$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/648d27f8-e4f5-3259-ac11-49d974920231.roa File: 648d27f8-e4f5-3259-ac11-49d974920231.roa (raw, json) Hash identifier: Mx9mHZnDroLQ/LZq/lKhQeyPukDe+RU2i2SrvkheVUg= Subject key identifier: 45:28:60:04:17:09:B9:96:3E:74:6C:0F:6C:53:AE:18:DD:1B:D6:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7B698621A3A54E687CF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/648d27f8-e4f5-3259-ac11-49d974920231.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33662 IP address blocks: 2001:559:1ab::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:b6:98:62:1a:3a:54:e6:87:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5ecfeba5-eaa6-4af5-8849-47d63334bde8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ac:bb:9a:53:54:ac:11:08:6b:40:51:b9:c4: c9:74:59:60:6b:76:37:05:57:9a:f1:81:62:d3:89: 5f:78:18:87:ec:0e:60:14:0f:8c:25:f9:86:f7:c2: 75:90:bb:44:51:e8:3c:4e:7a:aa:93:0e:90:a0:f0: 80:f8:05:73:ed:58:7e:f9:82:e5:12:12:59:b8:f2: aa:ce:90:49:32:22:7f:ea:de:f9:b3:bd:dd:42:a1: 56:68:bd:71:86:a8:df:98:d9:af:d8:ad:40:9c:30: 08:ed:23:ff:e9:dc:23:0a:d6:3c:1f:4d:cd:ef:76: c7:cf:06:01:59:95:92:9d:f4:64:d0:0a:30:7f:0d: e4:09:02:66:a1:35:c0:2e:07:5f:68:e9:a4:ed:d3: d7:bc:1e:75:ca:7b:e8:64:a0:53:68:c6:9e:8b:54: be:da:a8:f0:f2:da:17:b2:d6:77:76:4e:80:8f:26: e5:d1:9f:95:1d:e3:a5:ad:97:ce:96:c3:ea:f9:41: d9:eb:c3:27:5d:55:48:bd:25:98:ce:a9:95:87:66: 2a:53:dc:53:cf:99:1b:75:46:08:84:93:45:9e:d6: cf:1d:af:5f:fe:2d:b5:ad:aa:1e:c6:d4:d5:21:1f: 13:44:00:32:62:83:6a:e6:eb:e6:0a:cc:54:a9:78: a2:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:28:60:04:17:09:B9:96:3E:74:6C:0F:6C:53:AE:18:DD:1B:D6:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/648d27f8-e4f5-3259-ac11-49d974920231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:1ab::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:54:6c:5c:a3:d2:da:31:7a:5b:96:dd:03:aa:65:8c:68:aa: 49:46:c2:81:41:03:34:61:4d:b8:5b:d5:47:0b:0e:14:36:1a: b0:b4:8f:fd:f3:9c:3c:71:3c:51:e6:d6:ff:d9:1f:65:5b:4d: d8:e5:2c:1f:16:42:27:e7:12:f3:e4:cc:b4:c2:09:64:e4:bc: 7e:f7:89:63:b2:a9:7a:5f:85:9e:e2:44:dc:23:84:15:3f:63: 50:e7:bc:53:00:47:2e:85:eb:56:13:f4:5f:93:65:89:6b:f2: 90:44:b5:74:e9:18:46:39:78:36:23:26:36:05:ea:d9:bd:e1: 17:33:77:08:42:15:5c:3f:0b:51:61:c4:e8:6e:73:c0:1d:10: 66:73:7c:f4:4b:1c:cd:0e:d2:37:31:c1:17:04:c2:51:ce:16: 3b:d5:36:df:47:88:33:16:f4:71:76:6a:32:65:4e:10:0d:a4: 0e:82:0c:dc:43:f6:03:e7:36:98:26:e6:3f:de:95:84:1d:a7: a1:2d:02:6c:95:d6:54:27:92:87:9f:40:c7:60:0a:08:ef:dc: ba:78:35:da:c4:35:03:ab:a6:2a:12:1e:44:d0:69:8a:80:03: f9:7f:75:16:14:41:25:ba:72:7a:d3:cf:a4:af:f9:d3:cc:8d: f6:ba:45:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t7aYYho6VOaHz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NWVjZmViYTUtZWFhNi00YWY1LTg4NDktNDdkNjMzMzRiZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKy7mlNUrBEIa0BRucTJdFlga3Y3BVea8YFi 04lfeBiH7A5gFA+MJfmG98J1kLtEUeg8Tnqqkw6QoPCA+AVz7Vh++YLlEhJZuPKq zpBJMiJ/6t75s73dQqFWaL1xhqjfmNmv2K1AnDAI7SP/6dwjCtY8H03N73bHzwYB WZWSnfRk0Aowfw3kCQJmoTXALgdfaOmk7dPXvB51ynvoZKBTaMaei1S+2qjw8toX stZ3dk6Ajybl0Z+VHeOlrZfOlsPq+UHZ68MnXVVIvSWYzqmVh2YqU9xTz5kbdUYI hJNFntbPHa9f/i21raoextTVIR8TRAAyYoNq5uvmCsxUqXii0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEUoYAQXCbmWPnRsD2xTrhjdG9b8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQ4ZDI3ZjgtZTRmNS0z MjU5LWFjMTEtNDlkOTc0OTIwMjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQGr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJUbFyj0toxeluW3QOqZYxoqklGwoFBAzRhTbhb1UcLDhQ2GrC0 j/3znDxxPFHm1v/ZH2VbTdjlLB8WQifnEvPkzLTCCWTkvH73iWOyqXpfhZ7iRNwj hBU/Y1DnvFMARy6F61YT9F+TZYlr8pBEtXTpGEY5eDYjJjYF6tm94RczdwhCFVw/ C1FhxOhuc8AdEGZzfPRLHM0O0jcxwRcEwlHOFjvVNt9HiDMW9HF2ajJlThANpA6C DNxD9gPnNpgm5j/elYQdp6EtAmyV1lQnkoefQMdgCgjv3Lp4NdrENQOrpioSHkTQ aYqAA/l/dRYUQSW6cnrTz6Sv+dPMjfa6RYc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:32:02 2025 by rpki-client