$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473079ba-6400-3a63-8ddc-404ddc4db4f3.roa File: 473079ba-6400-3a63-8ddc-404ddc4db4f3.roa (raw, json) Hash identifier: AlJF+kuPvul6AmpBuA66zfcHvviQSCF3a4J/umjEzvY= Subject key identifier: E4:83:44:02:FA:D3:13:8B:4F:88:FE:E4:31:4A:B7:C0:33:76:BE:99 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB97B8E76855525B10CF39E Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473079ba-6400-3a63-8ddc-404ddc4db4f3.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:8124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:7b:8e:76:85:55:25:b1:0c:f3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=64e6879c-1c75-41fd-89b4-498026d57611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:55:0a:db:97:32:b3:09:45:8b:98:45:f7: 94:9b:46:b1:fd:e8:e2:56:ec:d7:8c:dc:46:08:47: ae:bf:e1:cb:b3:0e:ec:6d:0c:d7:74:8f:20:4e:00: 70:50:66:9c:90:8f:1f:83:26:31:48:b6:87:88:41: 92:18:75:0b:20:24:67:f8:9d:35:2d:9a:5d:19:17: 44:70:d5:6c:9d:ee:cd:76:b4:a0:10:70:fb:19:5a: 2a:0d:96:dc:0a:04:d7:63:4b:22:29:ad:21:8b:16: 13:af:db:0d:be:d5:f8:5c:b3:43:06:5f:79:61:ce: e7:8c:24:27:cb:07:05:d3:9f:56:02:97:1b:05:dc: 7c:90:79:e6:96:fd:ef:3c:16:0e:b0:21:f9:70:a2: 39:dc:87:83:25:1c:ac:53:2a:09:ea:3f:cc:a3:72: 2e:4e:64:84:53:cb:b6:21:31:e5:d6:e8:eb:6d:8b: 7e:5a:fc:67:9f:65:ab:24:74:9b:5b:75:66:b2:de: f5:c2:31:67:66:f9:64:eb:bb:da:b9:ed:95:ac:da: 52:9b:21:69:f8:fe:68:8d:19:01:4a:7d:e9:bd:07: 7e:3f:34:bb:e6:4c:92:57:1a:f8:22:49:69:7d:5a: d6:25:5f:fc:30:f5:7a:bb:d2:0b:bf:c9:b5:ab:33: 09:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:83:44:02:FA:D3:13:8B:4F:88:FE:E4:31:4A:B7:C0:33:76:BE:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/473079ba-6400-3a63-8ddc-404ddc4db4f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8124::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:75:7b:c7:5b:6b:80:35:38:fa:22:07:d2:18:e5:4d:6f:6e: ce:ca:b0:10:f2:4c:41:bd:6c:dd:6f:0b:a6:b9:5f:66:ee:97: 49:8c:95:09:0d:99:fb:be:aa:9f:0d:f3:07:0d:3a:a7:62:b4: d2:cc:e8:73:34:f9:ba:28:c5:cf:13:e0:41:18:07:c9:e0:27: ac:ac:ac:5d:37:f6:04:5a:27:48:70:e9:9a:48:2a:df:96:3f: 41:96:fc:2b:de:a1:41:a9:a9:42:23:fe:c8:a0:5a:29:9f:c0: a0:86:ea:8f:cd:76:0c:a8:9b:84:93:2d:3b:91:58:a2:73:aa: 16:c2:fe:f2:38:0e:9b:5a:08:ed:16:71:e2:97:b2:56:04:9a: 3d:f4:aa:da:b6:57:2c:7c:d1:6c:ee:ab:5b:2c:41:94:ab:29: e0:8b:79:e7:06:6f:85:6b:42:63:2f:26:82:88:71:90:91:fb: 06:07:16:68:59:d2:76:5e:44:a0:b4:9a:9c:fe:76:74:a9:67: e1:66:5a:a7:72:1a:08:f1:7b:2c:b6:70:c1:7e:d2:19:3c:a5: 59:30:b0:da:71:46:96:72:c9:cb:d2:c8:ba:f8:f0:2a:1d:ab: 7d:40:3f:d5:09:de:10:cd:86:98:cf:7c:b7:3f:56:17:b7:0f: 26:ce:91:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uXuOdoVVJbEM854wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjRlNjg3OWMtMWM3NS00MWZkLTg5YjQtNDk4MDI2ZDU3NjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjFVCtuXMrMJRYuYRfeUm0ax/ejiVuzXjNxG CEeuv+HLsw7sbQzXdI8gTgBwUGackI8fgyYxSLaHiEGSGHULICRn+J01LZpdGRdE cNVsne7NdrSgEHD7GVoqDZbcCgTXY0siKa0hixYTr9sNvtX4XLNDBl95Yc7njCQn ywcF059WApcbBdx8kHnmlv3vPBYOsCH5cKI53IeDJRysUyoJ6j/Mo3IuTmSEU8u2 ITHl1ujrbYt+Wvxnn2WrJHSbW3Vmst71wjFnZvlk67vaue2VrNpSmyFp+P5ojRkB Sn3pvQd+PzS75kySVxr4IklpfVrWJV/8MPV6u9ILv8m1qzMJewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOSDRAL60xOLT4j+5DFKt8Azdr6ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDczMDc5YmEtNjQwMC0z YTYzLThkZGMtNDA0ZGRjNGRiNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYEk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAh1e8dba4A1OPoiB9IY5U1vbs7KsBDyTEG9bN1vC6a5X2bul0mM lQkNmfu+qp8N8wcNOqditNLM6HM0+booxc8T4EEYB8ngJ6ysrF039gRaJ0hw6ZpI Kt+WP0GW/CveoUGpqUIj/sigWimfwKCG6o/Ndgyom4STLTuRWKJzqhbC/vI4Dpta CO0WceKXslYEmj30qtq2Vyx80Wzuq1ssQZSrKeCLeecGb4VrQmMvJoKIcZCR+wYH FmhZ0nZeRKC0mpz+dnSpZ+FmWqdyGgjxeyy2cMF+0hk8pVkwsNpxRpZyycvSyLr4 8Codq31AP9UJ3hDNhpjPfLc/Vhe3DybOkQc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:39:24 2025 by rpki-client