$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1098d285-9c13-3df0-a481-29ba0e38a583.roa File: 1098d285-9c13-3df0-a481-29ba0e38a583.roa (raw, json) Hash identifier: A/3exzjp6tYxadwkzNYXvxwIs7YLBw9IPjS6XDYH67E= Subject key identifier: E0:CA:89:12:07:8A:38:47:82:A0:D7:EC:58:EE:D3:A1:82:19:78:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB85DFA33EE3E56CB81BC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1098d285-9c13-3df0-a481-29ba0e38a583.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:5d3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:5d:fa:33:ee:3e:56:cb:81:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=db4848ec-21a2-4135-a63c-505cebe6b278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:66:b6:39:b3:7d:28:25:a0:12:a6:47:2e:f3: 54:93:0d:da:4b:83:eb:35:58:22:8e:48:d9:3b:7d: 98:02:75:5c:c0:7d:57:0c:ff:0f:ea:72:a0:1a:8f: d7:07:dd:4b:73:54:e8:cd:2f:1b:9f:11:23:51:1f: 91:73:81:06:12:27:5f:e0:3a:da:95:b6:bc:b0:59: 59:51:f1:a4:6d:82:c3:51:bb:23:28:9f:5e:60:af: f4:e9:b3:5c:f7:c3:89:c7:1a:7c:c1:a5:02:6e:f7: 4c:9f:c0:06:05:4c:11:d3:95:65:19:3a:af:42:4e: cc:84:04:94:8b:97:77:df:c8:d2:d1:1e:27:86:9e: ad:f0:df:b6:6b:be:13:b0:89:1d:25:cb:cf:c4:81: cc:43:54:bf:c3:b9:bb:86:21:2c:20:cf:39:91:9a: a5:39:8f:7b:3c:c4:8f:af:3f:21:2e:b6:ae:10:85: b2:f2:4c:44:fd:ef:29:b9:6a:da:0a:c1:26:13:54: f3:11:88:8b:b9:e2:3d:c7:80:da:89:78:10:46:42: a2:9f:f2:a1:67:76:b4:8f:64:ce:2d:84:48:cc:6f: 64:ed:93:20:ef:4b:35:4a:27:d2:6e:af:aa:9c:ad: 7f:3c:be:05:c4:17:b5:48:91:4f:d8:48:56:c8:1a: 77:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:CA:89:12:07:8A:38:47:82:A0:D7:EC:58:EE:D3:A1:82:19:78:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1098d285-9c13-3df0-a481-29ba0e38a583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:5d3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a2:60:67:60:72:fd:da:ef:b1:0f:04:66:7d:40:7e:72:dc: 1e:2c:fe:b8:f0:c4:87:75:ec:ec:a8:92:a4:3d:39:34:94:ce: d7:07:14:8a:02:07:c9:89:1c:9b:2d:39:89:60:e8:d1:b7:ac: ca:b5:32:c5:36:48:93:9a:3f:49:9a:20:9e:66:ff:3e:4b:10: 63:0a:d3:05:5e:40:94:d8:28:3b:2b:6f:d9:37:f2:ef:a7:9a: 01:ee:0b:f7:c1:81:aa:f3:94:b5:bd:79:d3:fa:70:92:6a:f1: ad:65:f8:54:38:c5:e7:e8:cf:f1:64:d9:b7:a2:bd:6e:ac:a4: b2:41:2d:5c:68:dc:d2:8e:dc:04:aa:1e:b9:e3:36:fd:9e:20: c6:17:18:da:a4:97:3d:39:0b:93:ab:f2:41:e9:0c:3b:62:5e: e4:31:e1:2d:e6:c3:19:4c:79:2a:ee:3c:f6:d1:b1:9f:7c:60: 91:84:74:fe:8c:84:60:35:bf:e8:c8:3e:c3:c6:d2:2c:f6:b7: 16:8d:8a:56:31:85:b1:47:c6:fb:16:7c:ec:97:4e:2f:aa:bc: 6d:6b:4e:66:f4:d3:f9:2a:01:60:75:de:2e:ac:3e:da:24:3a: cb:29:5e:e9:2a:54:ef:cc:56:f8:1e:67:1f:44:c4:05:75:72: fc:a6:51:31 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uF36M+4+VsuBvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZGI0ODQ4ZWMtMjFhMi00MTM1LWE2M2MtNTA1Y2ViZTZiMjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2a2ObN9KCWgEqZHLvNUkw3aS4PrNVgijkjZ O32YAnVcwH1XDP8P6nKgGo/XB91Lc1TozS8bnxEjUR+Rc4EGEidf4Dralba8sFlZ UfGkbYLDUbsjKJ9eYK/06bNc98OJxxp8waUCbvdMn8AGBUwR05VlGTqvQk7MhASU i5d338jS0R4nhp6t8N+2a74TsIkdJcvPxIHMQ1S/w7m7hiEsIM85kZqlOY97PMSP rz8hLrauEIWy8kxE/e8puWraCsEmE1TzEYiLueI9x4DaiXgQRkKin/KhZ3a0j2TO LYRIzG9k7ZMg70s1SifSbq+qnK1/PL4FxBe1SJFP2EhWyBp3hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFODKiRIHijhHgqDX7Fju06GCGXjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTA5OGQyODUtOWMxMy0z ZGYwLWE0ODEtMjliYTBlMzhhNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQXT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABKiYGdgcv3a77EPBGZ9QH5y3B4s/rjwxId17OyokqQ9OTSUztcH FIoCB8mJHJstOYlg6NG3rMq1MsU2SJOaP0maIJ5m/z5LEGMK0wVeQJTYKDsrb9k3 8u+nmgHuC/fBgarzlLW9edP6cJJq8a1l+FQ4xefoz/Fk2beivW6spLJBLVxo3NKO 3ASqHrnjNv2eIMYXGNqklz05C5Or8kHpDDtiXuQx4S3mwxlMeSruPPbRsZ98YJGE dP6MhGA1v+jIPsPG0iz2txaNilYxhbFHxvsWfOyXTi+qvG1rTmb00/kqAWB13i6s PtokOsspXukqVO/MVvgeZx9ExAV1cvymUTE= -----END CERTIFICATE-----Generated at Mon Oct 20 07:10:10 2025 by rpki-client