$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9423e2-c125-3d75-86fc-1fdcb58802f7.roa File: 4b9423e2-c125-3d75-86fc-1fdcb58802f7.roa (raw, json) Hash identifier: hd7Aa9aq9PdkQ4QotIWZu7viUWOZpPdFMaXAq0LmfZQ= Subject key identifier: CA:38:EB:4A:4A:A9:21:9E:83:66:07:48:57:02:7D:DE:B0:05:D4:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9F062C12A10A0E5AD3C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9423e2-c125-3d75-86fc-1fdcb58802f7.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:48e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:f0:62:c1:2a:10:a0:e5:ad:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=78de47b6-897f-47df-bb66-a2ff7d20261d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:1c:54:37:08:89:5f:d3:15:49:b0:7d:8a: 31:7b:29:ad:fb:8d:f0:c4:d3:ad:df:38:12:b4:a7: 57:8b:f1:a1:4b:93:d3:43:ed:7a:51:d1:74:1f:19: c9:89:f4:e3:64:ce:37:6c:6d:69:ff:83:77:23:23: ae:57:20:55:2c:b5:2b:66:8f:3f:aa:85:b7:98:65: 58:c6:00:c2:4d:0c:66:8c:bc:b6:64:74:06:df:cf: 4b:ac:a8:c6:60:c9:5c:00:b1:51:f7:60:1c:32:f6: 76:eb:10:05:48:98:c7:15:03:2b:b2:c9:b3:31:76: 1f:bc:90:52:ea:1f:a8:66:21:9c:a3:87:d6:f4:22: 22:53:1c:64:2d:02:1a:12:ff:0f:0b:98:7a:4e:e9: c1:6f:0c:c4:5c:3f:76:8e:d1:53:d8:ad:2e:1d:c3: 4a:3f:e4:41:86:70:5e:63:62:77:cc:12:93:28:2c: db:1f:05:38:80:fd:33:a5:cf:99:c3:42:2b:8c:d0: d6:b3:f2:51:09:fe:f5:0b:5a:16:30:d9:7e:78:23: 32:62:5a:da:e5:64:2e:24:30:10:49:9c:de:24:e9: 92:2c:2a:88:06:ca:13:03:cd:f3:71:59:57:fa:b6: de:87:33:cf:6b:f7:e1:1c:36:d7:de:f7:32:4e:ed: 62:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:38:EB:4A:4A:A9:21:9E:83:66:07:48:57:02:7D:DE:B0:05:D4:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b9423e2-c125-3d75-86fc-1fdcb58802f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:48e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d3:40:ff:aa:39:06:8d:6f:c8:d7:05:4f:99:8d:d6:f8:55: ed:a2:29:02:e4:de:bb:8b:0e:94:f2:2d:f4:a5:83:10:50:af: 1e:e6:b2:ae:88:f0:df:e7:8f:e2:23:bd:79:a5:17:3c:d6:8f: 7f:cb:c7:2e:c5:f8:24:f3:12:e4:99:d8:30:c7:49:98:f6:88: 21:2f:83:3d:17:83:af:dc:37:f2:e9:cd:87:26:09:c1:62:50: 57:a0:05:12:79:cb:bf:7e:1b:50:46:97:c6:f8:d5:5e:68:e0: 22:94:4c:ee:21:2b:53:8d:6b:54:9d:48:3f:b7:d5:35:71:b6: 9d:fd:b7:24:6e:86:29:76:3b:9a:c2:73:c9:ac:99:26:87:5f: d8:b9:e8:3a:96:90:3f:56:55:d2:b4:35:54:9f:27:78:21:d1: 91:18:44:d1:54:63:1e:1f:e7:de:75:f2:2d:d0:57:e8:f4:e2: db:ca:1c:1e:ab:71:39:2f:3d:1e:22:96:71:09:c0:c6:6e:58: 8f:71:07:73:d3:eb:d7:57:8f:6f:03:ce:66:c2:80:41:e2:70: aa:76:9e:64:7f:e4:eb:bf:a4:17:1d:9c:2b:55:8d:4f:fc:3b: 60:70:4b:42:6b:9c:9f:73:b8:40:af:e6:2e:35:93:57:67:93: f5:46:c3:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ufBiwSoQoOWtPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NzhkZTQ3YjYtODk3Zi00N2RmLWJiNjYtYTJmZjdkMjAyNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizccVDcIiV/TFUmwfYoxeymt+43wxNOt3zgS tKdXi/GhS5PTQ+16UdF0HxnJifTjZM43bG1p/4N3IyOuVyBVLLUrZo8/qoW3mGVY xgDCTQxmjLy2ZHQG389LrKjGYMlcALFR92AcMvZ26xAFSJjHFQMrssmzMXYfvJBS 6h+oZiGco4fW9CIiUxxkLQIaEv8PC5h6TunBbwzEXD92jtFT2K0uHcNKP+RBhnBe Y2J3zBKTKCzbHwU4gP0zpc+Zw0IrjNDWs/JRCf71C1oWMNl+eCMyYlra5WQuJDAQ SZzeJOmSLCqIBsoTA83zcVlX+rbehzPPa/fhHDbX3vcyTu1iCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMo460pKqSGeg2YHSFcCfd6wBdRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGI5NDIzZTItYzEyNS0z ZDc1LTg2ZmMtMWZkY2I1ODgwMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQSO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADLTQP+qOQaNb8jXBU+Zjdb4Ve2iKQLk3ruLDpTyLfSlgxBQrx7m sq6I8N/nj+IjvXmlFzzWj3/Lxy7F+CTzEuSZ2DDHSZj2iCEvgz0Xg6/cN/LpzYcm CcFiUFegBRJ5y79+G1BGl8b41V5o4CKUTO4hK1ONa1SdSD+31TVxtp39tyRuhil2 O5rCc8msmSaHX9i56DqWkD9WVdK0NVSfJ3gh0ZEYRNFUYx4f59518i3QV+j04tvK HB6rcTkvPR4ilnEJwMZuWI9xB3PT69dXj28DzmbCgEHicKp2nmR/5Ou/pBcdnCtV jU/8O2BwS0JrnJ9zuECv5i41k1dnk/VGw7c= -----END CERTIFICATE-----Generated at Mon Oct 20 06:55:07 2025 by rpki-client