$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d38c8fc-4a33-3a22-8394-f034c8348809.roa File: 5d38c8fc-4a33-3a22-8394-f034c8348809.roa (raw, json) Hash identifier: 5cxS1TFbV+B4LYpiBSHskJno2egjLWbMb933KqO8bXA= Subject key identifier: 6D:6E:0E:E9:A9:2B:37:3C:62:80:17:88:B4:45:93:3D:1D:39:23:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB875629177F22186F41F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d38c8fc-4a33-3a22-8394-f034c8348809.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:559:45d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:75:62:91:77:f2:21:86:f4:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=2672b6c1-3982-4a02-9482-a3e94a895206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:04:09:4a:0a:ac:be:5e:6a:0b:27:e4:88:2f: 9a:ed:71:f3:57:81:e0:d1:20:d7:61:1a:76:c5:55: 64:d0:74:f9:86:a3:92:a2:48:72:fb:48:4c:f4:20: b1:b3:f4:8b:f3:45:13:21:cb:c3:68:bf:14:41:1f: 37:ea:6b:49:9c:cf:24:b6:f6:c4:47:cd:62:8c:3d: e9:eb:60:46:c6:4e:7c:43:a1:3d:5f:92:13:9e:a9: 64:42:19:85:43:b8:51:2f:50:91:60:34:e2:ef:08: 3e:84:e7:d9:a7:fd:f9:c0:70:ea:82:87:aa:6d:26: 57:51:48:c4:50:6a:c4:42:12:16:e7:26:a2:ec:52: 98:4e:27:32:c1:7c:e0:a6:c3:84:2a:38:86:ba:36: 38:05:75:5b:33:47:7c:c6:f4:2c:17:ac:c7:8f:b1: 1d:2f:3b:3c:18:5f:87:c1:80:6f:51:5a:6a:54:46: a6:06:ee:f3:b4:bf:6c:bf:cf:15:ed:7a:35:e4:62: 1f:0b:a0:64:04:f9:00:48:c0:1f:08:a2:49:f4:b4: 78:0e:48:6b:36:0a:2d:4b:6b:ab:43:44:2a:b8:b0: 72:44:ab:d7:f2:09:ac:17:4e:3f:95:99:7b:ab:37: 11:1b:94:23:b9:55:95:c2:8e:9b:29:ef:32:4c:6d: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6E:0E:E9:A9:2B:37:3C:62:80:17:88:B4:45:93:3D:1D:39:23:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d38c8fc-4a33-3a22-8394-f034c8348809.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:45d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:c9:bb:46:a3:c2:e9:d5:2a:91:bd:c3:88:8a:e7:5c:20:e3: 24:21:87:90:17:df:56:cd:38:e7:c8:d3:57:e6:87:79:4c:fb: 32:ec:8b:fa:42:79:d0:d2:8c:00:0c:1d:d5:9d:70:36:b2:2b: 49:12:3a:8b:4c:1e:2a:45:66:47:1e:57:02:c7:38:6a:bd:f1: 8d:b5:4e:61:2c:90:b5:17:73:31:97:24:5a:a2:a7:e6:d3:d7: ae:9a:b5:ab:73:dc:22:83:fe:f2:6c:49:a1:2b:c7:aa:5f:b5: 66:65:c0:9e:61:a9:96:17:04:1f:dc:f7:74:e2:47:02:c4:cf: b3:85:91:da:23:72:c0:1b:38:ed:af:7e:d4:fa:50:5d:74:42: cd:04:cd:04:fe:43:0a:a2:bc:35:02:42:ff:ab:75:ca:fc:49: fa:1a:ec:f5:36:71:40:7f:f8:c7:27:fc:2a:4a:e9:4b:f8:67: e8:8e:90:28:77:bc:c4:a2:4a:f2:cd:a5:69:47:f3:d8:93:9a: ff:6a:52:94:c4:aa:b9:80:27:8d:b6:91:ba:5d:38:51:eb:6b: 95:03:ff:da:0f:76:86:51:e9:09:46:93:9f:09:a1:64:12:9d: 60:0f:01:07:df:c9:a0:b9:2c:40:b3:79:af:37:14:5b:6f:d7: f8:e0:71:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uHVikXfyIYb0H4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MjY3MmI2YzEtMzk4Mi00YTAyLTk0ODItYTNlOTRhODk1MjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgQJSgqsvl5qCyfkiC+a7XHzV4Hg0SDXYRp2 xVVk0HT5hqOSokhy+0hM9CCxs/SL80UTIcvDaL8UQR836mtJnM8ktvbER81ijD3p 62BGxk58Q6E9X5ITnqlkQhmFQ7hRL1CRYDTi7wg+hOfZp/35wHDqgoeqbSZXUUjE UGrEQhIW5yai7FKYTicywXzgpsOEKjiGujY4BXVbM0d8xvQsF6zHj7EdLzs8GF+H wYBvUVpqVEamBu7ztL9sv88V7Xo15GIfC6BkBPkASMAfCKJJ9LR4DkhrNgotS2ur Q0QquLByRKvX8gmsF04/lZl7qzcRG5QjuVWVwo6bKe8yTG0mXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG1uDumpKzc8YoAXiLRFkz0dOSMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWQzOGM4ZmMtNGEzMy0z YTIyLTgzOTQtZjAzNGM4MzQ4ODA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQRd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMfJu0ajwunVKpG9w4iK51wg4yQhh5AX31bNOOfI01fmh3lM+zLs i/pCedDSjAAMHdWdcDayK0kSOotMHipFZkceVwLHOGq98Y21TmEskLUXczGXJFqi p+bT166atatz3CKD/vJsSaErx6pftWZlwJ5hqZYXBB/c93TiRwLEz7OFkdojcsAb OO2vftT6UF10Qs0EzQT+QwqivDUCQv+rdcr8Sfoa7PU2cUB/+Mcn/CpK6Uv4Z+iO kCh3vMSiSvLNpWlH89iTmv9qUpTEqrmAJ422kbpdOFHra5UD/9oPdoZR6QlGk58J oWQSnWAPAQffyaC5LECzea83FFtv1/jgceg= -----END CERTIFICATE-----Generated at Mon Oct 20 02:35:13 2025 by rpki-client