$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cfdb6ad-76e6-3d26-a1e3-9850b74dcac5.roa File: 2cfdb6ad-76e6-3d26-a1e3-9850b74dcac5.roa (raw, json) Hash identifier: B1eYsqDhBbLfueNv3Nas2+D3iexcSe+GqO3dLNOddUY= Subject key identifier: 43:45:27:66:69:B1:3E:0A:BA:B3:EC:3B:00:71:85:5A:CF:0F:11:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB86782B99375D8D8FF1A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cfdb6ad-76e6-3d26-a1e3-9850b74dcac5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:c3b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:67:82:b9:93:75:d8:d8:ff:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5d478130-defe-4b26-b804-219d54eda32d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ac:40:ca:b4:9b:56:b7:26:92:0e:52:48:90: 05:d3:af:de:19:4e:ed:fb:63:d2:8a:45:72:9b:da: 16:6f:93:72:cb:2d:0f:07:ac:65:53:35:b2:88:b7: 91:a9:bd:44:8f:be:48:be:c2:a5:dc:3e:ac:79:53: 75:b9:5a:27:9b:de:1d:21:bc:05:3c:bd:d5:fb:22: a4:9d:5d:f9:30:6a:c8:c5:07:a6:75:c6:68:da:4c: b2:e3:df:f0:9b:87:13:ad:a8:05:fb:0e:82:2b:e1: a7:f1:ca:6a:56:9a:6c:bf:ee:27:97:15:7c:ee:12: e1:b5:e2:af:de:43:e0:b6:d6:78:9b:1c:4b:11:88: 63:6b:50:13:1a:6a:09:bf:ec:a5:ae:98:15:21:7c: 97:56:97:ff:da:52:b3:7e:e8:86:97:7e:51:cd:52: 54:37:89:ac:bd:b1:00:39:f9:44:0c:72:e0:d2:96: f1:5a:f9:19:c5:27:62:d1:f7:38:97:5d:fe:9b:50: be:2d:2e:a8:0c:ec:5c:87:33:23:09:52:35:56:2f: 42:ea:36:18:0d:a7:d0:62:c4:0e:78:c5:eb:7b:d1: 16:df:26:68:16:26:db:58:f8:83:77:7f:61:01:08: a0:69:68:8a:32:83:60:d0:3b:6c:c2:97:7c:fe:4b: ee:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:45:27:66:69:B1:3E:0A:BA:B3:EC:3B:00:71:85:5A:CF:0F:11:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cfdb6ad-76e6-3d26-a1e3-9850b74dcac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3b0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:f6:d3:7d:a0:27:23:df:30:bd:37:c0:aa:96:1b:b1:71:a0: a5:1e:e5:7c:f9:80:d3:b0:7d:8d:3f:af:e6:8c:45:f7:de:0f: 71:31:2a:de:6f:39:1a:0f:e9:29:88:19:75:9a:f8:8d:f7:8f: 05:20:89:a3:09:e6:8d:f3:52:af:f4:f2:17:66:e9:03:9e:89: a5:93:b7:b7:ed:91:20:eb:c9:74:ce:a9:70:53:e7:98:6d:32: 44:3f:24:6c:5c:e6:11:39:2f:e8:ee:83:e3:27:f3:9c:3d:f4: a0:cb:26:fc:b9:3c:7a:fb:17:c2:07:d8:49:8b:71:62:0d:f9: 47:77:6f:87:b1:bb:bb:8a:4e:d0:c3:45:65:1f:a3:ed:18:9a: fa:ef:db:97:3c:7e:7f:b7:89:bb:2a:cc:2b:9c:63:6e:21:b5: b1:90:96:8a:a8:83:a7:c9:e1:0e:11:50:ca:01:30:7a:87:e4: 90:05:25:c9:7e:8b:32:66:1c:5e:1e:09:be:dc:b5:38:34:a4: 12:e3:27:64:b1:83:40:e7:be:1a:b0:23:49:fb:6e:61:8c:f3: 2d:59:30:f1:95:53:0a:b6:ba:54:77:1e:8d:6c:08:42:6a:71: d4:3b:81:41:e2:16:f6:c3:21:50:4e:b0:d1:8d:ee:c5:72:28: 12:f5:d1:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uGeCuZN12Nj/GkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NWQ0NzgxMzAtZGVmZS00YjI2LWI4MDQtMjE5ZDU0ZWRhMzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqxAyrSbVrcmkg5SSJAF06/eGU7t+2PSikVy m9oWb5Nyyy0PB6xlUzWyiLeRqb1Ej75IvsKl3D6seVN1uVonm94dIbwFPL3V+yKk nV35MGrIxQemdcZo2kyy49/wm4cTragF+w6CK+Gn8cpqVppsv+4nlxV87hLhteKv 3kPgttZ4mxxLEYhja1ATGmoJv+ylrpgVIXyXVpf/2lKzfuiGl35RzVJUN4msvbEA OflEDHLg0pbxWvkZxSdi0fc4l13+m1C+LS6oDOxchzMjCVI1Vi9C6jYYDafQYsQO eMXre9EW3yZoFibbWPiDd39hAQigaWiKMoNg0Dtswpd8/kvuOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFENFJ2ZpsT4KurPsOwBxhVrPDxEXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmNmZGI2YWQtNzZlNi0z ZDI2LWExZTMtOTg1MGI3NGRjYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcOw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF/2032gJyPfML03wKqWG7FxoKUe5Xz5gNOwfY0/r+aMRffeD3Ex Kt5vORoP6SmIGXWa+I33jwUgiaMJ5o3zUq/08hdm6QOeiaWTt7ftkSDryXTOqXBT 55htMkQ/JGxc5hE5L+jug+Mn85w99KDLJvy5PHr7F8IH2EmLcWIN+Ud3b4exu7uK TtDDRWUfo+0Ymvrv25c8fn+3ibsqzCucY24htbGQloqog6fJ4Q4RUMoBMHqH5JAF Jcl+izJmHF4eCb7ctTg0pBLjJ2Sxg0DnvhqwI0n7bmGM8y1ZMPGVUwq2ulR3Ho1s CEJqcdQ7gUHiFvbDIVBOsNGN7sVyKBL10dY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:16:18 2025 by rpki-client