$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4640104c-e774-3cf8-b548-a9c5b14e8ccc.roa File: 4640104c-e774-3cf8-b548-a9c5b14e8ccc.roa (raw, json) Hash identifier: Egd3La1MhkbrCkgtRoi7dvpthpXEDRhVocTf/cckN2U= Subject key identifier: 01:4C:4C:E2:3C:7C:86:D0:70:9A:1E:A4:56:CC:AB:DF:4E:7A:E1:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9F64A2154D9F5A564D400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4640104c-e774-3cf8-b548-a9c5b14e8ccc.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:85ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:f6:4a:21:54:d9:f5:a5:64:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=0292d589-e56e-4f77-8cc1-e20e21ace961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:18:1d:11:c2:b8:28:6f:7f:d6:d2:04:63: 2d:26:f7:eb:8d:04:46:18:0c:bd:5f:4c:65:8a:93: d1:b5:4b:c6:24:4f:f8:71:21:f7:28:33:fa:91:8a: 2b:9a:98:4e:b0:b9:9d:5b:5d:ad:db:39:7d:2e:fa: 17:ae:d1:1f:c6:f9:5e:42:bb:96:5f:4d:21:21:a6: 43:47:5e:11:8b:2c:e2:35:93:0e:40:19:78:c5:0c: 97:c1:32:29:4a:56:4a:a5:ae:4a:54:80:96:08:51: ec:40:17:b0:ee:0f:3e:af:cf:1e:72:08:0f:60:d5: 91:8c:83:32:61:0e:27:53:b4:47:1a:a3:4a:f6:6a: 0d:d0:81:af:f3:cc:3b:35:c4:88:b9:12:14:9f:90: 14:1a:6d:e0:11:ba:7f:29:be:1d:1d:69:69:43:d9: 0a:2e:70:da:89:aa:85:ed:f6:bc:d6:3a:ca:2c:c2: fc:c7:93:e8:3b:47:61:9c:54:15:92:eb:dd:4e:ef: 98:28:e8:e5:3e:a5:06:07:5e:52:a7:4e:17:04:93: 3d:15:1c:8f:fa:d5:f7:39:5d:57:ae:2a:d6:16:68: 9e:6a:3b:23:0d:6b:f3:13:a4:39:e1:e1:8f:dd:b3: f6:4e:3e:e8:85:a3:28:1a:54:dc:e8:77:18:ef:f9: 95:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4C:4C:E2:3C:7C:86:D0:70:9A:1E:A4:56:CC:AB:DF:4E:7A:E1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4640104c-e774-3cf8-b548-a9c5b14e8ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:85ab::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:b0:b8:f8:55:49:ef:dc:88:51:2b:a1:45:6e:55:c5:e3:f7: 75:78:14:31:d2:5c:b6:21:61:3f:08:9a:74:c4:bb:ea:7e:cc: aa:47:1b:ab:8a:7d:60:10:63:f6:88:48:3c:1c:b7:5f:4d:24: 1b:09:65:1d:49:3d:df:63:e9:bf:8a:16:d7:d6:58:00:5b:17: 9a:bc:84:57:c2:4e:30:ed:ea:5a:96:e0:24:87:10:a3:a6:41: 58:e7:a7:43:81:aa:70:04:98:52:80:1a:24:64:d6:f1:0c:1d: da:73:c5:47:40:46:86:b7:b4:3b:9f:96:f4:04:8e:f6:d4:57: 0a:49:4d:44:0b:b5:dd:d0:63:87:6c:4b:ef:58:02:ee:01:e2: b5:2e:bd:5f:84:ed:81:92:9f:34:7f:75:8b:42:6b:58:fd:39: bd:0a:70:d9:10:ef:63:2d:c5:20:1c:26:98:c8:b7:3f:c3:71: 13:ec:74:31:0f:4a:84:7b:7a:c6:83:35:a5:a7:24:04:c7:40: d9:2d:fe:2f:96:0b:e7:a6:4d:15:47:99:0b:a7:6d:8d:0c:5a: 89:d1:01:fc:4c:28:1d:bd:cb:e4:bb:87:a9:e8:cd:e5:7d:5f: 6d:1a:09:b3:34:15:b7:04:80:20:5a:b8:fc:c8:f6:d9:4d:cf: 97:dd:3f:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ufZKIVTZ9aVk1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MDI5MmQ1ODktZTU2ZS00Zjc3LThjYzEtZTIwZTIxYWNlOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUQYHRHCuChvf9bSBGMtJvfrjQRGGAy9X0xl ipPRtUvGJE/4cSH3KDP6kYormphOsLmdW12t2zl9LvoXrtEfxvleQruWX00hIaZD R14RiyziNZMOQBl4xQyXwTIpSlZKpa5KVICWCFHsQBew7g8+r88ecggPYNWRjIMy YQ4nU7RHGqNK9moN0IGv88w7NcSIuRIUn5AUGm3gEbp/Kb4dHWlpQ9kKLnDaiaqF 7fa81jrKLML8x5PoO0dhnFQVkuvdTu+YKOjlPqUGB15Sp04XBJM9FRyP+tX3OV1X rirWFmieajsjDWvzE6Q54eGP3bP2Tj7ohaMoGlTc6HcY7/mVOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAFMTOI8fIbQcJoepFbMq99OeuHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDY0MDEwNGMtZTc3NC0z Y2Y4LWI1NDgtYTljNWIxNGU4Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYWr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKKwuPhVSe/ciFEroUVuVcXj93V4FDHSXLYhYT8ImnTEu+p+zKpH G6uKfWAQY/aISDwct19NJBsJZR1JPd9j6b+KFtfWWABbF5q8hFfCTjDt6lqW4CSH EKOmQVjnp0OBqnAEmFKAGiRk1vEMHdpzxUdARoa3tDuflvQEjvbUVwpJTUQLtd3Q Y4dsS+9YAu4B4rUuvV+E7YGSnzR/dYtCa1j9Ob0KcNkQ72MtxSAcJpjItz/DcRPs dDEPSoR7esaDNaWnJATHQNkt/i+WC+emTRVHmQunbY0MWonRAfxMKB29y+S7h6no zeV9X20aCbM0FbcEgCBauPzI9tlNz5fdP8c= -----END CERTIFICATE-----Generated at Mon Oct 20 06:54:34 2025 by rpki-client