$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ac33b2b-aa58-3635-8c15-ac68a92ba977.roa File: 1ac33b2b-aa58-3635-8c15-ac68a92ba977.roa (raw, json) Hash identifier: bgKEixncaS1DfkyB/wtW11v4bU/oqaXM4ijZJHTlNxg= Subject key identifier: 0D:FC:A3:7C:6C:DC:88:F9:B8:6A:FB:DC:63:91:C5:BB:4A:7D:17:19 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB87AF78D62345F1417D700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ac33b2b-aa58-3635-8c15-ac68a92ba977.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:559:861a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:7a:f7:8d:62:34:5f:14:17:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1905c290-3e33-430b-83a0-238e2f4e744d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9c:40:84:3b:fc:94:66:be:6b:04:56:0e:80: 36:45:97:94:ae:8d:09:86:19:21:d3:53:c3:79:cf: 6a:ba:bf:e1:f3:0f:3e:52:d3:ed:95:76:59:17:b9: d1:30:0c:7b:79:d5:4c:4b:55:27:09:98:72:21:5e: 13:35:27:4c:ae:ef:4e:65:5c:1d:c0:a6:eb:fb:27: 7e:cd:31:55:9a:7b:c2:6a:3c:1d:e7:e4:b8:5f:ad: fa:2b:d7:b2:b5:4e:05:18:6d:fb:81:1b:7a:46:2a: 58:a8:50:2f:aa:fc:24:33:d8:5f:47:3e:49:03:eb: 84:e7:ca:52:c4:40:73:24:47:e9:1a:c9:3a:b7:cc: 3e:14:93:a3:57:dc:34:ac:cd:7d:f7:db:c9:09:88: 4a:50:0b:3c:e4:38:75:53:b0:25:29:11:5a:ed:5e: 75:d1:8d:72:8c:f2:ac:e4:f8:4a:59:ff:b4:13:27: f4:54:3c:00:b2:f1:64:00:6d:bf:4a:80:03:bd:f9: 66:88:22:c0:f4:4e:df:71:ef:c6:f9:6c:70:8c:4f: 9f:e7:3b:bb:6d:13:69:e9:31:c1:66:aa:5a:99:5c: fc:ed:58:74:03:9f:35:b2:58:1b:08:bd:f3:df:06: 80:74:43:7f:6c:eb:87:f1:8c:6d:94:d4:f7:1f:20: 80:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FC:A3:7C:6C:DC:88:F9:B8:6A:FB:DC:63:91:C5:BB:4A:7D:17:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ac33b2b-aa58-3635-8c15-ac68a92ba977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:861a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9e:36:79:5c:48:e4:70:a6:cc:d9:36:33:70:46:c7:3a:0c: 5a:e3:ff:06:89:1b:6b:59:bc:29:04:95:2c:df:72:a4:9c:86: 01:26:ed:88:bd:dc:2c:4b:a3:89:3c:c4:48:0c:ac:a8:30:cf: 8a:94:eb:75:d1:23:18:85:5e:f1:d9:8f:31:20:ff:19:e2:bb: 92:10:df:ac:fb:ef:24:11:bf:c8:9d:7c:25:8d:40:bd:e6:e0: 15:41:c4:7d:3f:91:39:29:13:67:a1:04:a6:b6:db:09:fa:21: cf:68:14:85:3e:32:6b:16:a9:9c:8e:fc:14:92:dd:d9:36:0f: 92:b4:de:44:24:06:52:70:ce:f0:3c:d7:19:7e:5f:2e:cb:21: f3:1b:ff:95:d5:77:02:49:aa:35:1d:f9:40:67:24:56:4b:42: 95:44:13:59:53:b3:1c:e2:b8:d3:84:1d:18:6e:6a:30:e5:98: 3a:45:cf:ae:e0:a2:21:c9:35:e8:7b:25:ea:dd:f8:e5:c6:0a: 8e:63:95:f1:28:b9:7b:25:fc:6c:b9:a0:49:13:8c:cb:1f:e7: d1:fd:e5:12:7b:d2:8f:01:7d:bf:e0:90:e3:bd:b2:21:27:dd: 10:e0:fb:6c:c7:27:6f:0a:4d:2d:76:17:91:07:96:24:d8:7f: 89:52:7a:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uHr3jWI0XxQX1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTkwNWMyOTAtM2UzMy00MzBiLTgzYTAtMjM4ZTJmNGU3NDRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJxAhDv8lGa+awRWDoA2RZeUro0Jhhkh01PD ec9qur/h8w8+UtPtlXZZF7nRMAx7edVMS1UnCZhyIV4TNSdMru9OZVwdwKbr+yd+ zTFVmnvCajwd5+S4X636K9eytU4FGG37gRt6RipYqFAvqvwkM9hfRz5JA+uE58pS xEBzJEfpGsk6t8w+FJOjV9w0rM1999vJCYhKUAs85Dh1U7AlKRFa7V510Y1yjPKs 5PhKWf+0Eyf0VDwAsvFkAG2/SoADvflmiCLA9E7fce/G+WxwjE+f5zu7bRNp6THB ZqpamVz87Vh0A581slgbCL3z3waAdEN/bOuH8YxtlNT3HyCApwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA38o3xs3Ij5uGr73GORxbtKfRcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFjMzNiMmItYWE1OC0z NjM1LThjMTUtYWM2OGE5MmJhOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYYa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAImeNnlcSORwpszZNjNwRsc6DFrj/waJG2tZvCkElSzfcqSchgEm 7Yi93CxLo4k8xEgMrKgwz4qU63XRIxiFXvHZjzEg/xniu5IQ36z77yQRv8idfCWN QL3m4BVBxH0/kTkpE2ehBKa22wn6Ic9oFIU+MmsWqZyO/BSS3dk2D5K03kQkBlJw zvA81xl+Xy7LIfMb/5XVdwJJqjUd+UBnJFZLQpVEE1lTsxziuNOEHRhuajDlmDpF z67goiHJNeh7Jerd+OXGCo5jlfEouXsl/Gy5oEkTjMsf59H95RJ70o8Bfb/gkOO9 siEn3RDg+2zHJ28KTS12F5EHliTYf4lSelg= -----END CERTIFICATE-----Generated at Mon Oct 20 00:12:38 2025 by rpki-client