$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59c0c7d2-f39a-30ac-b779-3e873748fe31.roa File: 59c0c7d2-f39a-30ac-b779-3e873748fe31.roa (raw, json) Hash identifier: paSyFVEqZ7S8XOJk9dqMJI+5mCY1+VqpPbYJzs1LsV8= Subject key identifier: D3:3E:A4:95:9B:86:35:21:D2:8F:4A:67:7E:97:87:10:AD:DD:AF:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7E1D7AC43663E8FD57060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59c0c7d2-f39a-30ac-b779-3e873748fe31.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:853a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:e1:d7:ac:43:66:3e:8f:d5:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=17fbac5b-585b-45e5-a411-aa52d9438620 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:f9:23:e9:20:89:f9:64:8d:93:d9:4a:74: 6c:b2:5e:90:f2:c6:ee:bd:b6:e5:2f:36:ff:ad:2b: e2:ec:3d:b0:78:15:53:6f:3d:30:a8:35:7f:ee:ed: a4:23:d7:8d:9f:be:22:32:a5:12:7a:ba:63:f4:58: 3e:09:c3:f8:0e:28:83:c7:07:20:6a:1a:9f:28:98: 96:34:1b:af:27:d5:ad:e7:25:f2:d6:a8:e6:45:2e: e0:01:e3:86:26:5a:a5:4b:ad:ad:0c:22:aa:54:a1: e2:2f:6d:13:30:1e:d3:53:6b:8b:1d:58:a1:e3:ed: 1a:58:fb:51:a7:b5:53:aa:da:5f:b3:3f:15:ba:47: ba:a8:66:78:60:68:03:43:4e:f2:98:23:38:41:52: 33:ef:61:81:ef:a1:32:d8:3b:da:2d:eb:2e:ed:68: be:c0:a3:5f:2b:af:c5:67:6b:70:6e:59:f6:d1:46: 94:98:86:07:94:73:df:28:16:82:76:21:ca:59:6e: e4:4b:86:fd:44:df:3d:b5:d5:02:48:49:cc:e9:43: ec:d4:2c:77:de:9b:18:0e:82:37:60:05:3d:dc:3d: 48:3b:37:2e:c2:14:b0:1d:be:27:78:98:18:d1:e1: 9c:17:80:42:02:e3:7b:a5:dc:ae:6a:a7:c9:67:47: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:3E:A4:95:9B:86:35:21:D2:8F:4A:67:7E:97:87:10:AD:DD:AF:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59c0c7d2-f39a-30ac-b779-3e873748fe31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:853a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dc:04:ec:66:9a:9b:6e:f8:dc:9c:dc:56:e6:b5:72:38:d8:34: 2d:51:97:47:06:df:19:ff:2b:35:a7:3d:64:06:08:c1:d2:1b: 5f:3f:7c:ba:60:4a:70:c7:6e:1e:c2:e0:2d:51:ab:d0:9f:5e: 8e:9f:69:67:3c:6c:df:e0:91:b3:25:66:14:e5:e5:02:d0:90: c5:3e:62:52:67:c7:19:91:ea:38:99:1f:8d:92:b6:31:e3:b8: 6e:dd:6a:84:ae:8b:5a:a9:53:7d:14:f6:2f:cf:e7:2d:4d:f6: b1:d4:d9:76:98:e6:9c:bb:51:40:21:a7:e4:bd:bc:57:07:bb: c7:36:a2:c9:11:91:18:e1:2a:05:3d:bf:ed:c4:f3:29:a5:f4: ef:5f:43:73:1d:da:8b:f6:cf:26:d5:eb:a3:42:90:16:5d:9c: b0:48:a7:0b:5b:d0:44:41:cb:db:d8:50:e6:be:b4:48:34:67: b4:b1:d2:d5:4d:24:0b:d2:27:0d:09:61:79:fc:50:db:6f:ef: c0:0b:5e:e4:25:d2:2c:9d:9c:34:ad:05:d8:f4:de:cc:04:21: 55:2a:06:fd:e8:36:af:44:6b:63:cc:de:d6:37:a2:14:f6:61: 15:fa:83:d0:48:ef:be:7e:b6:83:34:f8:2c:6e:c4:0f:29:a8: c5:6a:14:40 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t+HXrENmPo/VcGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTdmYmFjNWItNTg1Yi00NWU1LWE0MTEtYWE1MmQ5NDM4NjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPb5I+kgiflkjZPZSnRssl6Q8sbuvbblLzb/ rSvi7D2weBVTbz0wqDV/7u2kI9eNn74iMqUSerpj9Fg+CcP4DiiDxwcgahqfKJiW NBuvJ9Wt5yXy1qjmRS7gAeOGJlqlS62tDCKqVKHiL20TMB7TU2uLHVih4+0aWPtR p7VTqtpfsz8Vuke6qGZ4YGgDQ07ymCM4QVIz72GB76Ey2DvaLesu7Wi+wKNfK6/F Z2twbln20UaUmIYHlHPfKBaCdiHKWW7kS4b9RN89tdUCSEnM6UPs1Cx33psYDoI3 YAU93D1IOzcuwhSwHb4neJgY0eGcF4BCAuN7pdyuaqfJZ0fOGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNM+pJWbhjUh0o9KZ36XhxCt3a8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTljMGM3ZDItZjM5YS0z MGFjLWI3NzktM2U4NzM3NDhmZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYU6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANwE7Gaam2743JzcVua1cjjYNC1Rl0cG3xn/KzWnPWQGCMHSG18/ fLpgSnDHbh7C4C1Rq9CfXo6faWc8bN/gkbMlZhTl5QLQkMU+YlJnxxmR6jiZH42S tjHjuG7daoSui1qpU30U9i/P5y1N9rHU2XaY5py7UUAhp+S9vFcHu8c2oskRkRjh KgU9v+3E8yml9O9fQ3Md2ov2zybV66NCkBZdnLBIpwtb0ERBy9vYUOa+tEg0Z7Sx 0tVNJAvSJw0JYXn8UNtv78ALXuQl0iydnDStBdj03swEIVUqBv3oNq9Ea2PM3tY3 ohT2YRX6g9BI775+toM0+CxuxA8pqMVqFEA= -----END CERTIFICATE-----Generated at Mon Oct 20 05:36:28 2025 by rpki-client