$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60900d90-c5f0-350e-8739-bf2cf28c5287.roa File: 60900d90-c5f0-350e-8739-bf2cf28c5287.roa (raw, json) Hash identifier: nAB21xCaJGaUGh+NnEtJ+t6g+OCvm1PGyTmlAxCgYvY= Subject key identifier: A9:A1:95:C1:F1:74:A4:22:6C:DF:1B:E5:94:0A:4B:E8:0B:19:4C:3F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9FAF3D3517A07FE4165C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60900d90-c5f0-350e-8739-bf2cf28c5287.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:c44b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:fa:f3:d3:51:7a:07:fe:41:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=bfe27fb2-ff67-420c-9c7f-b1eefcbf0ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:ca:e5:25:3b:23:12:4b:9b:b2:15:bb:b9: 3f:80:5a:c8:64:52:64:6a:b1:89:c9:41:66:70:89: e9:15:51:c1:6d:6f:36:8d:2b:39:d5:90:01:88:94: 26:35:0b:0d:5a:35:14:59:1b:43:ab:d6:7c:f3:34: 15:1e:77:22:0e:89:2a:7e:47:3f:0d:02:8f:65:cc: b5:a4:b0:a0:5c:f5:8b:37:1f:56:2f:8f:5a:68:67: c0:6c:3f:b5:ce:e9:90:9d:b2:36:a4:54:60:38:fb: cf:07:a7:31:55:ee:e8:c8:79:be:9e:10:b5:23:3a: 7e:fd:c9:bb:74:9f:8a:cf:94:25:da:4f:a8:2d:dd: 15:e9:14:10:a6:3f:2d:f7:fb:2a:31:76:4d:be:27: c5:b5:68:34:48:50:09:19:a2:c8:91:b4:75:df:a1: a4:64:a2:1e:28:76:ef:97:b5:9f:ef:1b:79:79:f6: 5f:b3:5c:27:76:29:a4:0e:71:73:ec:bc:fb:89:3e: ae:f8:fe:05:60:70:c9:01:3d:df:9c:f1:fd:09:38: 6d:d1:ad:17:04:b8:ef:e6:66:de:5d:e6:f3:40:9b: 86:ae:7f:1b:df:51:4e:8c:f4:a0:66:c6:b2:db:24: 49:77:2c:6a:b9:69:96:04:6c:ef:04:2e:07:25:24: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A1:95:C1:F1:74:A4:22:6C:DF:1B:E5:94:0A:4B:E8:0B:19:4C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60900d90-c5f0-350e-8739-bf2cf28c5287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c44b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ef:6c:44:92:d0:a3:b6:91:31:46:75:a0:c3:12:cc:3f:8d: a5:9b:12:d8:d7:fe:35:35:30:42:fe:ac:15:81:a4:1c:8d:a1: b5:5b:bf:09:6f:e3:58:d6:27:b4:e3:8c:01:dc:9a:76:56:8a: 4f:d1:db:df:af:39:34:22:91:ef:21:ed:46:15:ea:82:34:58: 99:8f:51:2d:50:d8:17:0a:90:d1:ff:75:bf:82:b1:41:14:41: 17:33:9f:2c:0d:86:1e:91:7e:fd:c3:53:2d:da:38:d0:7e:af: cf:90:1b:8a:bb:22:95:bb:28:cd:9d:94:9a:48:fe:0b:b4:49: d4:a8:51:8f:0e:3c:47:8e:51:0e:70:98:13:af:a0:7a:dd:d6: 25:a6:ba:14:6e:3d:3f:ab:1e:ea:e2:c3:af:94:e5:29:99:af: 17:b7:fe:41:c5:ad:4c:37:4b:f5:5c:59:a1:30:f7:9e:58:4a: c3:61:84:b6:52:e5:a1:c6:20:cc:1f:a3:b1:86:4b:c2:cf:75: c3:b6:0b:44:58:61:71:53:91:4d:d7:28:e3:83:6e:fb:04:a8: 19:41:c2:25:6b:ec:7d:4a:20:29:23:fe:c1:f0:95:9b:da:3a: f8:32:c8:2f:bc:40:db:6a:53:a8:66:d7:a5:75:78:b7:ac:e0: ed:6b:b1:1f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ufrz01F6B/5BZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YmZlMjdmYjItZmY2Ny00MjBjLTljN2YtYjFlZWZjYmYwYWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzjK5SU7IxJLm7IVu7k/gFrIZFJkarGJyUFm cInpFVHBbW82jSs51ZABiJQmNQsNWjUUWRtDq9Z88zQVHnciDokqfkc/DQKPZcy1 pLCgXPWLNx9WL49aaGfAbD+1zumQnbI2pFRgOPvPB6cxVe7oyHm+nhC1Izp+/cm7 dJ+Kz5Ql2k+oLd0V6RQQpj8t9/sqMXZNvifFtWg0SFAJGaLIkbR136GkZKIeKHbv l7Wf7xt5efZfs1wndimkDnFz7Lz7iT6u+P4FYHDJAT3fnPH9CTht0a0XBLjv5mbe XebzQJuGrn8b31FOjPSgZsay2yRJdyxquWmWBGzvBC4HJSTxvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKmhlcHxdKQibN8b5ZQKS+gLGUw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjA5MDBkOTAtYzVmMC0z NTBlLTg3MzktYmYyY2YyOGM1Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcRL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALfvbESS0KO2kTFGdaDDEsw/jaWbEtjX/jU1MEL+rBWBpByNobVb vwlv41jWJ7TjjAHcmnZWik/R29+vOTQike8h7UYV6oI0WJmPUS1Q2BcKkNH/db+C sUEUQRcznywNhh6Rfv3DUy3aONB+r8+QG4q7IpW7KM2dlJpI/gu0SdSoUY8OPEeO UQ5wmBOvoHrd1iWmuhRuPT+rHuriw6+U5SmZrxe3/kHFrUw3S/VcWaEw955YSsNh hLZS5aHGIMwfo7GGS8LPdcO2C0RYYXFTkU3XKOODbvsEqBlBwiVr7H1KICkj/sHw lZvaOvgyyC+8QNtqU6hm16V1eLes4O1rsR8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:11:11 2025 by rpki-client