$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2af0aaae-0a6e-3519-bfbd-ef5339fb6a02.roa File: 2af0aaae-0a6e-3519-bfbd-ef5339fb6a02.roa (raw, json) Hash identifier: xR+triRUDM7AQS8hcRxAh1wcFmdQ/ku+EBLH4kfkpbo= Subject key identifier: 2B:8B:FB:F2:5E:60:2B:BD:DB:18:E8:59:9B:88:E7:BC:6F:91:C8:75 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7D4AE889958135D45D000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2af0aaae-0a6e-3519-bfbd-ef5339fb6a02.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:39c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:d4:ae:88:99:58:13:5d:45:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d4b95ba7-77f4-46fb-805f-a4a10040a909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:ce:da:29:3e:59:8d:10:ae:2d:c0:68:09: ca:78:7b:8d:1d:ae:96:62:06:42:9a:cd:38:70:d5: db:0c:f1:60:b1:d2:99:04:8a:ef:66:c1:45:13:16: 9c:c7:4c:74:e5:b7:55:2f:8c:22:d7:ac:24:a9:7a: 54:50:da:7e:01:c4:e0:78:11:cd:9e:80:c5:92:30: a7:33:4c:73:0f:9a:8e:8b:0e:00:32:96:30:72:60: 15:51:f8:82:64:82:fb:60:f7:62:1d:72:f0:a7:9b: a1:90:9f:36:a2:5a:0b:d1:b1:2e:26:d9:af:33:83: 20:99:ed:cb:5e:98:02:45:9c:ac:bc:d5:a0:1c:ce: 7d:c4:fb:d9:22:da:4f:ed:b3:4a:da:b1:06:7c:99: 60:62:56:16:3e:66:c1:5e:7e:fc:6e:c5:bf:6d:ba: 40:63:67:34:d4:a3:53:88:25:f0:ca:49:f1:8a:e2: 9f:ef:4e:f7:55:7d:a8:44:fc:29:2a:ad:88:23:08: 6f:32:d3:41:73:17:c4:d3:ea:3f:56:1b:59:c2:24: 74:99:32:c0:08:c5:ec:7a:fb:8b:dc:ee:39:4e:69: 6b:07:56:19:d4:94:f6:1c:d2:dd:b7:65:cd:54:46: 93:2e:4e:82:5a:e1:29:ab:08:af:7d:94:62:36:e3: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8B:FB:F2:5E:60:2B:BD:DB:18:E8:59:9B:88:E7:BC:6F:91:C8:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2af0aaae-0a6e-3519-bfbd-ef5339fb6a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:39c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:31:41:8f:87:e9:39:cd:8c:2d:41:67:51:36:77:75:c9:8f: 76:8e:8d:2c:76:56:96:4b:33:4d:8b:4c:11:50:5c:f9:ac:17: 72:08:ab:9f:1e:55:1a:5c:16:04:a1:0e:3e:90:a4:16:56:0b: 11:4a:17:66:aa:41:cf:55:fe:1e:14:a0:1d:d5:75:d1:cf:46: eb:78:72:99:f3:92:0c:c6:8d:a8:03:b8:46:b7:6d:25:00:90: f8:7f:7c:95:44:3a:a1:12:f5:d8:5a:26:13:b2:1b:4f:a5:b5: 74:cc:bc:ac:6d:13:10:ab:92:a5:cc:10:ea:d2:7e:76:4e:c6: 2b:99:10:cd:a2:fc:79:cb:99:88:21:76:71:e9:92:df:2e:03: f3:bb:c1:54:84:a7:0f:79:95:38:5a:af:a1:ed:49:78:91:20: 34:34:42:ce:6c:58:fd:ce:06:5a:bf:61:05:2b:5c:31:01:e6: 37:65:37:f1:4e:4c:bf:bf:2b:5f:d5:32:c9:73:6d:de:ff:89: 58:8b:48:c3:59:cc:ff:fa:d4:67:9f:0d:e4:4e:50:d0:8c:1c: f9:2d:5c:48:09:21:ec:ae:1a:00:15:0d:c7:78:3c:37:77:e2: fb:da:c3:49:1e:64:a3:47:08:e8:71:24:cc:03:f2:a0:ec:93: 1c:4f:dd:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t9SuiJlYE11F0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDRiOTViYTctNzdmNC00NmZiLTgwNWYtYTRhMTAwNDBhOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrXO2ik+WY0Qri3AaAnKeHuNHa6WYgZCms04 cNXbDPFgsdKZBIrvZsFFExacx0x05bdVL4wi16wkqXpUUNp+AcTgeBHNnoDFkjCn M0xzD5qOiw4AMpYwcmAVUfiCZIL7YPdiHXLwp5uhkJ82oloL0bEuJtmvM4Mgme3L XpgCRZysvNWgHM59xPvZItpP7bNK2rEGfJlgYlYWPmbBXn78bsW/bbpAY2c01KNT iCXwyknxiuKf7073VX2oRPwpKq2IIwhvMtNBcxfE0+o/VhtZwiR0mTLACMXsevuL 3O45TmlrB1YZ1JT2HNLdt2XNVEaTLk6CWuEpqwivfZRiNuNAhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCuL+/JeYCu92xjoWZuI57xvkch1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFmMGFhYWUtMGE2ZS0z NTE5LWJmYmQtZWY1MzM5ZmI2YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQOc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIxQY+H6TnNjC1BZ1E2d3XJj3aOjSx2VpZLM02LTBFQXPmsF3II q58eVRpcFgShDj6QpBZWCxFKF2aqQc9V/h4UoB3VddHPRut4cpnzkgzGjagDuEa3 bSUAkPh/fJVEOqES9dhaJhOyG0+ltXTMvKxtExCrkqXMEOrSfnZOxiuZEM2i/HnL mYghdnHpkt8uA/O7wVSEpw95lThar6HtSXiRIDQ0Qs5sWP3OBlq/YQUrXDEB5jdl N/FOTL+/K1/VMslzbd7/iViLSMNZzP/61GefDeROUNCMHPktXEgJIeyuGgAVDcd4 PDd34vvaw0keZKNHCOhxJMwD8qDskxxP3Qc= -----END CERTIFICATE-----Generated at Mon Oct 20 18:46:14 2025 by rpki-client