$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12a32e1f-0be9-3e47-9ccd-6097ddfa4399.roa File: 12a32e1f-0be9-3e47-9ccd-6097ddfa4399.roa (raw, json) Hash identifier: forDTyNgZVjeyCFilzd5behjHD94Jj3JK/5TQw4nGu4= Subject key identifier: F6:31:00:03:02:58:A0:73:8C:3E:EB:5D:F2:03:79:96:65:7E:DA:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8409AB3CB92A15DE369C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12a32e1f-0be9-3e47-9ccd-6097ddfa4399.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:84ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:40:9a:b3:cb:92:a1:5d:e3:69:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=c851e6ae-5f55-44d0-ae2f-6ebbbee1ddfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b4:c5:55:11:dd:d3:fb:29:3b:f7:57:a3:a2: f7:22:59:3a:6c:22:c7:29:7a:84:d8:da:f7:1c:b1: a1:76:49:0f:f6:86:2a:d1:eb:78:36:47:fc:b6:cb: 5a:56:47:55:a4:db:aa:c8:1f:c0:88:cb:03:f3:fb: 4e:0b:34:5a:13:5c:6e:0a:34:bc:a3:ec:bc:a7:7f: b2:3a:df:97:17:08:83:56:0d:85:55:e2:e2:6c:d4: f8:cb:4e:10:b8:74:94:09:b5:4c:51:98:bf:29:8e: 5b:61:dd:e4:4e:68:44:98:18:28:77:b5:4d:76:ea: c0:4e:fb:87:50:32:bb:54:5f:85:c4:09:0b:7f:60: 7f:bd:82:49:ea:ec:e4:0a:c4:23:9d:20:b8:be:e2: d5:4e:60:67:aa:df:d8:f5:a5:61:04:fb:f5:b2:49: 4a:9e:5a:26:ce:37:fc:2a:9a:d9:a6:e7:61:15:54: 2f:5d:6c:ed:b3:74:c1:b4:fc:7c:3d:64:88:78:da: ce:1b:91:fe:7c:a0:86:47:7a:ee:80:8c:76:6a:74: e0:56:d4:f6:6a:75:d1:1f:c9:bd:5e:8f:e4:d4:4f: 56:c4:ae:b2:a0:ca:48:6b:98:d9:db:24:aa:80:ec: b2:2c:0c:83:ed:1b:b4:0e:39:c9:b3:a9:c7:11:af: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:31:00:03:02:58:A0:73:8C:3E:EB:5D:F2:03:79:96:65:7E:DA:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12a32e1f-0be9-3e47-9ccd-6097ddfa4399.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:84ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:20:1c:6d:2e:4a:91:4b:ee:98:9c:78:51:1a:f8:29:63:ee: 35:03:27:a9:59:3d:b4:fd:91:9f:9f:25:0a:b2:c6:f1:af:78: ed:fb:bd:7d:5f:9e:a2:33:1e:27:72:57:9b:de:f7:ac:a3:29: 7f:5a:8f:e5:7c:76:58:1a:6a:8b:2f:73:b0:88:39:39:30:ce: b0:8e:d9:59:f5:82:f6:d7:53:27:59:9a:7d:ae:25:16:8b:d6: 57:a4:26:f3:bb:c7:38:ec:4b:97:50:98:df:4e:ff:09:ee:09: c2:ea:80:f4:80:7b:55:c2:07:9e:5e:f5:0f:5f:19:4c:7c:ef: 98:0c:4d:2c:ec:0e:60:34:32:a4:4d:47:31:16:14:87:e9:ed: 66:c8:69:e3:8c:fc:d6:bd:66:e1:e9:61:fa:d0:3c:2f:a9:f8: f2:76:14:21:54:4f:bd:2c:61:70:aa:2e:2d:74:81:b8:bb:e2: 4d:87:ff:4e:84:0b:9a:50:ae:b9:a4:d0:8c:8e:3f:b5:13:0b: 67:21:0e:f0:81:6e:4a:45:9a:22:c4:e9:e2:c7:fc:33:c0:c4: d7:cb:fe:b5:eb:1d:cc:60:c8:d6:48:34:3f:ec:8c:71:73:7e: 2a:d3:2b:b4:b7:0c:34:22:f3:d6:fb:57:fc:0d:6c:f8:b9:41: 0c:6e:ab:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uECas8uSoV3jacAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Yzg1MWU2YWUtNWY1NS00NGQwLWFlMmYtNmViYmJlZTFkZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7TFVRHd0/spO/dXo6L3Ilk6bCLHKXqE2Nr3 HLGhdkkP9oYq0et4Nkf8tstaVkdVpNuqyB/AiMsD8/tOCzRaE1xuCjS8o+y8p3+y Ot+XFwiDVg2FVeLibNT4y04QuHSUCbVMUZi/KY5bYd3kTmhEmBgod7VNdurATvuH UDK7VF+FxAkLf2B/vYJJ6uzkCsQjnSC4vuLVTmBnqt/Y9aVhBPv1sklKnlomzjf8 KprZpudhFVQvXWzts3TBtPx8PWSIeNrOG5H+fKCGR3rugIx2anTgVtT2anXRH8m9 Xo/k1E9WxK6yoMpIa5jZ2ySqgOyyLAyD7Ru0DjnJs6nHEa/orQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPYxAAMCWKBzjD7rXfIDeZZlftqHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTJhMzJlMWYtMGJlOS0z ZTQ3LTljY2QtNjA5N2RkZmE0Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYTK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJUgHG0uSpFL7piceFEa+Clj7jUDJ6lZPbT9kZ+fJQqyxvGveO37 vX1fnqIzHidyV5ve96yjKX9aj+V8dlgaaosvc7CIOTkwzrCO2Vn1gvbXUydZmn2u JRaL1lekJvO7xzjsS5dQmN9O/wnuCcLqgPSAe1XCB55e9Q9fGUx875gMTSzsDmA0 MqRNRzEWFIfp7WbIaeOM/Na9ZuHpYfrQPC+p+PJ2FCFUT70sYXCqLi10gbi74k2H /06EC5pQrrmk0IyOP7UTC2chDvCBbkpFmiLE6eLH/DPAxNfL/rXrHcxgyNZIND/s jHFzfirTK7S3DDQi89b7V/wNbPi5QQxuq0U= -----END CERTIFICATE-----Generated at Mon Oct 20 12:03:53 2025 by rpki-client