$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0dba28b-701b-32b4-8e3c-138da19f14df.roa File: d0dba28b-701b-32b4-8e3c-138da19f14df.roa (raw, json) Hash identifier: 897WUrFCqr0yLHMR79KijuC+fhsdJeHWLWAUyvwOSZo= Subject key identifier: 31:B7:95:01:83:49:A3:06:D7:42:E1:E9:D2:57:A5:77:5C:40:98:85 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78B625A9714621AE9E1F170 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0dba28b-701b-32b4-8e3c-138da19f14df.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33659 IP address blocks: 2001:559:8192::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8b:62:5a:97:14:62:1a:e9:e1:f1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8d4c2060-1021-4af1-a9b0-192a9f0d1392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:f3:89:06:28:64:1b:66:b0:8e:01:85:2a: 2b:d0:8a:41:66:0a:8f:30:e1:40:e6:55:af:cf:ac: 79:ff:c2:fb:a9:50:8b:f8:c7:dc:9c:c0:e3:7e:a7: 04:3f:ba:4e:bf:63:79:67:0d:48:b2:66:14:5d:2d: 57:e3:be:0d:ea:67:7f:bf:94:7d:fe:32:40:c2:39: 4b:00:e3:e7:b7:db:07:12:a7:b8:bb:00:60:ff:89: fe:d6:84:8b:52:2c:fa:74:94:dd:0b:c7:bd:ab:14: 2c:12:51:d3:b3:04:b0:c5:aa:e0:2b:32:4e:d5:40: 2f:91:3f:31:31:1c:08:fd:e8:ac:44:b7:07:64:d3: 86:d0:bb:3b:5c:f1:f9:58:0c:aa:c8:b1:16:c5:da: 53:16:ea:82:33:56:5f:31:e6:48:43:93:20:3d:70: 13:8a:35:dd:c7:a6:68:54:11:58:32:d9:a0:b2:07: 44:72:a7:ca:9a:79:03:6c:30:3f:b8:43:b6:2a:04: dd:06:45:8c:91:e3:22:b1:b0:d7:1d:1b:80:f0:ac: 13:be:ab:2f:5a:3e:3c:95:fd:62:2b:9a:7d:c8:d1: 24:c2:7a:5d:fd:b3:65:3a:3d:a2:af:6c:ff:78:6c: e1:85:a8:8e:99:2a:74:c9:69:b4:53:8e:1a:d7:f7: 9c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B7:95:01:83:49:A3:06:D7:42:E1:E9:D2:57:A5:77:5C:40:98:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0dba28b-701b-32b4-8e3c-138da19f14df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8192::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:cf:7e:a7:f3:43:fa:fb:3e:89:c0:41:91:ac:bb:6c:20:74: 3a:09:9e:a5:75:36:9d:c9:c8:24:0d:eb:f0:9c:0f:e4:94:3d: 4d:65:8a:71:27:b4:ef:9e:6b:5f:29:30:cc:08:77:9f:54:86: e1:70:e8:a2:ca:fc:c4:58:cb:56:4d:11:75:fa:39:7c:9a:cd: ab:7e:7c:92:13:76:49:28:09:b2:07:b1:65:5f:f6:cd:83:d9: ee:30:0f:8c:c6:1f:cb:0a:df:e9:98:c4:65:00:ee:9f:06:a9: 0c:94:1c:9c:4c:e7:5e:c7:7b:f5:6c:ba:26:53:6b:06:0e:15: b6:e0:fa:76:c7:62:02:b4:fd:ba:d5:69:64:b1:70:11:30:3c: 7e:82:37:99:34:32:6e:1e:b0:78:a6:f7:40:43:c5:35:54:5e: b8:e0:97:64:56:8b:19:a7:b6:41:dc:95:73:aa:a0:d9:dc:9f: 71:48:58:c9:62:0b:33:bc:97:5a:64:97:10:82:75:13:69:54: cb:76:8a:a6:1b:a8:e5:90:56:e3:65:4d:d3:f7:42:ca:c0:3b: 6e:01:69:6e:14:b8:05:ea:92:ae:fe:d1:00:51:7a:30:2d:bf: 9c:5b:67:26:31:dd:f7:df:bd:18:be:2a:95:1f:09:a2:53:a1: 95:b0:f4:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6ni2JalxRiGunh8XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGQ0YzIwNjAtMTAyMS00YWYxLWE5YjAtMTkyYTlmMGQxMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXXziQYoZBtmsI4BhSor0IpBZgqPMOFA5lWv z6x5/8L7qVCL+MfcnMDjfqcEP7pOv2N5Zw1IsmYUXS1X474N6md/v5R9/jJAwjlL AOPnt9sHEqe4uwBg/4n+1oSLUiz6dJTdC8e9qxQsElHTswSwxargKzJO1UAvkT8x MRwI/eisRLcHZNOG0Ls7XPH5WAyqyLEWxdpTFuqCM1ZfMeZIQ5MgPXATijXdx6Zo VBFYMtmgsgdEcqfKmnkDbDA/uEO2KgTdBkWMkeMisbDXHRuA8KwTvqsvWj48lf1i K5p9yNEkwnpd/bNlOj2ir2z/eGzhhaiOmSp0yWm0U44a1/ec1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDG3lQGDSaMG10Lh6dJXpXdcQJiFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDBkYmEyOGItNzAxYi0z MmI0LThlM2MtMTM4ZGExOWYxNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYGS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHPfqfzQ/r7PonAQZGsu2wgdDoJnqV1Np3JyCQN6/CcD+SUPU1l inEntO+ea18pMMwId59UhuFw6KLK/MRYy1ZNEXX6OXyazat+fJITdkkoCbIHsWVf 9s2D2e4wD4zGH8sK3+mYxGUA7p8GqQyUHJxM517He/VsuiZTawYOFbbg+nbHYgK0 /brVaWSxcBEwPH6CN5k0Mm4esHim90BDxTVUXrjgl2RWixmntkHclXOqoNncn3FI WMliCzO8l1pklxCCdRNpVMt2iqYbqOWQVuNlTdP3QsrAO24BaW4UuAXqkq7+0QBR ejAtv5xbZyYx3fffvRi+KpUfCaJToZWw9J8= -----END CERTIFICATE-----Generated at Sat Sep 5 00:38:15 2026 by rpki-client