$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dcef6c3-52f8-3120-92e7-4f4eb49928e7.roa File: 1dcef6c3-52f8-3120-92e7-4f4eb49928e7.roa (raw, json) Hash identifier: iCwRjvotQ+M3gNm3OHlPNcYSE1QEpL26q4WRvVScln8= Subject key identifier: 80:48:10:68:EE:06:9A:87:B7:84:2E:E5:85:9A:AB:07:29:A8:3F:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8691A60B6269D226A1E60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dcef6c3-52f8-3120-92e7-4f4eb49928e7.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:c4e9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:69:1a:60:b6:26:9d:22:6a:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=97735dda-d4cc-4619-946d-9520f1fbe201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:ca:cf:96:67:ea:84:3b:71:11:fd:61:23: 39:b1:dc:5c:6c:1e:e9:d3:e4:21:dc:3f:81:34:d7: 6f:72:e3:c1:e2:8d:3e:3b:ba:c2:6d:d4:e0:e1:c7: 14:0d:ec:b0:c6:bd:78:78:97:d3:ba:90:34:53:f4: c4:d2:15:e8:67:68:15:01:cf:6b:12:1d:51:57:32: 8d:08:a4:f0:04:65:ae:4f:36:41:fe:87:a5:90:9b: 9c:b3:dd:78:a6:2b:78:3d:0f:7f:9a:09:b6:bc:ac: 3c:88:1b:e0:f9:91:5d:5c:95:58:fd:d7:82:f2:9e: fa:90:d4:a8:d5:0f:8f:2c:d7:a5:a7:a9:b7:f8:ad: 7c:ae:e0:21:2b:27:1e:81:90:62:b2:3e:ba:98:27: 9c:57:55:a9:7d:d0:a8:1e:ac:98:a7:f1:66:05:6d: dd:6d:df:ee:51:ca:62:84:65:7e:76:24:94:44:c9: 4c:59:12:24:ff:87:95:96:31:5b:f4:63:6e:0e:79: e4:c9:02:56:31:1c:80:43:98:c9:59:9f:c8:d8:93: 07:e3:aa:4d:88:d4:fc:2a:b6:42:de:42:53:fa:52: 15:e9:21:e4:07:90:57:ef:c2:7c:da:74:10:c8:98: 0a:90:77:ae:d1:7e:86:ea:8e:d0:79:98:b8:ba:33: 86:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:48:10:68:EE:06:9A:87:B7:84:2E:E5:85:9A:AB:07:29:A8:3F:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dcef6c3-52f8-3120-92e7-4f4eb49928e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c4e9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:b7:82:91:fc:60:8e:93:b2:c6:1c:64:d0:04:35:c5:96:44: cb:e0:29:31:93:06:f6:9d:ea:9f:3f:56:54:1c:6c:3a:f2:01: 59:34:03:e1:37:c7:47:36:0b:52:ee:7c:9a:d7:52:51:04:fb: ba:d2:c8:b8:d5:19:67:64:d8:d7:56:a0:b4:b8:8e:41:4e:20: 9e:48:e1:00:d1:ae:93:be:74:4e:fc:d6:27:eb:9d:ad:8d:4b: 06:41:19:1d:16:44:d6:7f:23:b6:56:95:f7:fd:88:42:5b:84: 94:0d:5e:49:c3:9f:e3:f5:64:3f:ce:87:d0:6e:82:99:af:75: c2:d2:e1:83:16:a6:4e:b3:7e:23:58:6b:fa:88:0c:ef:24:c1: eb:23:33:d2:77:db:b3:57:1e:d7:fd:03:b9:5d:59:bf:00:ab: 2e:5a:06:33:c7:7e:bf:15:74:d2:17:40:81:56:d3:29:a3:4a: 4e:27:72:29:22:fa:1b:9e:c1:63:77:65:74:c7:a3:f2:f0:02: 13:21:7c:24:fe:cc:46:e4:62:1d:40:e4:26:5a:6f:89:0d:1a: 59:2c:1f:e5:ba:35:81:9a:60:ca:48:92:20:29:52:83:5d:87: df:d7:b7:e8:eb:41:0b:08:b5:cd:29:9f:13:dc:39:a1:da:dd: 5b:b5:5a:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uGkaYLYmnSJqHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTc3MzVkZGEtZDRjYy00NjE5LTk0NmQtOTUyMGYxZmJlMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3HKz5Zn6oQ7cRH9YSM5sdxcbB7p0+Qh3D+B NNdvcuPB4o0+O7rCbdTg4ccUDeywxr14eJfTupA0U/TE0hXoZ2gVAc9rEh1RVzKN CKTwBGWuTzZB/oelkJucs914pit4PQ9/mgm2vKw8iBvg+ZFdXJVY/deC8p76kNSo 1Q+PLNelp6m3+K18ruAhKycegZBisj66mCecV1WpfdCoHqyYp/FmBW3dbd/uUcpi hGV+diSURMlMWRIk/4eVljFb9GNuDnnkyQJWMRyAQ5jJWZ/I2JMH46pNiNT8KrZC 3kJT+lIV6SHkB5BX78J82nQQyJgKkHeu0X6G6o7QeZi4ujOGrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIBIEGjuBpqHt4Qu5YWaqwcpqD9GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWRjZWY2YzMtNTJmOC0z MTIwLTkyZTctNGY0ZWI0OTkyOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcTp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMO3gpH8YI6TssYcZNAENcWWRMvgKTGTBvad6p8/VlQcbDryAVk0 A+E3x0c2C1LufJrXUlEE+7rSyLjVGWdk2NdWoLS4jkFOIJ5I4QDRrpO+dE781ifr na2NSwZBGR0WRNZ/I7ZWlff9iEJbhJQNXknDn+P1ZD/Oh9BugpmvdcLS4YMWpk6z fiNYa/qIDO8kwesjM9J327NXHtf9A7ldWb8Aqy5aBjPHfr8VdNIXQIFW0ymjSk4n ciki+huewWN3ZXTHo/LwAhMhfCT+zEbkYh1A5CZab4kNGlksH+W6NYGaYMpIkiAp UoNdh9/Xt+jrQQsItc0pnxPcOaHa3Vu1WtM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:06:40 2025 by rpki-client