:24 +0000 asID: 33659 IP address blocks: 2001:559:8421::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:de:86:ca:bf:44:80:fc:d7:5d:e5:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 18 01:00:24 2026 GMT Not After : Aug 16 01:00:24 2026 GMT Subject: CN=488e10a5-6d85-4bae-932f-20e80e13aa59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8b:f9:a7:65:1e:b0:b8:cd:9e:9c:bd:16:73: ba:75:3a:bb:05:47:64:4d:b8:ec:26:43:89:66:13: d7:03:18:93:c1:27:70:78:7d:34:c5:5f:b5:80:f0: e8:b2:34:72:5f:16:d5:c1:97:70:e7:1c:36:33:8e: 4a:f5:fe:27:d2:1e:fb:fd:f6:8c:3f:1b:bc:19:db: aa:50:0f:bf:cc:c0:bf:d4:21:52:60:e8:6c:6e:13: 74:29:51:e2:34:b4:34:76:6f:69:4e:0f:37:e2:93: 5e:62:8c:3e:07:0c:d0:8b:28:f4:7e:f4:dc:b5:db: a4:fb:8b:a5:e2:b5:05:c9:8f:85:ba:ce:8b:31:48: fa:09:86:d3:49:92:14:10:1a:ae:64:50:55:69:0c: b1:3a:0a:d8:0c:6c:89:44:e6:13:fc:50:66:d3:88: 57:c8:cf:36:5f:83:36:22:5b:55:2b:90:d3:b0:98: 93:c2:76:93:78:39:db:c3:bc:cd:e8:ea:33:83:80: 77:54:1d:e3:c8:fa:b6:b4:10:20:33:7f:a1:66:00: bf:55:c6:49:10:09:a0:79:6c:c9:f4:9c:56:0c:2e: 88:ed:b4:15:20:a3:ad:e8:01:3f:18:71:43:a7:72: 21:9b:d8:49:74:e8:90:55:42:85:91:52:ff:5f:ca: e4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:64:F0:AA:53:6F:3F:97:B3:1D:A2:94:7F:C9:85:A6:F4:27:63:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc6a5408-be0b-342a-9f24-4d66344e0d6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8421::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:7e:c2:95:c6:26:20:c4:e7:ba:2c:0e:cb:47:fa:a2:9f:5c: f6:f8:f8:46:6e:c1:d8:5b:05:a9:8d:e4:82:90:f6:6a:f0:d8: 3f:d5:26:e5:a3:d2:66:ea:76:58:db:14:c1:42:cf:9e:a2:bb: 0c:fa:41:00:09:53:19:85:23:0e:f0:c7:24:0c:ba:76:33:e2: da:2d:c3:62:54:1c:18:d5:5a:98:d9:39:45:d1:6c:d6:d2:9b: 5b:91:11:19:0c:7c:5a:60:79:73:39:bb:48:75:bd:9c:ad:c7: 8b:8c:3c:59:60:8e:c8:f9:2d:d5:08:28:32:f9:30:94:31:1c: 29:02:66:97:17:7a:3f:61:41:d9:79:9a:13:0c:39:42:2e:a6: 12:79:7f:91:4f:bb:63:fb:53:8f:6c:93:ec:21:07:63:fa:37: 6c:37:75:ad:aa:75:1d:2c:f7:f8:9d:3d:71:e8:d5:41:93:15: 2c:65:26:d2:eb:03:27:bb:06:d1:4d:84:5f:ed:08:cd:e9:15: e8:bd:ed:41:94:19:7e:eb:0a:49:a5:39:5e:db:d2:07:44:03: a0:73:6f:52:3b:39:b8:de:d1:de:21:d8:ab:8a:94:98:26:78: b5:88:37:1b:5d:70:8d:50:85:02:d2:57:e5:fe:d9:3b:df:8f: 99:37:8b:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE3ehsq/RID8113liYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk NDg4ZTEwYTUtNmQ4NS00YmFlLTkzMmYtMjBlODBlMTNhYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlov5p2UesLjNnpy9FnO6dTq7BUdkTbjsJkOJ ZhPXAxiTwSdweH00xV+1gPDosjRyXxbVwZdw5xw2M45K9f4n0h77/faMPxu8Gduq UA+/zMC/1CFSYOhsbhN0KVHiNLQ0dm9pTg834pNeYow+BwzQiyj0fvTctduk+4ul 4rUFyY+Fus6LMUj6CYbTSZIUEBquZFBVaQyxOgrYDGyJROYT/FBm04hXyM82X4M2 IltVK5DTsJiTwnaTeDnbw7zN6Oozg4B3VB3jyPq2tBAgM3+hZgC/VcZJEAmgeWzJ 9JxWDC6I7bQVIKOt6AE/GHFDp3Ihm9hJdOiQVUKFkVL/X8rkuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL1k8KpTbz+Xsx2ilH/Jhab0J2NjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmM2YTU0MDgtYmUwYi0z NDJhLTlmMjQtNGQ2NjM0NGUwZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYQh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMR+wpXGJiDE57osDstH+qKfXPb4+EZuwdhbBamN5IKQ9mrw2D/V JuWj0mbqdljbFMFCz56iuwz6QQAJUxmFIw7wxyQMunYz4totw2JUHBjVWpjZOUXR bNbSm1uRERkMfFpgeXM5u0h1vZytx4uMPFlgjsj5LdUIKDL5MJQxHCkCZpcXej9h Qdl5mhMMOUIuphJ5f5FPu2P7U49sk+whB2P6N2w3da2qdR0s9/idPXHo1UGTFSxl JtLrAye7BtFNhF/tCM3pFei97UGUGX7rCkmlOV7b0gdEA6Bzb1I7Obje0d4h2KuK lJgmeLWINxtdcI1QhQLSV+X+2Tvfj5k3i/k= -----END CERTIFICATE-----Generated at Sat Jun 6 11:09:22 2026 by rpki-client