$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19958a65-1e3d-311a-87ce-bb5aac6e0eff.roa File: 19958a65-1e3d-311a-87ce-bb5aac6e0eff.roa (raw, json) Hash identifier: dZ0UJLBMpeTMWX/EXS+rcdOSzY5sK6JjtOheiqLEmKo= Subject key identifier: 3E:07:F2:6B:F4:A6:C2:4C:27:BD:D7:33:A1:F2:40:B8:54:39:85:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB87DF610DECBC6D2C49840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19958a65-1e3d-311a-87ce-bb5aac6e0eff.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:559:c24f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:7d:f6:10:de:cb:c6:d2:c4:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=92a94aef-95e7-4b49-9fdf-eab34f0bc11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:59:18:a1:5c:1a:61:58:3c:c8:e8:ab:1e:05: ab:85:d3:bc:de:fc:02:36:d9:58:56:b4:ab:96:fd: be:57:bd:4b:9e:ec:f7:ba:7a:51:c9:83:a7:88:aa: ea:f0:de:aa:2f:94:58:08:61:fe:3b:ac:0a:9d:12: 84:08:2f:66:85:94:54:ac:bf:77:e7:40:c9:68:bc: 80:25:15:ad:0f:75:5e:39:5c:75:cc:61:19:30:7c: 41:ee:f1:42:b0:bb:b2:20:87:12:ff:bc:10:22:71: f6:bc:28:d1:88:d4:62:20:29:59:f3:b1:1d:96:29: bf:ac:af:ff:a4:09:af:f1:ff:30:a9:49:bc:eb:55: a7:7d:41:6c:61:dc:57:a0:74:c0:32:0d:8f:e4:1b: 2d:39:17:b5:53:aa:53:96:e5:c2:c2:cc:ca:b5:86: 48:5f:d2:a4:d9:27:e6:11:77:68:a1:9b:df:2f:d9: 00:d1:21:e0:9c:db:d0:34:45:70:db:ce:ed:a0:82: a5:2b:36:a3:36:6f:2c:4a:6b:53:ac:7b:b3:95:64: af:d7:42:fc:53:6d:5c:27:71:9d:7f:24:4b:07:10: b1:dc:8d:99:57:30:cb:f5:29:85:ab:07:b2:1d:e5: 3d:de:fb:c3:e6:0c:31:e9:df:50:f5:b5:80:d7:53: 26:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:07:F2:6B:F4:A6:C2:4C:27:BD:D7:33:A1:F2:40:B8:54:39:85:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19958a65-1e3d-311a-87ce-bb5aac6e0eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c24f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:11:f7:a4:78:81:66:12:59:7b:f6:4c:e9:9e:e5:1b:05:53: f5:e3:7e:44:60:4e:0d:f6:eb:b1:c0:aa:68:22:60:a8:9e:6a: 56:fc:74:96:e8:10:b2:e1:8f:d0:d5:a5:6a:e1:9f:bc:16:67: cd:23:5e:9f:a0:59:79:b2:09:e7:23:e5:cd:d8:d2:32:8e:66: 14:31:1f:dc:79:c1:25:9f:14:7a:c9:fd:5a:3a:26:45:49:0d: 56:f5:a2:76:f1:48:54:a8:b9:b0:f0:a5:76:f4:30:d4:cd:78: ca:ad:5c:e7:90:ee:a9:a7:be:ad:51:b1:67:b9:4c:4d:ce:21: 39:6d:cc:a7:64:9c:3d:e7:83:57:a1:ba:5e:5c:37:40:83:ce: ad:e4:3a:1c:ed:06:b9:2b:ed:68:cd:dd:1a:b5:48:c7:d7:e3: ce:78:33:22:f3:39:3d:87:02:42:4c:eb:27:ba:50:aa:34:65: 62:d4:9c:7a:04:91:67:5a:00:6b:c4:13:94:c9:11:8d:9b:0d: a0:e0:b4:1b:43:78:51:d4:c0:d9:48:70:29:29:c6:89:50:a7: 9d:dd:2b:9e:23:8a:3a:3b:34:f9:18:fb:6c:a1:7d:57:1b:69: d4:a8:27:4d:06:6b:a3:0f:6f:ec:96:68:c4:f4:e1:ea:48:4b: 91:7b:15:b6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uH32EN7LxtLEmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTJhOTRhZWYtOTVlNy00YjQ5LTlmZGYtZWFiMzRmMGJjMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1kYoVwaYVg8yOirHgWrhdO83vwCNtlYVrSr lv2+V71Lnuz3unpRyYOniKrq8N6qL5RYCGH+O6wKnRKECC9mhZRUrL9350DJaLyA JRWtD3VeOVx1zGEZMHxB7vFCsLuyIIcS/7wQInH2vCjRiNRiIClZ87Edlim/rK// pAmv8f8wqUm861WnfUFsYdxXoHTAMg2P5BstORe1U6pTluXCwszKtYZIX9Kk2Sfm EXdooZvfL9kA0SHgnNvQNEVw287toIKlKzajNm8sSmtTrHuzlWSv10L8U21cJ3Gd fyRLBxCx3I2ZVzDL9SmFqweyHeU93vvD5gwx6d9Q9bWA11Mm1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4H8mv0psJMJ73XM6HyQLhUOYVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTk5NThhNjUtMWUzZC0z MTFhLTg3Y2UtYmI1YWFjNmUwZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcJP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFwR96R4gWYSWXv2TOme5RsFU/XjfkRgTg3267HAqmgiYKiealb8 dJboELLhj9DVpWrhn7wWZ80jXp+gWXmyCecj5c3Y0jKOZhQxH9x5wSWfFHrJ/Vo6 JkVJDVb1onbxSFSoubDwpXb0MNTNeMqtXOeQ7qmnvq1RsWe5TE3OITltzKdknD3n g1ehul5cN0CDzq3kOhztBrkr7WjN3Rq1SMfX4854MyLzOT2HAkJM6ye6UKo0ZWLU nHoEkWdaAGvEE5TJEY2bDaDgtBtDeFHUwNlIcCkpxolQp53dK54jijo7NPkY+2yh fVcbadSoJ00Ga6MPb+yWaMT04epIS5F7FbY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:11:49 2025 by rpki-client