$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d581135d-d334-3a8e-a209-96b982e1b5fb.roa File: d581135d-d334-3a8e-a209-96b982e1b5fb.roa (raw, json) Hash identifier: Zx03UuFHY5ztZaqxZNfGkaCiowg+3X4PT+o1aA8XXlM= Subject key identifier: 8D:49:0B:6D:39:90:D1:B3:7D:95:7A:FD:E1:EA:30:40:9D:E7:46:7E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F4982A90DCDD2B128E4F5D280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d581135d-d334-3a8e-a209-96b982e1b5fb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 2001:559:84aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:a9:0d:cd:d2:b1:28:e4:f5:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b553be5a-e050-48bc-9a7f-d147545a4a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7a:75:84:d0:6f:b9:70:ca:39:86:bc:d9:22: d1:f5:c1:da:d9:23:ef:b6:d0:33:89:29:96:15:5a: d0:18:8e:25:e0:f1:6e:02:ad:7c:88:1f:76:5e:2c: 2d:e7:3c:48:86:16:5b:55:8b:b8:b9:40:0e:5f:83: e0:25:03:59:28:e7:76:94:e1:78:4c:cd:ea:4c:66: e4:80:9b:79:6c:ad:54:b8:cf:36:20:f7:9e:0a:2e: e5:51:ac:9a:97:34:3e:64:bd:50:e4:aa:b2:2c:83: e1:5e:58:e7:d2:3a:9e:b1:45:73:16:0a:0b:6d:f7: bc:d1:e5:b0:db:5a:4e:b0:f5:87:bc:25:72:f7:9d: cd:7f:d5:71:4c:38:a4:f3:69:0d:15:79:8a:79:36: 33:bb:e8:49:14:32:cd:d6:db:d8:ee:c1:e0:61:f8: 6c:1d:88:08:af:8c:25:29:a6:bd:16:98:bc:48:25: 57:83:d3:11:a1:4c:7c:d0:c5:87:cf:df:b7:94:84: 0f:9b:3c:6f:18:3a:47:53:d1:fc:66:df:83:bb:58: 2b:83:a3:8c:9b:7c:8d:ac:31:1b:e7:99:18:f6:b0: 35:84:7a:7c:e5:4f:9a:03:20:76:11:91:79:76:a4: 39:cb:81:f5:45:25:69:13:7c:e8:7e:0f:32:90:51: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:49:0B:6D:39:90:D1:B3:7D:95:7A:FD:E1:EA:30:40:9D:E7:46:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d581135d-d334-3a8e-a209-96b982e1b5fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:84aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:38:55:49:bf:a6:ed:78:5a:68:37:b6:57:b7:a3:69:a1:d6: 2a:d1:e7:66:ae:7f:01:bd:06:8b:c0:9b:b3:a2:51:86:87:5e: 9b:b6:32:3d:2c:9d:7f:40:dc:8c:59:4e:54:86:43:50:56:2a: 59:f5:33:fd:97:51:65:31:f8:28:f3:29:58:64:75:b9:ef:02: 4d:32:23:cc:57:d8:c1:b8:b7:b1:f4:9f:56:55:be:f5:0f:b4: 80:96:de:90:52:e1:bf:f1:ae:55:2d:50:ac:3d:b0:48:fc:67: 63:c9:47:c8:34:74:41:cc:47:df:1d:a8:4c:22:d7:f2:84:8e: 52:1b:be:79:b3:07:93:84:20:4a:bf:35:49:ca:58:d0:99:32: 2e:e4:b4:72:95:ea:db:f8:47:88:a9:ea:d6:78:c6:75:2b:19: f6:96:1c:4d:28:1a:a1:85:c7:e1:cc:7a:0d:50:38:75:20:c7: db:40:15:29:7f:a2:0b:68:c0:f3:b3:77:5a:b5:a0:4f:13:f2: e1:fa:d9:f8:02:e3:5d:bf:cb:a3:6a:fa:3c:44:fb:10:8a:4c: 97:38:61:03:d9:4a:80:77:ad:20:47:64:ae:43:c1:05:b8:cb: 8c:11:f7:e3:5c:48:b8:95:59:18:7a:e4:b0:b2:ef:49:5f:72: ce:09:c8:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JgqkNzdKxKOT10oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjU1M2JlNWEtZTA1MC00OGJjLTlhN2YtZDE0NzU0NWE0YTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXp1hNBvuXDKOYa82SLR9cHa2SPvttAziSmW FVrQGI4l4PFuAq18iB92Xiwt5zxIhhZbVYu4uUAOX4PgJQNZKOd2lOF4TM3qTGbk gJt5bK1UuM82IPeeCi7lUayalzQ+ZL1Q5KqyLIPhXljn0jqesUVzFgoLbfe80eWw 21pOsPWHvCVy953Nf9VxTDik82kNFXmKeTYzu+hJFDLN1tvY7sHgYfhsHYgIr4wl Kaa9Fpi8SCVXg9MRoUx80MWHz9+3lIQPmzxvGDpHU9H8Zt+Du1grg6OMm3yNrDEb 55kY9rA1hHp85U+aAyB2EZF5dqQ5y4H1RSVpE3zofg8ykFG16QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1JC205kNGzfZV6/eHqMECd50Z+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDU4MTEzNWQtZDMzNC0z YThlLWEyMDktOTZiOTgyZTFiNWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYSq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAw4VUm/pu14Wmg3tle3o2mh1irR52aufwG9BovAm7OiUYaHXpu2 Mj0snX9A3IxZTlSGQ1BWKln1M/2XUWUx+CjzKVhkdbnvAk0yI8xX2MG4t7H0n1ZV vvUPtICW3pBS4b/xrlUtUKw9sEj8Z2PJR8g0dEHMR98dqEwi1/KEjlIbvnmzB5OE IEq/NUnKWNCZMi7ktHKV6tv4R4ip6tZ4xnUrGfaWHE0oGqGFx+HMeg1QOHUgx9tA FSl/ogtowPOzd1q1oE8T8uH62fgC412/y6Nq+jxE+xCKTJc4YQPZSoB3rSBHZK5D wQW4y4wR9+NcSLiVWRh65LCy70lfcs4JyFM= -----END CERTIFICATE-----Generated at Tue Oct 20 02:53:14 2026 by rpki-client