$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28a4e820-181e-3f2b-88d7-bf33839436f2.roa File: 28a4e820-181e-3f2b-88d7-bf33839436f2.roa (raw, json) Hash identifier: KfcAbMqTWG0sSzAnyRaQK1WDtUrvhvqOgYkDRHER2IM= Subject key identifier: 15:BD:F8:82:76:C2:D4:A0:DE:7C:8F:DA:F1:C8:48:48:88:4E:5E:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9CFD95D74B2CC34304380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28a4e820-181e-3f2b-88d7-bf33839436f2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:83b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:cf:d9:5d:74:b2:cc:34:30:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=65a51095-ff0d-4db0-a6e2-2737d201d590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0f:21:cc:c6:9e:80:59:dc:c7:c0:5c:81:5d: e4:f2:f1:dd:45:29:eb:20:78:42:04:3a:9c:75:48: b0:cb:fa:a9:da:74:b8:06:b0:eb:1a:2e:2f:92:0d: 3c:77:94:62:ca:ff:a1:ed:aa:9b:71:62:7b:d2:8d: c6:d6:8f:61:a2:5a:d9:98:d6:8f:be:69:df:f4:2c: f3:5f:16:90:b2:87:a6:bd:58:21:c3:63:31:64:6e: 3a:7b:24:d3:c1:a5:6d:e2:71:4d:53:99:07:f7:89: 85:9c:4d:9d:25:da:e2:26:85:80:ed:f5:83:7e:fb: ff:fc:f7:40:b4:7b:90:9d:e4:d8:25:0c:44:a4:7d: 13:1b:36:06:ea:0e:74:53:1d:ab:0f:d9:30:cd:f2: c6:61:8a:e1:65:25:c2:85:25:4f:71:0b:0c:6e:fc: 07:0d:4b:2a:3d:e3:cf:9f:0f:33:2e:7f:e2:f5:2b: cd:d1:91:b3:76:b5:57:08:ca:ba:0e:9e:c4:4e:6b: 73:38:76:21:cc:6c:78:97:8a:cf:17:de:b1:67:04: e5:9c:1b:5e:82:12:91:8a:3c:ce:11:a0:51:32:ef: df:c1:71:5e:91:08:7a:73:e2:3f:28:42:f4:c1:a8: 73:8c:59:9f:8c:f5:c2:5c:82:8c:c2:34:2f:37:a7: f8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BD:F8:82:76:C2:D4:A0:DE:7C:8F:DA:F1:C8:48:48:88:4E:5E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28a4e820-181e-3f2b-88d7-bf33839436f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:83b2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d3:34:ae:2c:2f:e1:1d:7e:7c:5b:e3:aa:e6:8b:31:4b:6b: 0a:40:a1:88:d0:d8:8d:57:b6:ee:52:24:31:31:a4:a9:81:90: 99:29:fe:fa:60:c4:c0:49:d3:18:66:38:5d:61:75:19:33:e4: 78:4e:dc:b1:94:23:f4:89:67:3f:6f:84:3d:98:6c:9e:d5:2b: 0c:be:9d:2c:ce:61:44:90:05:df:b6:18:b3:37:98:d3:2e:ce: e6:f6:86:ef:9a:ac:89:d5:94:a3:e3:01:75:83:d3:df:b9:e4: 3f:e3:0b:b1:cc:12:6e:94:da:e7:2c:2f:69:1e:1a:f5:d0:4e: 1e:17:11:60:0c:c7:09:af:96:ec:59:bd:45:c6:69:ac:be:fa: b6:98:e6:32:03:ea:33:92:5a:c4:12:39:58:39:30:2c:07:7c: 96:65:f1:cb:40:a1:74:81:3d:25:d3:8a:d2:2d:ed:e6:0e:79: 61:c0:a2:72:da:dc:e4:b6:da:ed:04:06:c6:9f:6a:73:9c:13: e8:cf:a2:82:d8:87:40:72:52:59:d5:ec:f8:2f:7f:b5:47:b5: 8f:3f:d5:f4:fc:65:db:e6:13:fb:66:3c:40:55:8c:4a:51:35: b4:d6:06:22:28:76:70:5a:7c:91:67:97:1e:94:14:c2:82:03: 17:17:d6:8d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uc/ZXXSyzDQwQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjVhNTEwOTUtZmYwZC00ZGIwLWE2ZTItMjczN2QyMDFkNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ8hzMaegFncx8BcgV3k8vHdRSnrIHhCBDqc dUiwy/qp2nS4BrDrGi4vkg08d5Riyv+h7aqbcWJ70o3G1o9holrZmNaPvmnf9Czz XxaQsoemvVghw2MxZG46eyTTwaVt4nFNU5kH94mFnE2dJdriJoWA7fWDfvv//PdA tHuQneTYJQxEpH0TGzYG6g50Ux2rD9kwzfLGYYrhZSXChSVPcQsMbvwHDUsqPePP nw8zLn/i9SvN0ZGzdrVXCMq6Dp7ETmtzOHYhzGx4l4rPF96xZwTlnBteghKRijzO EaBRMu/fwXFekQh6c+I/KEL0wahzjFmfjPXCXIKMwjQvN6f4TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBW9+IJ2wtSg3nyP2vHISEiITl6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhhNGU4MjAtMTgxZS0z ZjJiLTg4ZDctYmYzMzgzOTQzNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYOy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJfTNK4sL+Edfnxb46rmizFLawpAoYjQ2I1Xtu5SJDExpKmBkJkp /vpgxMBJ0xhmOF1hdRkz5HhO3LGUI/SJZz9vhD2YbJ7VKwy+nSzOYUSQBd+2GLM3 mNMuzub2hu+arInVlKPjAXWD09+55D/jC7HMEm6U2ucsL2keGvXQTh4XEWAMxwmv luxZvUXGaay++raY5jID6jOSWsQSOVg5MCwHfJZl8ctAoXSBPSXTitIt7eYOeWHA onLa3OS22u0EBsafanOcE+jPooLYh0ByUlnV7Pgvf7VHtY8/1fT8ZdvmE/tmPEBV jEpRNbTWBiIodnBafJFnlx6UFMKCAxcX1o0= -----END CERTIFICATE-----Generated at Mon Oct 20 03:31:32 2025 by rpki-client