$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc87d4e2-24a6-3830-be6a-0043c01cfaf2.roa File: bc87d4e2-24a6-3830-be6a-0043c01cfaf2.roa (raw, json) Hash identifier: Nq9vD2CIZKyG+Tj/uP+a20zC0hj9YY4MJnjYR6gczcY= Subject key identifier: AA:08:E5:5B:3E:3E:F2:E8:B6:3D:2E:51:01:44:FE:EC:DF:C3:1C:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F549D8ADDE661C150FD836700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc87d4e2-24a6-3830-be6a-0043c01cfaf2.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 33657 IP address blocks: 2001:559:a038::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8a:dd:e6:61:c1:50:fd:83:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=7999d24e-ae36-4fe8-b339-f9abd0e1f1ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e0:36:87:b1:3c:e0:e0:3a:b3:40:a1:ff:54: 89:2c:9a:35:4b:4c:4d:d1:57:ba:a2:fb:2e:6d:c8: d4:e5:49:30:35:44:26:ee:4a:c2:bb:70:fe:6d:2b: 18:2a:58:ac:4c:f5:0d:fb:26:f1:a4:6f:fd:18:64: 8b:ca:e4:d0:9c:1b:38:67:1c:57:cb:ec:9c:c6:94: 01:db:74:fe:52:8a:1e:19:56:59:05:3d:8d:b6:24: 3e:1a:76:47:44:d7:45:32:02:e0:59:19:79:c1:68: 8d:17:0d:cb:df:45:52:9f:a7:5a:46:ac:b3:79:89: 98:76:61:f4:60:12:66:31:2d:42:2f:fe:43:a4:aa: d9:d4:e3:06:74:6d:40:43:60:df:07:06:c4:7e:85: 8a:1e:a7:76:ca:4d:12:84:2b:c0:b6:bc:17:68:bb: a4:74:c1:75:f5:96:49:6f:51:bc:e8:49:85:c8:ab: 3d:07:d8:7e:34:f8:bf:5b:6f:25:d1:e3:f8:fc:8c: 7e:06:66:21:bb:80:91:22:8f:cf:a9:7f:3a:93:b3: d6:0b:56:79:45:7c:c1:d6:5d:69:00:af:98:9d:0a: 5e:2e:15:aa:3f:1a:69:78:ce:7b:99:62:82:0a:76: ef:c9:5b:7e:d4:43:6c:d0:4c:dd:a2:ea:47:4d:2f: be:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:08:E5:5B:3E:3E:F2:E8:B6:3D:2E:51:01:44:FE:EC:DF:C3:1C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc87d4e2-24a6-3830-be6a-0043c01cfaf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a038::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:28:cd:74:ab:ce:49:ea:d9:8c:9c:92:4a:e1:19:c8:4d:9b: 30:fd:17:83:b1:ba:d6:83:0e:1a:5c:4c:10:1b:c3:29:73:17: de:a9:3b:73:b3:03:5e:bf:6b:86:59:4e:68:6b:d5:98:e3:b6: 1e:28:a3:8c:12:78:23:83:7d:76:79:c6:d7:4f:4e:f2:58:69: f6:49:dd:0b:78:fc:84:6d:d7:77:26:54:c4:aa:7d:c1:08:36: 77:a6:58:25:cc:91:e2:80:94:fa:d7:a3:f1:cf:96:47:77:b7: a3:83:20:e3:59:f8:65:81:74:5b:c5:b2:89:83:6d:f2:3e:33: c6:f1:a6:ec:d1:a9:2b:e3:bc:94:5e:93:68:19:47:17:a7:83: a3:d8:59:7f:0e:86:6a:bf:e3:a6:52:ae:72:ea:9c:f8:0a:58: 91:90:73:1a:19:f1:20:a4:a0:9d:d6:7f:a8:1c:e2:75:09:2a: a5:ef:6e:15:2d:aa:d6:fe:c3:92:00:83:79:d5:08:8f:ea:4e: 8a:5a:50:ef:e0:d3:dd:3b:97:77:c1:53:29:8a:69:17:10:f6: a8:c6:60:6c:01:ca:84:54:88:c3:bf:16:05:01:6d:35:2f:f3: 3c:74:ad:80:93:2b:b0:d8:5b:37:76:c2:d2:07:50:17:00:dc: 0a:a6:88:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9UnYrd5mHBUP2DZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk Nzk5OWQyNGUtYWUzNi00ZmU4LWIzMzktZjlhYmQwZTFmMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eA2h7E84OA6s0Ch/1SJLJo1S0xN0Ve6ovsu bcjU5UkwNUQm7krCu3D+bSsYKlisTPUN+ybxpG/9GGSLyuTQnBs4ZxxXy+ycxpQB 23T+UooeGVZZBT2NtiQ+GnZHRNdFMgLgWRl5wWiNFw3L30VSn6daRqyzeYmYdmH0 YBJmMS1CL/5DpKrZ1OMGdG1AQ2DfBwbEfoWKHqd2yk0ShCvAtrwXaLukdMF19ZZJ b1G86EmFyKs9B9h+NPi/W28l0eP4/Ix+BmYhu4CRIo/PqX86k7PWC1Z5RXzB1l1p AK+YnQpeLhWqPxppeM57mWKCCnbvyVt+1ENs0EzdoupHTS++CwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKoI5Vs+PvLotj0uUQFE/uzfwxynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmM4N2Q0ZTItMjRhNi0z ODMwLWJlNmEtMDA0M2MwMWNmYWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaA4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJsozXSrzknq2YyckkrhGchNmzD9F4OxutaDDhpcTBAbwylzF96p O3OzA16/a4ZZTmhr1Zjjth4oo4wSeCODfXZ5xtdPTvJYafZJ3Qt4/IRt13cmVMSq fcEINnemWCXMkeKAlPrXo/HPlkd3t6ODIONZ+GWBdFvFsomDbfI+M8bxpuzRqSvj vJRek2gZRxeng6PYWX8Ohmq/46ZSrnLqnPgKWJGQcxoZ8SCkoJ3Wf6gc4nUJKqXv bhUtqtb+w5IAg3nVCI/qTopaUO/g0907l3fBUymKaRcQ9qjGYGwByoRUiMO/FgUB bTUv8zx0rYCTK7DYWzd2wtIHUBcA3AqmiBk= -----END CERTIFICATE-----Generated at Wed Oct 21 10:15:27 2026 by rpki-client