$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ef473ce-486e-382c-9a27-bafd5937883a.roa File: 5ef473ce-486e-382c-9a27-bafd5937883a.roa (raw, json) Hash identifier: DXb2z2PScK+Ljl/1SoZLrvfkxvNkYJuJJWBDl88o01A= Subject key identifier: 63:2C:CB:94:9C:8C:90:71:5D:3E:B6:39:1C:7C:2A:BE:B8:0C:A5:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB85F8198BBBD454F348000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ef473ce-486e-382c-9a27-bafd5937883a.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:8061::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:5f:81:98:bb:bd:45:4f:34:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=dc937f6f-dfa0-4f49-a0a9-26aa6a00c021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f5:7b:d3:12:bf:68:83:e8:c0:c5:d1:3d:b2: 77:c0:fc:39:31:5e:1b:1e:36:cb:a5:6a:6f:82:85: 24:35:84:b7:0f:dc:a0:29:4f:52:71:56:8a:04:8a: 7f:98:56:1a:90:eb:72:d1:d6:78:8d:ce:e1:88:60: 92:9e:13:7f:b3:81:f1:69:45:2f:e1:d4:0a:57:28: 41:65:bd:b5:0b:ac:2c:31:6d:0c:ea:24:7b:35:fa: 02:c7:de:41:9d:52:35:da:a5:78:32:10:ec:d6:8d: ff:a5:e1:64:c5:a4:98:0a:94:c8:5a:9f:f7:55:5f: 84:8a:01:5d:11:a5:44:4e:3a:c0:90:d2:a3:a2:c2: 38:5b:43:1f:04:80:f2:a5:40:61:92:28:2d:b6:fb: 50:6e:d5:1f:e0:8d:2b:f2:9f:76:bd:17:44:dd:7e: 1c:31:bf:f9:0c:a5:c8:1d:05:44:a9:ed:97:8f:35: 5b:4d:2f:5a:43:db:5f:44:ec:a8:cb:44:a3:06:4f: 48:79:82:f2:1f:52:ea:b9:a4:07:ac:8e:fc:f3:47: c9:ff:bc:f9:ca:fc:76:ce:35:55:12:cb:84:12:1a: 6a:44:4f:2c:54:de:15:50:52:8b:ce:c6:dc:05:4e: b7:89:3b:2a:88:7c:76:50:68:65:16:fd:a0:0e:9f: 74:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:2C:CB:94:9C:8C:90:71:5D:3E:B6:39:1C:7C:2A:BE:B8:0C:A5:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ef473ce-486e-382c-9a27-bafd5937883a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8061::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:c0:b2:7f:80:a3:37:df:24:62:a3:26:34:14:35:1f:73:30: 28:0c:52:10:9c:de:7d:82:0d:63:89:30:64:54:81:8f:f6:39: e6:5e:6d:2a:18:17:4d:72:99:56:22:52:5a:4b:06:b2:30:48: ec:54:81:a8:5c:e3:67:30:8c:5c:04:57:58:b1:1e:99:99:fa: 04:da:80:9b:8c:1b:b2:f3:cd:b5:62:4b:af:e4:8e:d7:3f:25: 0f:e1:e8:f5:5b:07:e1:11:6b:d8:b5:e3:46:67:4f:ae:a3:22: fb:f9:be:08:ed:9a:29:58:c2:61:d4:40:70:26:e0:07:bf:f8: 33:8b:27:d4:d4:13:df:3d:0a:e9:50:bc:7a:b4:ee:a2:09:1a: 09:0a:b3:ff:aa:42:4e:ae:75:0e:47:45:4d:aa:1c:35:05:3b: b1:62:b0:cf:7c:7e:4e:ae:b1:a5:ca:06:06:f3:85:7f:4a:95: 5f:07:cf:10:9a:59:a4:5e:0a:22:07:f0:3e:7a:38:5b:34:c3: 53:36:35:32:d6:c2:7c:3e:0d:f0:38:cd:5c:88:7a:a4:72:c4: e8:fa:a6:4e:d9:2a:02:bb:85:6a:aa:ce:e3:0f:c2:96:c6:da: 9c:73:ee:e5:93:ff:58:00:5f:cb:a2:cf:37:5d:8b:84:53:f6: b0:fc:a6:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uF+BmLu9RU80gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZGM5MzdmNmYtZGZhMC00ZjQ5LWEwYTktMjZhYTZhMDBjMDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvV70xK/aIPowMXRPbJ3wPw5MV4bHjbLpWpv goUkNYS3D9ygKU9ScVaKBIp/mFYakOty0dZ4jc7hiGCSnhN/s4HxaUUv4dQKVyhB Zb21C6wsMW0M6iR7NfoCx95BnVI12qV4MhDs1o3/peFkxaSYCpTIWp/3VV+EigFd EaVETjrAkNKjosI4W0MfBIDypUBhkigttvtQbtUf4I0r8p92vRdE3X4cMb/5DKXI HQVEqe2XjzVbTS9aQ9tfROyoy0SjBk9IeYLyH1LquaQHrI7880fJ/7z5yvx2zjVV EsuEEhpqRE8sVN4VUFKLzsbcBU63iTsqiHx2UGhlFv2gDp906QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGMsy5ScjJBxXT62ORx8Kr64DKUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWVmNDczY2UtNDg2ZS0z ODJjLTlhMjctYmFmZDU5Mzc4ODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYBh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALrAsn+AozffJGKjJjQUNR9zMCgMUhCc3n2CDWOJMGRUgY/2OeZe bSoYF01ymVYiUlpLBrIwSOxUgahc42cwjFwEV1ixHpmZ+gTagJuMG7LzzbViS6/k jtc/JQ/h6PVbB+ERa9i140ZnT66jIvv5vgjtmilYwmHUQHAm4Ae/+DOLJ9TUE989 CulQvHq07qIJGgkKs/+qQk6udQ5HRU2qHDUFO7FisM98fk6usaXKBgbzhX9KlV8H zxCaWaReCiIH8D56OFs0w1M2NTLWwnw+DfA4zVyIeqRyxOj6pk7ZKgK7hWqqzuMP wpbG2pxz7uWT/1gAX8uizzddi4RT9rD8puE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:26 2025 by rpki-client