$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c20d92d9-b9a8-384f-a127-60378b5ac815.roa File: c20d92d9-b9a8-384f-a127-60378b5ac815.roa (raw, json) Hash identifier: /cwRF+Ayza7iFEb1nb5rdg4GYCqB4cCUWcFMbTjuV9c= Subject key identifier: 3B:AB:5A:09:6C:B0:CC:6D:F6:9B:4B:4F:4C:A4:19:41:CB:76:AB:78 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4984AD4E46583AA9B8D41700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c20d92d9-b9a8-384f-a127-60378b5ac815.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7015 IP address blocks: 2001:559:e02d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:ad:4e:46:58:3a:a9:b8:d4:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=72de2535-16a6-4507-8d2b-a8c63006a0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:65:f4:d3:04:1f:80:8e:23:bc:42:44:14: 06:be:15:73:2f:72:f3:17:2d:04:5b:90:5f:38:fe: f9:b9:c9:e8:97:d4:38:c5:cb:32:a4:18:d0:ae:f8: 38:2e:da:25:5d:4e:98:ad:27:69:4d:9c:aa:4e:0b: 99:fb:4f:ac:ff:6b:ae:47:6e:93:ac:62:b3:1e:72: da:1f:e8:94:cc:4d:a7:68:9a:d9:c2:37:62:db:93: 0d:53:91:d5:1c:4e:4c:ec:73:92:d6:50:3e:f6:85: 3b:33:49:db:07:f0:9a:f6:79:a3:a1:9e:0b:37:18: ef:af:e0:51:1f:47:75:82:b7:9a:16:d0:9f:f9:f2: 7d:8e:0b:11:88:8d:f5:78:2b:15:4f:4e:0f:c3:17: b4:cd:f8:c7:9c:09:4d:a4:18:a6:65:76:26:06:1b: ab:7b:67:c6:13:b6:25:62:07:f0:95:f1:78:99:79: 2c:c7:61:12:96:bf:92:fe:e0:33:38:d8:c7:40:3f: e1:31:01:53:78:f7:00:42:e9:7b:e2:dd:25:0a:6e: 07:13:3f:60:86:95:64:fa:97:61:40:db:05:35:0a: ee:70:52:81:0c:2d:85:2b:24:73:ff:1e:a6:f3:8e: d0:c3:a6:00:f2:32:45:45:fd:e5:aa:79:28:c2:22: 22:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AB:5A:09:6C:B0:CC:6D:F6:9B:4B:4F:4C:A4:19:41:CB:76:AB:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c20d92d9-b9a8-384f-a127-60378b5ac815.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:e02d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:a3:ac:31:f7:78:b2:98:24:ba:ef:ad:6c:e5:e4:62:ed:9b: cf:46:27:c2:1e:f9:91:e4:4d:05:06:ce:7f:6d:20:bd:ab:b6: dc:49:61:a4:8d:e1:bf:61:ab:f2:da:3d:2e:ae:b7:fe:7e:99: 96:fc:6b:c9:d7:30:2d:5b:3a:6c:64:ec:cc:30:d8:e1:8c:c0: 9a:b8:f4:2a:a8:34:bd:0c:62:61:d7:10:29:0c:46:02:cf:5c: 66:0f:28:58:2f:99:c8:c6:67:bc:1b:a8:24:bb:5f:d1:51:1a: c4:e3:dc:31:d2:5b:a8:ee:1d:f7:86:36:9b:bc:45:22:a1:38: fa:61:ec:af:d7:35:90:59:a2:1d:64:ed:a5:b7:46:71:2d:d9: 14:d5:50:9e:eb:0f:6e:3c:9b:64:e9:da:32:c6:e1:6f:5f:c8: e6:ad:46:64:01:71:f1:57:35:68:35:f3:c6:9d:31:d5:f4:38: f6:5c:d9:e5:1f:2c:33:67:1b:01:99:04:fb:ad:b5:dd:bd:6d: 24:de:c1:2e:cc:d2:9f:a8:9b:c1:95:eb:3f:d6:9b:bf:58:fd: ff:0d:2e:46:98:c7:df:16:42:51:86:3d:9b:7c:5f:b2:38:fc: 3b:85:02:a2:72:b2:79:7f:10:67:7e:05:ea:bd:0f:cf:39:46: bf:b6:e9:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JhK1ORlg6qbjUFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzJkZTI1MzUtMTZhNi00NTA3LThkMmItYThjNjMwMDZhMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXdl9NMEH4COI7xCRBQGvhVzL3LzFy0EW5Bf OP75ucnol9Q4xcsypBjQrvg4LtolXU6YrSdpTZyqTguZ+0+s/2uuR26TrGKzHnLa H+iUzE2naJrZwjdi25MNU5HVHE5M7HOS1lA+9oU7M0nbB/Ca9nmjoZ4LNxjvr+BR H0d1greaFtCf+fJ9jgsRiI31eCsVT04Pwxe0zfjHnAlNpBimZXYmBhure2fGE7Yl YgfwlfF4mXksx2ESlr+S/uAzONjHQD/hMQFTePcAQul74t0lCm4HEz9ghpVk+pdh QNsFNQrucFKBDC2FKyRz/x6m847Qw6YA8jJFRf3lqnkowiIi3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDurWglssMxt9ptLT0ykGUHLdqt4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzIwZDkyZDktYjlhOC0z ODRmLWExMjctNjAzNzhiNWFjODE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeAt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADmjrDH3eLKYJLrvrWzl5GLtm89GJ8Ie+ZHkTQUGzn9tIL2rttxJ YaSN4b9hq/LaPS6ut/5+mZb8a8nXMC1bOmxk7Mww2OGMwJq49CqoNL0MYmHXECkM RgLPXGYPKFgvmcjGZ7wbqCS7X9FRGsTj3DHSW6juHfeGNpu8RSKhOPph7K/XNZBZ oh1k7aW3RnEt2RTVUJ7rD248m2Tp2jLG4W9fyOatRmQBcfFXNWg188adMdX0OPZc 2eUfLDNnGwGZBPuttd29bSTewS7M0p+om8GV6z/Wm79Y/f8NLkaYx98WQlGGPZt8 X7I4/DuFAqJysnl/EGd+Beq9D885Rr+26Uk= -----END CERTIFICATE-----Generated at Wed Nov 4 18:46:16 2026 by rpki-client