$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f5f686e-86b5-31fd-b0fe-5c66acde315a.roa File: 5f5f686e-86b5-31fd-b0fe-5c66acde315a.roa (raw, json) Hash identifier: 0AQCXCvLN8+LgbOVEBXZ9cA26f4GVcIWRhLJLtfFXno= Subject key identifier: C4:A0:CF:E7:0C:F2:B0:01:D5:AF:34:B1:BF:D4:D9:D5:39:36:71:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB85D2CC12E9DA5240F3180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f5f686e-86b5-31fd-b0fe-5c66acde315a.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:4a8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:5d:2c:c1:2e:9d:a5:24:0f:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5b72b67e-1411-495c-8179-9e9dfdd50b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:77:58:2b:61:5e:04:40:44:37:99:f0:1c: fd:e5:62:c5:83:2e:ba:38:83:27:22:94:4b:c9:83: 5a:ef:ab:dc:7e:fc:33:ff:35:5f:ab:0f:12:de:96: 1f:9d:5c:ff:36:d2:9c:a6:24:e9:46:b0:db:cc:43: 54:02:91:c4:28:a2:71:83:9d:ec:10:ed:65:b1:d0: a0:01:5c:33:98:70:81:0d:89:c7:a2:35:f9:7e:07: 3e:c4:4f:b5:74:1a:30:5f:ed:7a:27:9d:c2:b4:27: 6b:f9:95:36:67:93:f6:3a:fa:51:cb:5d:41:96:6c: ab:c7:1e:32:d7:8f:2a:dd:aa:f9:9e:9f:43:56:0e: 64:cb:b8:7e:89:e6:4e:8b:a4:8b:5f:2b:58:84:82: 63:6d:c8:f0:86:6c:fd:4d:5e:cc:8a:33:e0:dc:4a: 84:cf:e9:d1:06:75:4d:c7:f0:2d:bc:fb:d7:6c:ef: cb:b7:73:95:2d:76:24:77:1e:18:8d:6f:e0:07:80: 2f:8e:8b:ce:d9:c0:e1:82:e9:8d:ec:00:f7:b4:b6: dc:a9:3a:0c:24:f3:93:1b:40:ac:0e:64:92:7d:83: 0e:78:f8:7f:17:66:3d:c8:ff:ad:29:04:1c:f1:5b: 62:da:01:12:1d:65:ee:40:62:1a:68:c1:89:98:8a: b6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A0:CF:E7:0C:F2:B0:01:D5:AF:34:B1:BF:D4:D9:D5:39:36:71:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f5f686e-86b5-31fd-b0fe-5c66acde315a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:4a8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:31:68:30:df:7a:cd:1d:d5:65:a1:b1:35:ea:22:c4:07:42: fb:bd:b6:ef:51:22:1c:e5:4a:7b:3b:87:c6:ec:91:49:b6:58: 43:60:2a:eb:d3:d7:1e:8c:2a:f1:62:8d:20:bf:89:92:5a:37: 47:07:f4:98:74:c0:0f:46:d8:b2:5d:4a:d9:cb:e8:dc:8c:81: 92:0c:5c:95:e6:20:6b:5f:35:a8:d2:91:47:73:a1:5a:6a:1c: c3:7c:9d:a3:f7:20:5d:02:36:12:0d:ec:a3:b4:6e:c7:cb:21: 42:06:6b:ae:3e:04:1b:73:08:98:2b:ff:d1:a7:83:40:f3:41: 54:85:d4:ae:06:b8:6f:82:da:ca:b4:75:54:ee:bf:61:49:60: 23:71:f3:81:f1:23:50:3c:98:1e:b5:53:f4:e7:4b:72:5c:eb: cb:da:97:91:1c:3a:ee:0b:0f:9a:fe:3a:23:63:c4:a9:cd:7a: 1a:b5:40:41:db:13:fc:0c:e6:43:ed:13:5c:70:ba:8f:41:be: bd:9c:bf:5a:8a:c3:ad:ae:46:da:68:04:22:e1:bf:62:d4:9b: a2:28:87:66:4e:e0:6b:7d:c5:97:f0:cd:29:f7:83:82:53:65: 6a:a5:c2:44:93:22:95:7d:56:fc:48:9f:ca:34:d8:cf:3b:de: c4:9c:aa:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uF0swS6dpSQPMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NWI3MmI2N2UtMTQxMS00OTVjLTgxNzktOWU5ZGZkZDUwYjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipZ3WCthXgRARDeZ8Bz95WLFgy66OIMnIpRL yYNa76vcfvwz/zVfqw8S3pYfnVz/NtKcpiTpRrDbzENUApHEKKJxg53sEO1lsdCg AVwzmHCBDYnHojX5fgc+xE+1dBowX+16J53CtCdr+ZU2Z5P2OvpRy11Blmyrxx4y 148q3ar5np9DVg5ky7h+ieZOi6SLXytYhIJjbcjwhmz9TV7MijPg3EqEz+nRBnVN x/AtvPvXbO/Lt3OVLXYkdx4YjW/gB4AvjovO2cDhgumN7AD3tLbcqToMJPOTG0Cs DmSSfYMOePh/F2Y9yP+tKQQc8Vti2gESHWXuQGIaaMGJmIq2rQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMSgz+cM8rAB1a80sb/U2dU5NnH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWY1ZjY4NmUtODZiNS0z MWZkLWIwZmUtNWM2NmFjZGUzMTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQSo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHkxaDDfes0d1WWhsTXqIsQHQvu9tu9RIhzlSns7h8bskUm2WENg KuvT1x6MKvFijSC/iZJaN0cH9Jh0wA9G2LJdStnL6NyMgZIMXJXmIGtfNajSkUdz oVpqHMN8naP3IF0CNhIN7KO0bsfLIUIGa64+BBtzCJgr/9Gng0DzQVSF1K4GuG+C 2sq0dVTuv2FJYCNx84HxI1A8mB61U/TnS3Jc68val5EcOu4LD5r+OiNjxKnNehq1 QEHbE/wM5kPtE1xwuo9Bvr2cv1qKw62uRtpoBCLhv2LUm6Ioh2ZO4Gt9xZfwzSn3 g4JTZWqlwkSTIpV9VvxIn8o02M873sScqr0= -----END CERTIFICATE-----Generated at Mon Oct 20 14:40:34 2025 by rpki-client