$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645386ca-8c56-31da-b422-07428a6f6386.roa File: 645386ca-8c56-31da-b422-07428a6f6386.roa (raw, json) Hash identifier: 7dkESdhwFWIEmvJvEm8WHQiaU/LmziO4MkGc/cmjMMk= Subject key identifier: A2:1A:9E:A8:1E:A6:9B:02:B8:A1:44:E8:B4:8D:C1:5C:F6:44:C9:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB88A09243269A7AA7AB340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645386ca-8c56-31da-b422-07428a6f6386.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 26868 IP address blocks: 2001:559:8001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:8a:09:24:32:69:a7:aa:7a:b3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=443f7386-faa7-486f-a427-d92228be1a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4c:a4:1e:59:06:b5:65:bf:8f:a1:05:23:6a: e3:50:e0:cc:4a:e3:4b:e8:df:30:d0:f4:05:52:15: 67:0e:87:a9:a6:1c:c8:c6:44:d3:15:b8:c1:bf:15: e7:30:59:50:54:16:f8:e3:ae:cb:9d:85:ed:3f:37: 97:03:03:34:4a:47:42:ea:f8:3b:06:12:ff:e6:53: 50:83:27:3a:ec:c2:8b:23:f2:42:ff:f0:06:ba:63: 02:d0:77:08:70:0c:92:3f:40:19:f5:60:0e:52:a1: a0:b7:30:14:f9:2b:4c:9c:04:9d:7e:c7:9f:c7:b0: e5:03:42:0b:76:2c:ad:4e:19:a9:ee:e2:58:0f:bc: 4f:fc:4d:10:9a:ec:f2:8d:86:74:08:49:19:d2:9f: 12:24:e2:76:e3:84:71:58:f1:6a:21:43:02:30:a1: 47:f7:87:de:25:65:e5:22:51:45:98:18:6c:e1:0e: 6f:a2:e8:1e:a1:73:b8:31:07:c8:e5:fa:1e:85:9f: 5d:21:c4:35:56:b7:40:de:0c:b3:0a:8f:02:5f:20: 7a:e6:18:bc:44:e7:85:b0:75:09:4c:db:a5:32:1d: da:6d:d2:c9:73:86:c2:5d:34:e3:1b:87:b0:b2:26: d5:6a:19:36:e3:95:c5:c9:1c:2d:5c:16:17:37:2b: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:1A:9E:A8:1E:A6:9B:02:B8:A1:44:E8:B4:8D:C1:5C:F6:44:C9:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/645386ca-8c56-31da-b422-07428a6f6386.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b3:51:a1:da:9f:b4:92:de:00:cd:dc:2f:c9:33:b4:1c:30: 8b:1f:ea:f3:71:79:2c:07:b1:18:2a:b4:0a:39:3b:6d:e5:3e: 93:a3:67:6a:9c:a7:09:d1:38:69:87:cc:a3:0f:5e:d9:be:ce: a5:11:a1:46:c9:77:9a:a9:22:07:41:1f:70:17:21:e2:df:ac: ca:10:bc:9a:7d:1f:c4:4b:bb:3b:12:fd:04:7b:41:b7:f9:59: 02:a6:ce:0c:16:db:ec:23:38:9d:2d:1e:5c:fa:d2:b1:8a:7a: d4:7c:a7:27:4f:5d:7f:bd:c7:a3:0b:99:65:34:05:40:8c:e4: 52:38:e1:6d:c9:34:4d:da:78:99:07:70:5b:b1:6d:f5:f0:6a: 6d:71:38:2f:88:2a:f5:7a:b8:dd:23:e9:f6:f5:2d:ee:88:86: 6f:40:48:60:c0:ca:f2:f7:c6:55:27:20:4a:d9:db:78:59:04: 8e:83:2a:27:23:02:1c:2a:a5:a5:21:59:35:cb:4d:e4:30:c4: a6:ae:92:2e:29:61:dc:ce:9a:c8:5a:df:58:cb:73:0a:20:02: d1:e2:28:6b:b7:a8:e3:73:a5:4c:52:aa:95:d8:1d:9c:a0:19: bc:be:a2:79:2d:ce:fd:9e:37:02:dc:cb:ca:78:b9:f1:92:e3: 26:f6:fa:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uIoJJDJpp6p6s0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NDQzZjczODYtZmFhNy00ODZmLWE0MjctZDkyMjI4YmUxYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUykHlkGtWW/j6EFI2rjUODMSuNL6N8w0PQF UhVnDoepphzIxkTTFbjBvxXnMFlQVBb4467LnYXtPzeXAwM0SkdC6vg7BhL/5lNQ gyc67MKLI/JC//AGumMC0HcIcAySP0AZ9WAOUqGgtzAU+StMnASdfsefx7DlA0IL diytThmp7uJYD7xP/E0QmuzyjYZ0CEkZ0p8SJOJ244RxWPFqIUMCMKFH94feJWXl IlFFmBhs4Q5vougeoXO4MQfI5foehZ9dIcQ1VrdA3gyzCo8CXyB65hi8ROeFsHUJ TNulMh3abdLJc4bCXTTjG4ewsibVahk245XFyRwtXBYXNyt5zQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKIanqgeppsCuKFE6LSNwVz2RMl3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQ1Mzg2Y2EtOGM1Ni0z MWRhLWI0MjItMDc0MjhhNmY2Mzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIyzUaHan7SS3gDN3C/JM7QcMIsf6vNxeSwHsRgqtAo5O23lPpOj Z2qcpwnROGmHzKMPXtm+zqURoUbJd5qpIgdBH3AXIeLfrMoQvJp9H8RLuzsS/QR7 Qbf5WQKmzgwW2+wjOJ0tHlz60rGKetR8pydPXX+9x6MLmWU0BUCM5FI44W3JNE3a eJkHcFuxbfXwam1xOC+IKvV6uN0j6fb1Le6Ihm9ASGDAyvL3xlUnIErZ23hZBI6D KicjAhwqpaUhWTXLTeQwxKauki4pYdzOmsha31jLcwogAtHiKGu3qONzpUxSqpXY HZygGby+onktzv2eNwLcy8p4ufGS4yb2+iE= -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:38 2025 by rpki-client