$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e11d42e-4ff3-3e55-947e-ace49d16b389.roa File: 1e11d42e-4ff3-3e55-947e-ace49d16b389.roa (raw, json) Hash identifier: uPQgkVzl5Ppx5+CphDvWNIHBfCji8UyDLpN6/3q2GVY= Subject key identifier: C9:C2:DA:CD:7E:1B:49:F0:27:2B:B5:D5:F2:57:6A:B0:0C:D0:FC:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9BE9A7D920F760D5F3B40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e11d42e-4ff3-3e55-947e-ace49d16b389.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 2001:559:8122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:be:9a:7d:92:0f:76:0d:5f:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1665a703-2e7b-4ade-91a2-fbb9c5d16075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ee:26:6a:e6:13:cc:35:fb:92:77:a8:52:1a: 4b:67:30:02:92:c7:1b:dc:60:08:2f:bb:4d:8e:46: b9:2f:cf:40:c3:59:48:9c:99:75:d1:71:58:5f:78: de:43:c2:54:b1:b6:b8:25:0c:45:ea:4f:f5:2a:b2: 49:b1:15:76:b7:7f:0d:27:f0:97:91:93:71:a3:c5: 02:bb:d7:8f:7b:a6:f1:21:24:05:a1:1b:ea:02:dd: 5a:42:9c:77:0f:f4:fe:92:7b:7b:c8:65:5c:b3:54: 45:9c:91:5f:aa:5d:ee:29:b8:7f:cc:8e:f7:a6:bf: 34:16:b6:ad:74:e9:0c:99:a8:c3:e3:c6:c3:0c:9a: 22:8d:00:2b:ec:15:7c:1b:7e:e2:f6:cc:8b:fc:f3: 8b:30:96:a5:6e:1e:ce:e2:01:3b:a8:41:9e:11:24: ee:e2:db:e4:6e:11:20:17:f6:71:3f:c7:46:e1:f5: 10:28:54:8d:93:52:53:da:18:ab:26:02:39:b3:24: 3d:5d:51:0d:cd:67:7c:83:ee:cd:ed:07:c8:19:6a: 80:c8:21:9d:e3:62:cc:b4:6a:86:8e:76:22:f8:64: 86:fa:b6:20:b6:4b:1b:47:32:84:9c:1f:31:be:a5: cc:97:b7:ae:3f:88:e6:9b:17:63:96:cd:5e:4c:d1: 89:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C2:DA:CD:7E:1B:49:F0:27:2B:B5:D5:F2:57:6A:B0:0C:D0:FC:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e11d42e-4ff3-3e55-947e-ace49d16b389.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:43:35:f6:6f:70:cb:7f:fb:3a:5c:02:21:36:c1:b2:44:e6: 45:b0:c1:19:eb:77:12:0a:43:9b:f6:9d:bd:6a:80:2a:f4:29: ed:45:ee:8f:ea:39:f2:35:c0:65:19:e4:2a:76:6a:20:10:f4: 94:ff:41:ae:06:0f:b4:f3:54:a3:61:28:74:59:44:4b:4c:70: 05:21:d5:61:04:2d:89:bd:0a:c3:52:6b:09:23:f7:58:38:ab: e7:1b:90:f4:21:8c:d6:85:e3:21:bc:30:59:e3:3c:02:e4:c4: 10:43:1a:a9:8d:5f:ba:ec:84:ed:f1:1b:1e:c6:c6:99:f7:77: e2:c5:7f:fa:9a:7f:4f:d7:37:14:53:7a:9d:17:ac:8a:6b:04: 20:12:c4:c0:66:d6:cf:70:0c:e8:98:57:a2:1b:b3:bb:51:ab: b3:ee:7e:52:c9:5a:18:02:70:cf:82:20:a1:b9:9b:fa:34:2c: d1:a2:34:fd:35:f3:0c:aa:ba:cd:4b:c2:c5:3a:32:40:61:e3: 31:49:68:db:0f:36:03:40:ec:42:3a:5b:c2:2d:67:04:2b:e3: 0c:a1:fc:9a:3b:5f:55:fe:99:2c:74:88:f3:0b:63:ee:57:e5: af:67:c0:c5:a7:1d:51:5b:b3:ec:0f:13:d0:74:ed:23:79:56: bc:96:cb:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ub6afZIPdg1fO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTY2NWE3MDMtMmU3Yi00YWRlLTkxYTItZmJiOWM1ZDE2MDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge4mauYTzDX7kneoUhpLZzACkscb3GAIL7tN jka5L89Aw1lInJl10XFYX3jeQ8JUsba4JQxF6k/1KrJJsRV2t38NJ/CXkZNxo8UC u9ePe6bxISQFoRvqAt1aQpx3D/T+knt7yGVcs1RFnJFfql3uKbh/zI73pr80Frat dOkMmajD48bDDJoijQAr7BV8G37i9syL/POLMJalbh7O4gE7qEGeESTu4tvkbhEg F/ZxP8dG4fUQKFSNk1JT2hirJgI5syQ9XVENzWd8g+7N7QfIGWqAyCGd42LMtGqG jnYi+GSG+rYgtksbRzKEnB8xvqXMl7euP4jmmxdjls1eTNGJVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMnC2s1+G0nwJyu11fJXarAM0PxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWUxMWQ0MmUtNGZmMy0z ZTU1LTk0N2UtYWNlNDlkMTZiMzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADtDNfZvcMt/+zpcAiE2wbJE5kWwwRnrdxIKQ5v2nb1qgCr0Ke1F 7o/qOfI1wGUZ5Cp2aiAQ9JT/Qa4GD7TzVKNhKHRZREtMcAUh1WEELYm9CsNSawkj 91g4q+cbkPQhjNaF4yG8MFnjPALkxBBDGqmNX7rshO3xGx7Gxpn3d+LFf/qaf0/X NxRTep0XrIprBCASxMBm1s9wDOiYV6Ibs7tRq7PuflLJWhgCcM+CIKG5m/o0LNGi NP018wyqus1LwsU6MkBh4zFJaNsPNgNA7EI6W8ItZwQr4wyh/Jo7X1X+mSx0iPML Y+5X5a9nwMWnHVFbs+wPE9B07SN5VryWy20= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:34 2025 by rpki-client