$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa File: 7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa (raw, json) Hash identifier: nUvSa2gd5Giu5uQ1gXN4vKaUjYPPYLEpas/9+K0DFg4= Subject key identifier: 79:2F:6B:C4:6E:A4:A8:DA:24:48:C7:B3:A6:67:48:93:01:7D:22:DC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7D1A49BC439880C74B4C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:d1:a4:9b:c4:39:88:0c:74:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=16e28a7e-de6d-4316-a9ac-7229028dc4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a2:89:ff:c0:c2:8b:cb:37:58:9f:18:0e:f5: d4:27:25:57:d5:bb:53:23:ed:06:6c:ec:3f:18:15: c1:d7:5a:51:45:3f:be:af:a4:ff:f5:0a:d4:0c:3d: 88:e0:19:e6:2b:e2:ce:08:45:cb:7e:5f:1f:3d:bd: e7:6a:74:4c:e4:74:93:1c:0e:fc:4a:e8:d1:9b:27: db:71:af:f0:86:49:f5:19:cf:a2:71:a8:9c:14:a3: 22:9c:b8:cc:f1:a6:b8:87:63:50:97:a6:b9:98:e9: 4c:e6:88:a8:ae:45:65:63:21:fa:21:b1:b3:0d:ee: 3c:1d:33:2f:d7:8d:93:94:7c:53:76:b7:01:f1:81: af:93:fb:04:9f:7a:d6:46:12:d1:e5:bd:b9:f5:40: 30:45:63:a7:07:ff:96:a4:30:72:3a:ad:5f:ad:3c: 64:73:60:40:10:39:dd:8c:6c:e1:79:7c:e0:b0:18: 8f:fc:46:71:c1:98:f4:ce:db:fe:5f:c2:70:c5:10: e6:6d:6a:34:cf:89:db:29:d7:e0:52:02:a2:d3:90: d4:9a:ec:1a:33:8d:54:a8:3e:e8:a4:57:a7:13:51: 3c:04:10:cd:2d:bb:57:36:3a:62:be:52:04:87:ac: 43:de:fd:64:06:c6:02:3a:1d:06:59:07:27:65:ae: b2:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2F:6B:C4:6E:A4:A8:DA:24:48:C7:B3:A6:67:48:93:01:7D:22:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7d1f100a-fb1a-3f6c-9c22-4f76f239da5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:63:21:a5:8a:a1:d3:63:12:1d:9f:0a:f8:c1:0b:91:b2:0b: e6:ea:c6:06:43:db:5f:23:2c:61:09:66:2c:f2:35:a7:8a:03: 5e:c4:05:65:c7:51:93:27:93:97:4e:a4:d5:c9:de:63:46:58: b0:84:39:52:0f:d0:4c:0c:14:24:13:2f:a0:36:66:62:b3:24: 1d:86:c6:d6:d4:ec:41:0f:ad:a3:13:14:10:da:56:17:eb:a7: b8:fa:f7:d1:68:1e:27:e1:a6:ff:e3:a4:d4:6e:eb:6a:8e:97: 8b:cc:89:cc:62:cd:0d:13:19:11:32:9d:f0:ff:a7:db:55:93: 81:8a:eb:f3:ea:56:76:d4:00:e4:87:10:21:dd:1f:27:73:34: 6e:2f:aa:61:e1:f8:89:f5:0f:7b:c7:93:9e:4e:3b:a8:c8:7d: cf:62:f9:ec:ec:eb:cf:e0:3c:ca:3c:aa:ef:a0:c7:91:6a:fb: 5c:e4:03:63:54:82:40:1c:e3:07:bb:e3:d7:4c:96:ce:98:ef: b8:3b:b8:9e:f6:65:28:78:8b:e4:77:bc:45:d8:90:46:d6:bc: ac:25:fe:02:79:13:89:60:a3:15:04:58:58:48:d7:9e:6e:bb: 48:96:d8:09:44:ac:5b:e6:3d:b5:6e:e5:37:28:aa:02:a7:99: 16:17:b4:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t9Gkm8Q5iAx0tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTZlMjhhN2UtZGU2ZC00MzE2LWE5YWMtNzIyOTAyOGRjNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKKJ/8DCi8s3WJ8YDvXUJyVX1btTI+0GbOw/ GBXB11pRRT++r6T/9QrUDD2I4BnmK+LOCEXLfl8fPb3nanRM5HSTHA78SujRmyfb ca/whkn1Gc+icaicFKMinLjM8aa4h2NQl6a5mOlM5oiorkVlYyH6IbGzDe48HTMv 142TlHxTdrcB8YGvk/sEn3rWRhLR5b259UAwRWOnB/+WpDByOq1frTxkc2BAEDnd jGzheXzgsBiP/EZxwZj0ztv+X8JwxRDmbWo0z4nbKdfgUgKi05DUmuwaM41UqD7o pFenE1E8BBDNLbtXNjpivlIEh6xD3v1kBsYCOh0GWQcnZa6y1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHkva8RupKjaJEjHs6ZnSJMBfSLcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2QxZjEwMGEtZmIxYS0z ZjZjLTljMjItNGY3NmYyMzlkYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEBjIaWKodNjEh2fCvjBC5GyC+bqxgZD218jLGEJZizyNaeKA17E BWXHUZMnk5dOpNXJ3mNGWLCEOVIP0EwMFCQTL6A2ZmKzJB2GxtbU7EEPraMTFBDa Vhfrp7j699FoHifhpv/jpNRu62qOl4vMicxizQ0TGREynfD/p9tVk4GK6/PqVnbU AOSHECHdHydzNG4vqmHh+In1D3vHk55OO6jIfc9i+ezs68/gPMo8qu+gx5Fq+1zk A2NUgkAc4we749dMls6Y77g7uJ72ZSh4i+R3vEXYkEbWvKwl/gJ5E4lgoxUEWFhI 155uu0iW2AlErFvmPbVu5TcoqgKnmRYXtMM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:58 2025 by rpki-client