$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f256f1-fb8e-3f73-b8f8-4fcaef3bef43.roa File: 87f256f1-fb8e-3f73-b8f8-4fcaef3bef43.roa (raw, json) Hash identifier: 86lh4hXXkO8UlnzQUPG212jlyglTuzGVWhbwzpwhoNM= Subject key identifier: 18:2E:74:05:AD:02:CE:32:CA:E3:F6:56:AB:6D:C7:74:AA:CE:44:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7E928A45A2CB146D6B800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f256f1-fb8e-3f73-b8f8-4fcaef3bef43.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:c2b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:e9:28:a4:5a:2c:b1:46:d6:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=897352d0-cd73-4b7f-a6c4-4501636d1f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:cb:96:f1:6c:37:88:f4:05:be:b4:b0:ee: 41:01:aa:bf:73:a7:eb:c0:b4:ef:3b:e3:b2:d8:37: e1:d2:a4:d4:db:ac:10:87:08:34:81:6a:6f:c1:1d: 49:9b:b3:b6:df:80:9f:af:ce:43:71:b9:a6:fb:55: 1b:ca:98:9a:89:fe:07:55:78:32:b6:a0:13:fa:de: 9b:f3:84:c9:49:d2:0f:98:ad:9a:db:07:8c:e1:8b: c2:1d:1e:55:43:b9:17:09:f9:94:c0:99:a6:d9:5b: e5:f2:ec:87:a6:39:16:16:77:24:40:14:c1:3d:58: f2:58:40:87:18:75:7d:65:0c:f6:3c:82:1e:66:f9: 5f:6e:b2:09:13:f9:f0:ec:f5:bd:ed:e2:b3:51:29: cf:ee:64:58:54:8e:69:bc:3c:83:4b:91:75:e8:40: 7c:dc:f6:76:bd:c6:43:34:7a:a1:88:ab:52:32:98: 50:7a:7a:45:06:76:77:da:dc:a2:fd:b8:e0:82:e5: 7a:cf:9b:88:0c:23:a5:2a:32:61:b3:f3:d5:2c:81: c4:84:0a:62:89:e1:07:95:6d:18:32:94:ba:d8:e3: 37:a5:59:8f:6f:0b:12:cd:79:5e:d0:62:c3:b2:76: 18:ec:7d:cf:74:74:cf:38:22:18:a5:1a:6d:33:60: 6c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2E:74:05:AD:02:CE:32:CA:E3:F6:56:AB:6D:C7:74:AA:CE:44:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f256f1-fb8e-3f73-b8f8-4fcaef3bef43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c2b3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d8:da:5b:8c:6e:dd:da:ba:ad:62:02:48:18:67:3f:12:6f: 5e:50:4d:a7:30:92:c2:a7:b2:ac:1c:f3:02:e6:93:b2:c8:58: f6:33:4b:4f:95:4e:fa:bd:ab:d3:24:70:70:5d:2e:c0:78:b3: 67:1d:37:59:49:d8:c4:b0:b1:48:e1:06:b4:ff:24:cf:f6:0b: 32:d6:f4:87:ce:c2:1c:0d:ce:43:ad:8f:57:6f:9f:8f:97:59: cf:c0:b6:00:d7:be:59:b9:8f:a0:39:5d:a4:24:9f:75:fb:21: 45:4a:28:14:b7:1a:73:0f:6d:01:67:ab:7d:3f:a8:1d:57:b8: 82:67:1d:85:b9:88:cd:e3:b2:e4:b9:26:99:5e:8d:d3:2b:29: 11:0e:ff:8e:a0:d0:c9:32:f9:85:75:b2:4a:2d:c0:60:97:a4: 0d:27:89:a8:41:b1:38:ef:8a:07:9d:38:ec:50:d4:3b:7c:0c: 54:97:d9:a1:e2:43:72:7b:89:d5:9f:fd:b7:37:1b:7c:d2:6f: fa:34:0f:f7:c7:71:d5:5d:44:32:b6:90:aa:dc:1b:63:67:04: b9:90:62:50:e0:1b:e1:03:d9:e3:96:80:2b:d0:bd:af:d0:ca: 7b:c0:7e:3e:55:93:b6:d8:5c:38:f0:ec:be:4f:8c:d6:cf:f7: a0:47:dc:5b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t+kopFossUbWuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODk3MzUyZDAtY2Q3My00YjdmLWE2YzQtNDUwMTYzNmQxZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiTLlvFsN4j0Bb60sO5BAaq/c6frwLTvO+Oy 2Dfh0qTU26wQhwg0gWpvwR1Jm7O234Cfr85Dcbmm+1Ubypiaif4HVXgytqAT+t6b 84TJSdIPmK2a2weM4YvCHR5VQ7kXCfmUwJmm2Vvl8uyHpjkWFnckQBTBPVjyWECH GHV9ZQz2PIIeZvlfbrIJE/nw7PW97eKzUSnP7mRYVI5pvDyDS5F16EB83PZ2vcZD NHqhiKtSMphQenpFBnZ32tyi/bjgguV6z5uIDCOlKjJhs/PVLIHEhApiieEHlW0Y MpS62OM3pVmPbwsSzXle0GLDsnYY7H3PdHTPOCIYpRptM2BspwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBgudAWtAs4yyuP2Vqttx3SqzkTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdmMjU2ZjEtZmI4ZS0z ZjczLWI4ZjgtNGZjYWVmM2JlZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcKz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADbY2luMbt3auq1iAkgYZz8Sb15QTacwksKnsqwc8wLmk7LIWPYz S0+VTvq9q9MkcHBdLsB4s2cdN1lJ2MSwsUjhBrT/JM/2CzLW9IfOwhwNzkOtj1dv n4+XWc/AtgDXvlm5j6A5XaQkn3X7IUVKKBS3GnMPbQFnq30/qB1XuIJnHYW5iM3j suS5JplejdMrKREO/46g0Mky+YV1skotwGCXpA0niahBsTjvigedOOxQ1Dt8DFSX 2aHiQ3J7idWf/bc3G3zSb/o0D/fHcdVdRDK2kKrcG2NnBLmQYlDgG+ED2eOWgCvQ va/QynvAfj5Vk7bYXDjw7L5PjNbP96BH3Fs= -----END CERTIFICATE-----Generated at Mon Oct 20 10:05:51 2025 by rpki-client