$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bc5e353-8218-32cf-be66-fa9e6242e6f5.roa File: 5bc5e353-8218-32cf-be66-fa9e6242e6f5.roa (raw, json) Hash identifier: xsW4vKFJlQi42VfCOYNk/PeZkU2eVf/5VN4wnXYP+C8= Subject key identifier: 62:EB:8E:D9:72:DD:26:8A:EB:CB:9D:07:D6:BA:72:B9:7B:C9:50:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7D6F17B1276ECE7AC8BA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bc5e353-8218-32cf-be66-fa9e6242e6f5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:4cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:d6:f1:7b:12:76:ec:e7:ac:8b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=18c6da46-9290-494f-ae07-8a9fcd3dec9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d6:81:3f:98:c4:e8:10:25:97:d2:2e:81:f9: 3f:48:ac:d4:c4:0d:39:64:c9:fb:84:1e:c3:34:aa: 76:e3:c8:05:41:78:bb:87:f9:38:c6:0d:1e:cf:b4: 6c:63:fd:a7:dd:e3:ec:e2:07:58:fe:e5:af:12:0f: 90:ba:f4:2a:e7:86:1a:dd:ce:e6:58:a3:6e:57:8c: d3:f5:af:78:11:a5:11:a7:9a:36:55:2b:09:1f:98: 7f:24:2e:27:22:82:cb:03:fa:f1:fa:9e:08:44:c0: de:7c:9e:67:47:3c:0e:31:fc:ad:f7:ee:00:27:03: a6:2e:c0:db:2d:6f:82:60:49:47:73:98:84:64:77: 89:42:b7:1c:3e:46:cc:3f:c3:8a:c9:50:49:bd:59: 42:55:38:00:3a:92:a0:24:28:86:21:d2:f3:a3:b9: 92:c4:6d:36:78:97:2b:d0:ba:71:7c:15:9f:5a:3c: 07:d5:eb:14:1c:e2:db:d7:62:0c:d1:bb:bb:8c:b3: e4:fe:7b:f9:f9:05:b9:bf:7b:b5:f0:b5:23:e1:3a: 04:f1:29:2b:fa:b2:44:b8:33:80:66:f4:cc:72:47: 94:af:a8:22:dd:26:f4:ea:4a:57:84:01:81:df:a2: 4b:c3:30:ec:6c:6b:87:28:b0:a7:ef:fb:81:49:96: f2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EB:8E:D9:72:DD:26:8A:EB:CB:9D:07:D6:BA:72:B9:7B:C9:50:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bc5e353-8218-32cf-be66-fa9e6242e6f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:4cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:97:13:0c:34:13:5f:9e:35:7e:62:88:fd:5b:04:67:6e:1c: 3f:9f:8f:59:eb:f3:46:5c:4a:f4:82:ab:cb:84:6a:c0:7e:e3: 91:b8:58:40:de:55:ac:5a:98:f2:ee:4c:03:6a:a5:3a:e1:1e: 48:27:dd:38:b4:d1:4f:7c:6e:b9:d3:21:8b:4a:9b:62:19:b9: 48:6a:c4:f1:2a:3c:63:fe:71:6d:a2:5b:44:c6:53:8f:47:4f: fc:b2:e8:ac:13:95:85:c3:07:28:b0:1e:c6:cd:f0:1f:b3:31: 91:36:bf:64:2b:78:17:6a:db:30:cd:27:2b:11:2e:01:46:f1: c6:67:f6:98:e6:8c:63:07:b1:bf:d6:d3:5a:51:ab:85:78:2c: 14:a1:c1:8c:d3:39:6a:37:09:61:12:55:d6:bf:34:d7:9a:5a: 24:1b:e7:da:b3:29:c5:1c:14:ca:d4:e5:7e:80:70:7b:a7:af: ff:f6:c7:28:78:94:57:33:2f:6a:22:77:b0:99:9d:dd:51:66: 3a:2e:35:b4:8e:29:fb:b6:ac:fd:29:1c:4f:ba:84:d4:cc:73: 5d:33:28:e5:01:6f:12:62:64:fa:ab:b5:8b:93:21:74:cd:d6: a7:b8:a0:cd:4f:a6:a9:37:ad:bf:01:7a:24:c3:25:79:1b:2b: e6:5b:a9:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t9bxexJ27Oesi6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MThjNmRhNDYtOTI5MC00OTRmLWFlMDctOGE5ZmNkM2RlYzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NaBP5jE6BAll9Iugfk/SKzUxA05ZMn7hB7D NKp248gFQXi7h/k4xg0ez7RsY/2n3ePs4gdY/uWvEg+QuvQq54Ya3c7mWKNuV4zT 9a94EaURp5o2VSsJH5h/JC4nIoLLA/rx+p4IRMDefJ5nRzwOMfyt9+4AJwOmLsDb LW+CYElHc5iEZHeJQrccPkbMP8OKyVBJvVlCVTgAOpKgJCiGIdLzo7mSxG02eJcr 0LpxfBWfWjwH1esUHOLb12IM0bu7jLPk/nv5+QW5v3u18LUj4ToE8Skr+rJEuDOA ZvTMckeUr6gi3Sb06kpXhAGB36JLwzDsbGuHKLCn7/uBSZbyGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGLrjtly3SaK68udB9a6crl7yVD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJjNWUzNTMtODIxOC0z MmNmLWJlNjYtZmE5ZTYyNDJlNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQTN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJeXEww0E1+eNX5iiP1bBGduHD+fj1nr80ZcSvSCq8uEasB+45G4 WEDeVaxamPLuTANqpTrhHkgn3Ti00U98brnTIYtKm2IZuUhqxPEqPGP+cW2iW0TG U49HT/yy6KwTlYXDByiwHsbN8B+zMZE2v2QreBdq2zDNJysRLgFG8cZn9pjmjGMH sb/W01pRq4V4LBShwYzTOWo3CWESVda/NNeaWiQb59qzKcUcFMrU5X6AcHunr//2 xyh4lFczL2oid7CZnd1RZjouNbSOKfu2rP0pHE+6hNTMc10zKOUBbxJiZPqrtYuT IXTN1qe4oM1Ppqk3rb8BeiTDJXkbK+ZbqYw= -----END CERTIFICATE-----Generated at Mon Oct 20 08:21:05 2025 by rpki-client