$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5becfb-e1ce-3285-9ef6-a8f625ce0590.roa File: 4b5becfb-e1ce-3285-9ef6-a8f625ce0590.roa (raw, json) Hash identifier: cQ5ETfNqCP6bb3UYpwtwos7gUAsXaPf3RfsiqCXbEPU= Subject key identifier: 93:46:92:E9:7C:26:D8:60:4F:08:07:59:7C:03:E6:E0:28:C6:08:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9D3B96F2CDD5092C65680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5becfb-e1ce-3285-9ef6-a8f625ce0590.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:c21b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:d3:b9:6f:2c:dd:50:92:c6:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=7b814c04-88b9-4eae-bcff-25408c1b1b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:b1:4f:ab:ca:b6:55:74:00:48:84:e5:4d: 5d:46:f0:74:f0:ba:df:78:2a:26:43:1b:d6:a9:0b: 43:bc:94:7a:f4:44:88:fd:d5:2f:f8:fd:33:c4:12: 7f:07:1f:5d:04:20:e9:1d:a9:86:b2:fe:21:91:00: 0a:74:ca:d4:80:fb:24:fa:85:f4:bf:e4:ab:f4:e6: 92:74:8b:b6:52:de:ac:36:d3:09:39:c7:5c:f8:77: 95:99:48:4f:7b:04:b0:44:1b:74:6f:0b:b2:07:08: f4:65:c3:9f:d0:34:33:3b:90:93:1d:73:32:b4:a6: c5:4f:41:bc:fa:bd:58:de:77:7c:1c:f6:b0:9c:04: c6:75:f0:5f:70:52:35:dc:4e:18:5e:54:7e:64:1b: ef:6e:83:2a:3a:41:53:9c:17:34:ec:3d:d6:49:51: 91:b6:4f:25:16:16:db:30:ae:dd:47:2f:59:23:be: 87:db:b8:0d:f1:45:93:b0:e2:73:8d:e3:e7:5e:44: fc:6a:35:6e:a4:01:a0:d8:3b:15:a7:be:41:88:82: 2c:2b:ca:7d:98:c5:05:4a:12:9f:18:35:58:1c:28: 92:d1:5b:41:d1:58:88:a7:72:43:ef:88:ae:98:ce: 96:d9:23:67:12:d0:3f:10:80:ff:63:16:51:a1:22: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:46:92:E9:7C:26:D8:60:4F:08:07:59:7C:03:E6:E0:28:C6:08:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b5becfb-e1ce-3285-9ef6-a8f625ce0590.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c21b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5d:c5:1b:94:9e:07:b6:fe:10:a5:c4:70:ca:2f:b3:ad:05: f0:7a:c0:59:65:0b:0e:c2:5d:3d:e1:f0:3e:d7:0f:13:b8:6b: 60:ca:d0:bf:38:8d:a1:6f:bf:c6:9c:4e:0d:66:d9:01:11:11: c9:2a:9e:f8:f4:fb:0b:87:59:db:3e:4b:42:0e:59:f3:98:d4: 20:10:d1:b3:2e:5f:da:bb:85:29:80:7b:5b:4b:28:c9:93:dd: 69:f1:90:4a:64:4b:1f:91:e7:37:0c:9a:50:50:e9:28:9e:e9: 51:13:08:2f:7f:3b:26:f5:d3:24:49:55:a6:e7:37:46:07:18: 80:35:98:d7:10:88:e8:4a:74:61:09:ac:da:24:0b:0b:f4:6c: 49:45:d2:45:2b:27:cb:c7:d5:29:5f:0e:92:e9:88:ea:e1:08: c0:de:df:bc:84:2f:76:10:1b:2d:a9:df:0e:d3:e9:50:75:05: e7:37:23:18:f2:ad:79:dd:ad:07:0f:c8:8e:da:20:8f:e0:ad: 79:2d:f8:95:3e:78:7c:5f:1f:f1:16:76:d7:bc:17:fc:c8:17: 0c:81:88:27:3f:1c:75:8b:34:ca:07:94:d4:bf:25:a6:3f:82: 70:e3:20:ff:2c:d4:6b:17:a2:45:32:ea:ae:97:53:9c:d7:37: d5:e5:03:f6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9udO5byzdUJLGVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk N2I4MTRjMDQtODhiOS00ZWFlLWJjZmYtMjU0MDhjMWIxYjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP+xT6vKtlV0AEiE5U1dRvB08LrfeComQxvW qQtDvJR69ESI/dUv+P0zxBJ/Bx9dBCDpHamGsv4hkQAKdMrUgPsk+oX0v+Sr9OaS dIu2Ut6sNtMJOcdc+HeVmUhPewSwRBt0bwuyBwj0ZcOf0DQzO5CTHXMytKbFT0G8 +r1Y3nd8HPawnATGdfBfcFI13E4YXlR+ZBvvboMqOkFTnBc07D3WSVGRtk8lFhbb MK7dRy9ZI76H27gN8UWTsOJzjePnXkT8ajVupAGg2DsVp75BiIIsK8p9mMUFShKf GDVYHCiS0VtB0ViIp3JD74iumM6W2SNnEtA/EID/YxZRoSLLxQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJNGkul8JthgTwgHWXwD5uAoxgj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGI1YmVjZmItZTFjZS0z Mjg1LTllZjYtYThmNjI1Y2UwNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcIb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFJdxRuUnge2/hClxHDKL7OtBfB6wFllCw7CXT3h8D7XDxO4a2DK 0L84jaFvv8acTg1m2QEREckqnvj0+wuHWds+S0IOWfOY1CAQ0bMuX9q7hSmAe1tL KMmT3WnxkEpkSx+R5zcMmlBQ6Sie6VETCC9/Oyb10yRJVabnN0YHGIA1mNcQiOhK dGEJrNokCwv0bElF0kUrJ8vH1SlfDpLpiOrhCMDe37yEL3YQGy2p3w7T6VB1Bec3 IxjyrXndrQcPyI7aII/grXkt+JU+eHxfH/EWdte8F/zIFwyBiCc/HHWLNMoHlNS/ JaY/gnDjIP8s1GsXokUy6q6XU5zXN9XlA/Y= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:09 2025 by rpki-client