$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f590b52c-6375-3480-a97d-23ee6af38579.roa File: f590b52c-6375-3480-a97d-23ee6af38579.roa (raw, json) Hash identifier: SqJf+oEJDVdUX0fNgniB84/zBkGSCfM/2r1qqSBTAQk= Subject key identifier: 59:48:DA:CE:AA:D8:D8:63:0C:E2:16:1E:22:B6:29:20:C2:56:C6:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584F497A745FC600D78EBDFBCE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f590b52c-6375-3480-a97d-23ee6af38579.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33659 IP address blocks: 2001:559:c461::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:74:5f:c6:00:d7:8e:bd:fb:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ce207938-4427-41d9-a3bc-61ff9c63d9c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:98:57:e9:9f:85:37:8a:89:ae:6b:98:b4:b6: 03:ab:02:8c:d7:c5:b7:9b:13:0d:e9:eb:11:c1:60: ff:aa:e7:87:88:27:00:81:56:69:d8:80:10:70:d1: 13:36:0e:4b:f8:87:49:11:a8:d6:5c:fd:26:47:fd: 6d:d5:6e:37:b3:d8:64:97:7c:18:d9:a0:a9:2f:f8: fc:d9:06:54:d9:57:39:f4:cc:b1:b7:b0:ac:62:7a: 51:1a:ce:89:e4:7e:21:7f:d0:c8:0e:b2:d6:d3:43: 46:99:16:5c:85:8c:dd:ac:10:9d:ff:d5:fb:13:3d: 1c:4f:9a:54:d5:b5:bd:12:c6:09:96:f9:6a:a6:cd: f8:5d:cd:90:c6:1b:2c:41:1b:48:ed:58:6c:2c:4e: 13:e1:e7:c3:c7:ae:af:c2:a3:af:f2:57:94:72:3f: de:b0:dc:cd:00:2e:df:96:4b:40:48:fc:87:e2:da: ff:25:ff:84:6a:a9:e6:28:4a:88:23:3a:0a:b8:8f: 03:f8:2e:0a:d7:2f:bb:af:9e:85:f9:d1:8e:20:5d: 29:f7:f3:df:c5:36:96:1c:59:9b:0e:53:72:fe:79: 94:2a:6e:f6:fc:bf:d0:19:ee:1c:56:c6:c6:e5:3a: 33:6c:ec:c6:9b:40:a1:53:da:8e:b8:7f:ec:8b:91: 36:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:48:DA:CE:AA:D8:D8:63:0C:E2:16:1E:22:B6:29:20:C2:56:C6:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f590b52c-6375-3480-a97d-23ee6af38579.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c461::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:d3:9d:d0:a4:c4:1c:6e:5d:28:97:8e:66:09:2c:4f:1f:bf: f9:b8:a8:55:d1:46:41:f1:44:a7:7c:f2:53:31:dc:cd:ce:55: 6d:09:d2:a6:72:02:43:ac:d9:1d:f5:33:9a:3e:e6:a3:c5:c4: 39:e4:04:b1:36:9c:15:82:aa:b1:01:85:7c:65:d9:a5:f5:97: 9a:19:23:12:79:5f:79:53:26:93:cd:02:74:03:d3:f8:ec:07: f1:e4:64:12:35:82:73:1b:39:94:a1:5a:58:6f:0f:e1:ca:e8: c3:9e:93:d6:48:e9:c1:c6:f9:f3:9f:90:24:0d:18:59:cc:04: cb:84:91:fe:71:77:89:4f:82:06:98:b4:fe:b4:4a:a6:75:fc: 10:1a:df:5e:57:44:5f:21:31:d4:fd:6d:50:0b:75:aa:50:a9: ac:6e:2d:14:5f:eb:a4:58:9c:7a:2c:d3:86:f8:04:a0:ad:27: 68:0d:05:7b:8c:50:62:41:95:bf:74:8f:9e:f3:7c:3a:65:6c: d3:ef:10:e4:ba:f4:8d:ab:76:38:2e:be:6f:71:18:2e:25:28: 32:01:08:20:44:24:51:0f:8c:7b:7a:ac:7b:a7:c4:40:89:1b: 27:79:5a:62:89:bc:0d:71:73:ad:cd:23:25:0e:04:f2:cf:e1: 7b:4f:ae:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JenRfxgDXjr37zoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2UyMDc5MzgtNDQyNy00MWQ5LWEzYmMtNjFmZjljNjNkOWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5hX6Z+FN4qJrmuYtLYDqwKM18W3mxMN6esR wWD/queHiCcAgVZp2IAQcNETNg5L+IdJEajWXP0mR/1t1W43s9hkl3wY2aCpL/j8 2QZU2Vc59Myxt7CsYnpRGs6J5H4hf9DIDrLW00NGmRZchYzdrBCd/9X7Ez0cT5pU 1bW9EsYJlvlqps34Xc2QxhssQRtI7VhsLE4T4efDx66vwqOv8leUcj/esNzNAC7f lktASPyH4tr/Jf+EaqnmKEqIIzoKuI8D+C4K1y+7r56F+dGOIF0p9/PfxTaWHFmb DlNy/nmUKm72/L/QGe4cVsbG5TozbOzGm0ChU9qOuH/si5E2pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFlI2s6q2NhjDOIWHiK2KSDCVsbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjU5MGI1MmMtNjM3NS0z NDgwLWE5N2QtMjNlZTZhZjM4NTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcRh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALbTndCkxBxuXSiXjmYJLE8fv/m4qFXRRkHxRKd88lMx3M3OVW0J 0qZyAkOs2R31M5o+5qPFxDnkBLE2nBWCqrEBhXxl2aX1l5oZIxJ5X3lTJpPNAnQD 0/jsB/HkZBI1gnMbOZShWlhvD+HK6MOek9ZI6cHG+fOfkCQNGFnMBMuEkf5xd4lP ggaYtP60SqZ1/BAa315XRF8hMdT9bVALdapQqaxuLRRf66RYnHos04b4BKCtJ2gN BXuMUGJBlb90j57zfDplbNPvEOS69I2rdjguvm9xGC4lKDIBCCBEJFEPjHt6rHun xECJGyd5WmKJvA1xc63NIyUOBPLP4XtPrvQ= -----END CERTIFICATE-----Generated at Wed Oct 21 03:52:12 2026 by rpki-client