$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89964be6-9bcc-3ef6-9156-3e62fe1a2ed1.roa File: 89964be6-9bcc-3ef6-9156-3e62fe1a2ed1.roa (raw, json) Hash identifier: OpL+spct/GDnS0qBICRi5HEC+7RmqDFzwjT8i99hvjs= Subject key identifier: B2:34:40:96:86:50:F1:DB:8B:5C:DE:14:81:30:E2:C8:09:FC:C4:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB839408EDBFABDDDC62C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89964be6-9bcc-3ef6-9156-3e62fe1a2ed1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:5f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:39:40:8e:db:fa:bd:dd:c6:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=bfd7d49b-0dfa-4de5-b572-81e06429793b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7d:b4:34:2b:20:29:dd:83:43:1b:09:44:f6: a1:32:e0:c7:e0:a9:0f:01:d0:ba:90:26:eb:47:58: 58:94:3a:7e:9a:a0:06:57:2f:2c:57:00:4b:d0:cd: e9:04:62:2a:45:64:5d:aa:68:bd:05:38:d4:36:df: 68:71:95:44:09:ce:8c:ce:a9:09:9a:48:c2:7c:3f: 8f:09:88:bf:7e:04:51:37:ca:b2:40:77:43:01:ce: ff:08:1e:38:d6:f7:36:53:3e:73:8f:f6:b0:fd:ca: 3a:ae:e4:aa:7c:08:0a:83:05:ab:54:82:5a:fc:ea: 0e:5f:fa:62:1d:79:76:36:ee:30:3d:d2:10:8e:f6: 7d:68:73:b0:44:91:64:04:54:4b:a8:47:db:53:ae: cd:c5:96:69:6d:11:30:15:94:f9:2b:4b:af:22:4b: f4:e5:8d:0d:58:c7:19:70:4a:2d:49:cf:d0:8d:bd: c6:f5:60:03:c7:b7:3a:70:8f:60:c0:d7:3a:84:3f: 05:56:e9:20:a3:a3:2a:70:1a:ee:ce:a3:d8:f7:55: 8e:34:17:a9:36:60:61:cb:b9:09:fd:71:f7:f9:e9: 6d:5b:ae:19:7c:30:a2:52:0c:bf:7c:ff:14:3e:8b: ef:0a:51:5f:1d:82:ff:e7:06:2c:8d:08:b4:1a:50: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:34:40:96:86:50:F1:DB:8B:5C:DE:14:81:30:E2:C8:09:FC:C4:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89964be6-9bcc-3ef6-9156-3e62fe1a2ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:5f8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:8f:bf:ab:04:da:d8:c8:c3:79:51:0c:6f:c1:08:d4:9b:2f: c0:e0:f6:92:9b:f6:9f:c3:26:b5:cd:a9:2e:96:2a:3b:a8:d6: fa:51:dd:97:d7:28:1d:c5:9f:a1:99:cf:31:88:33:df:75:4c: a6:47:17:5d:b1:c1:e1:9b:80:83:61:03:05:80:85:fe:2f:80: 3e:4b:5a:63:6d:a3:3d:9c:b4:2a:d9:f2:4d:52:aa:7a:ee:9d: 3b:06:90:b6:a7:1e:37:15:fd:e0:69:96:e6:d4:c4:69:5d:9a: 5b:d3:3d:4c:78:52:b8:ea:dd:ba:d3:74:87:c3:60:e8:7a:0a: 9b:14:cb:03:0d:fd:cf:4e:ef:c1:fe:28:0a:e5:62:1c:c0:5c: d7:4c:71:37:c4:89:1b:c6:78:43:49:0a:66:ca:97:87:74:a6: ca:94:20:2f:b5:ad:b0:72:be:2e:3e:55:44:6e:55:04:00:dd: 2b:b2:24:2a:32:cf:7a:f5:21:58:82:72:55:be:bc:d1:65:0b: 76:e1:03:0f:3e:82:a8:11:ba:d4:99:8f:0c:2b:3e:55:f1:c4: b1:7e:80:6b:b7:34:1f:51:35:38:1d:fd:1f:e4:bb:b7:57:f7: 1c:4d:3e:9a:91:1b:2a:0f:66:d8:18:d6:76:2a:bb:4d:c0:bc: e3:99:84:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uDlAjtv6vd3GLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YmZkN2Q0OWItMGRmYS00ZGU1LWI1NzItODFlMDY0Mjk3OTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX20NCsgKd2DQxsJRPahMuDH4KkPAdC6kCbr R1hYlDp+mqAGVy8sVwBL0M3pBGIqRWRdqmi9BTjUNt9ocZVECc6MzqkJmkjCfD+P CYi/fgRRN8qyQHdDAc7/CB441vc2Uz5zj/aw/co6ruSqfAgKgwWrVIJa/OoOX/pi HXl2Nu4wPdIQjvZ9aHOwRJFkBFRLqEfbU67NxZZpbREwFZT5K0uvIkv05Y0NWMcZ cEotSc/Qjb3G9WADx7c6cI9gwNc6hD8FVukgo6MqcBruzqPY91WONBepNmBhy7kJ /XH3+eltW64ZfDCiUgy/fP8UPovvClFfHYL/5wYsjQi0GlBH7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLI0QJaGUPHbi1zeFIEw4sgJ/MTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk5NjRiZTYtOWJjYy0z ZWY2LTkxNTYtM2U2MmZlMWEyZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQX4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK6Pv6sE2tjIw3lRDG/BCNSbL8Dg9pKb9p/DJrXNqS6WKjuo1vpR 3ZfXKB3Fn6GZzzGIM991TKZHF12xweGbgINhAwWAhf4vgD5LWmNtoz2ctCrZ8k1S qnrunTsGkLanHjcV/eBplubUxGldmlvTPUx4Urjq3brTdIfDYOh6CpsUywMN/c9O 78H+KArlYhzAXNdMcTfEiRvGeENJCmbKl4d0psqUIC+1rbByvi4+VURuVQQA3Suy JCoyz3r1IViCclW+vNFlC3bhAw8+gqgRutSZjwwrPlXxxLF+gGu3NB9RNTgd/R/k u7dX9xxNPpqRGyoPZtgY1nYqu03AvOOZhBc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:34 2025 by rpki-client