$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dc11db-8161-3bdf-89a6-97762b1f98e1.roa File: 40dc11db-8161-3bdf-89a6-97762b1f98e1.roa (raw, json) Hash identifier: 8pQ0+DbsIO3bHAyFSB8Hikc0qJIluszZL9SjUR2gU+M= Subject key identifier: 60:57:4C:D7:82:83:41:09:61:98:33:C9:78:5E:12:9B:C7:21:99:2E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8F599BAFAB91551FB9D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dc11db-8161-3bdf-89a6-97762b1f98e1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7016 IP address blocks: 2001:559:244::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:f5:99:ba:fa:b9:15:51:fb:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=19a3167b-478b-4b66-9340-43972ba6b929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:16:9d:fc:4b:07:62:cc:00:c9:42:e7:f0:f6: dd:07:39:ff:8c:a0:33:a5:90:43:20:c6:c2:78:50: b9:86:69:70:17:ca:4a:5f:68:21:e8:75:02:7e:3d: 55:bb:6b:1c:ca:cc:e1:a3:2b:1a:64:fd:15:41:ca: 4c:e3:be:e8:0b:23:07:d8:f9:11:38:35:97:b0:95: 02:57:1f:01:84:de:6e:3a:de:7c:85:13:6a:5d:6e: 1e:36:e8:56:31:06:61:c2:c3:b1:3a:77:0b:91:e0: a7:2b:82:44:37:7c:c7:d4:35:88:a7:98:af:05:61: 27:47:0f:e2:64:f4:70:a7:98:5d:32:7c:85:55:5c: 36:cd:f4:c9:78:86:2e:e9:6a:55:fb:9b:15:29:06: a5:45:a3:58:68:79:39:a6:7c:06:6c:60:ef:3f:f1: 16:55:c2:da:be:f3:45:69:2d:bf:79:04:d6:0c:80: 0b:6e:12:8e:84:ad:89:bc:5c:a2:39:a1:fb:2a:1a: 9e:f0:f5:1a:6c:4c:f2:c1:4f:13:51:7a:39:22:3a: fb:f5:f2:b7:7b:1e:d9:50:93:70:57:77:1f:33:24: 8c:76:0d:ee:26:f6:b3:22:c9:d6:ff:11:b3:b1:91: 3d:5b:93:22:9b:fc:fc:db:49:89:5d:44:75:15:a2: cd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:57:4C:D7:82:83:41:09:61:98:33:C9:78:5E:12:9B:C7:21:99:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40dc11db-8161-3bdf-89a6-97762b1f98e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:244::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ec:c5:eb:b1:5f:85:b1:50:d9:21:39:a3:60:a8:ec:b1:56: b8:96:36:9e:68:ad:0a:ff:4e:e2:8a:95:62:cc:64:e3:94:38: e3:08:2e:7d:21:80:bd:17:b6:31:1c:bf:a7:6d:a1:2c:75:a6: 67:89:61:e7:7d:3a:a0:df:41:71:7f:a8:ec:d2:8c:4f:17:58: 08:05:25:eb:a8:f4:b9:53:b6:91:53:66:fb:3e:37:d2:0d:7c: 38:26:98:c7:c1:15:76:e3:40:71:22:87:7d:9c:a7:a8:98:5f: 5a:91:f7:18:ba:3e:10:9b:41:96:8b:3a:5b:a5:b2:45:d4:11: a4:7c:84:0d:d9:17:33:93:e7:e9:dc:d3:cb:8d:c6:45:9d:e7: 17:8e:ee:74:d0:dd:24:92:bd:cf:1f:ea:86:18:0f:bc:c4:2d: 02:57:82:ca:0a:17:77:3c:c0:8f:04:1d:8c:4f:77:8e:fe:06: f1:25:36:99:32:2e:bf:bf:ce:03:d7:ee:53:b7:76:d4:ee:b1: c9:62:11:c2:79:78:03:62:e4:99:86:71:b7:01:79:ea:7e:4c: f6:5a:4c:08:f3:57:27:ec:80:7e:a3:f6:05:55:fe:f7:72:54: 68:12:d5:62:97:de:39:b1:0b:1d:f6:c7:28:fb:1b:82:9b:0e: b8:66:6e:4d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uPWZuvq5FVH7nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTlhMzE2N2ItNDc4Yi00YjY2LTkzNDAtNDM5NzJiYTZiOTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxad/EsHYswAyULn8PbdBzn/jKAzpZBDIMbC eFC5hmlwF8pKX2gh6HUCfj1Vu2scyszhoysaZP0VQcpM477oCyMH2PkRODWXsJUC Vx8BhN5uOt58hRNqXW4eNuhWMQZhwsOxOncLkeCnK4JEN3zH1DWIp5ivBWEnRw/i ZPRwp5hdMnyFVVw2zfTJeIYu6WpV+5sVKQalRaNYaHk5pnwGbGDvP/EWVcLavvNF aS2/eQTWDIALbhKOhK2JvFyiOaH7Khqe8PUabEzywU8TUXo5Ijr79fK3ex7ZUJNw V3cfMySMdg3uJvazIsnW/xGzsZE9W5Mim/z820mJXUR1FaLNZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGBXTNeCg0EJYZgzyXheEpvHIZkuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDBkYzExZGItODE2MS0z YmRmLTg5YTYtOTc3NjJiMWY5OGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQJE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABvsxeuxX4WxUNkhOaNgqOyxVriWNp5orQr/TuKKlWLMZOOUOOMI Ln0hgL0XtjEcv6dtoSx1pmeJYed9OqDfQXF/qOzSjE8XWAgFJeuo9LlTtpFTZvs+ N9INfDgmmMfBFXbjQHEih32cp6iYX1qR9xi6PhCbQZaLOlulskXUEaR8hA3ZFzOT 5+nc08uNxkWd5xeO7nTQ3SSSvc8f6oYYD7zELQJXgsoKF3c8wI8EHYxPd47+BvEl NpkyLr+/zgPX7lO3dtTuscliEcJ5eANi5JmGcbcBeep+TPZaTAjzVyfsgH6j9gVV /vdyVGgS1WKX3jmxCx32xyj7G4KbDrhmbk0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:53 2025 by rpki-client