$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c67df0c-01be-3df8-9968-0f7c40b7a121.roa File: 8c67df0c-01be-3df8-9968-0f7c40b7a121.roa (raw, json) Hash identifier: MGiGZy0FmiwNNgL5YAgdrI30GA3LcZq9SY+Y3BOtTkA= Subject key identifier: 54:8B:50:5C:58:E1:41:A3:9E:A4:8B:12:72:BB:4B:F5:43:0C:53:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7D280AED88765F2F9D060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c67df0c-01be-3df8-9968-0f7c40b7a121.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:151::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:d2:80:ae:d8:87:65:f2:f9:d0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=bdd943e8-931c-4bd0-ad72-7e9d5a5cf1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:09:50:fe:3b:89:51:7d:db:c2:cf:e7:26:29: 82:55:dd:e6:17:53:31:48:3e:c1:ca:fa:81:1f:48: 25:ad:e7:3a:a5:cc:ed:0d:c3:84:3d:25:f1:2b:82: c6:b8:77:32:7b:bd:37:30:09:68:3f:68:8c:22:89: 20:02:0e:1e:a7:b9:5e:98:56:6b:54:fa:4d:f0:3f: a4:e8:d5:6b:24:ae:a0:8d:82:6a:08:0d:83:dc:3b: fc:89:8a:c9:cf:0b:15:03:f3:17:a2:e0:24:ba:13: a8:9c:73:c2:b8:ed:e0:91:8d:77:a4:03:61:01:c2: 7f:ce:28:56:0f:ce:29:71:4f:c2:b3:5f:88:3b:90: 84:8c:7e:b0:d0:8d:ec:bd:98:27:90:45:de:ba:ef: c6:08:f5:f0:23:03:7c:8f:6f:79:e2:14:81:76:73: f4:74:15:f4:4b:e3:d6:d6:36:1a:c8:31:2a:a7:ca: 8a:d4:94:ba:44:39:8e:06:fb:ab:77:c3:e3:85:c0: 58:fb:1b:d6:96:18:21:5d:8e:a5:70:f3:a0:61:8f: 33:76:e2:63:e9:46:69:ed:cd:db:18:a0:cd:66:53: b7:66:5d:54:e7:b6:fd:3a:3b:be:6d:95:0f:ac:d5: 35:04:9c:5a:47:d3:ae:09:7f:fc:5c:b4:32:1c:5f: 8b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8B:50:5C:58:E1:41:A3:9E:A4:8B:12:72:BB:4B:F5:43:0C:53:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8c67df0c-01be-3df8-9968-0f7c40b7a121.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:151::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:7c:a3:e8:cc:47:d9:f1:b2:7a:d4:7f:fa:87:2d:d9:5e:07: f4:8b:0e:89:64:75:dd:f8:ee:b3:0f:84:f2:29:d2:e6:d8:a6: 8a:53:8a:a4:52:44:6c:83:94:25:1d:f0:f7:12:da:83:22:08: 4e:ca:fc:27:0d:65:b1:b8:0c:f7:90:b1:1f:8a:90:44:11:46: 7c:cf:46:fb:0a:5d:bf:e2:c1:e4:97:c9:c6:29:b6:7e:36:74: 11:17:e3:e0:d9:c0:53:07:c2:94:de:01:41:b6:2f:08:29:d8: 55:23:03:05:12:a4:86:17:6c:b5:24:83:4d:4e:31:12:70:bb: e1:af:8f:54:51:47:3d:c0:d5:1f:9b:b1:fd:94:56:47:5c:6b: d6:e4:85:aa:22:d2:26:f2:87:6f:e2:9b:e3:dc:39:43:81:34: 82:19:7d:26:9b:9d:d0:da:82:51:ab:d7:7c:38:0f:4f:05:b3: 78:d7:09:20:9e:9d:dc:12:0a:0a:5e:d9:c0:53:66:2f:3a:df: bc:e7:11:80:40:8c:c0:f8:0c:00:56:b1:d7:2a:d6:61:f2:95: 10:1d:ac:57:9b:1d:fa:08:3c:8c:22:5c:8b:88:34:81:28:64: 9c:1c:cf:52:a8:b6:1c:3c:1b:3e:77:c5:6d:cc:71:fa:3b:ac: 17:ac:f2:00 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t9KArtiHZfL50GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YmRkOTQzZTgtOTMxYy00YmQwLWFkNzItN2U5ZDVhNWNmMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQlQ/juJUX3bws/nJimCVd3mF1MxSD7ByvqB H0glrec6pcztDcOEPSXxK4LGuHcye703MAloP2iMIokgAg4ep7lemFZrVPpN8D+k 6NVrJK6gjYJqCA2D3Dv8iYrJzwsVA/MXouAkuhOonHPCuO3gkY13pANhAcJ/zihW D84pcU/Cs1+IO5CEjH6w0I3svZgnkEXeuu/GCPXwIwN8j2954hSBdnP0dBX0S+PW 1jYayDEqp8qK1JS6RDmOBvurd8PjhcBY+xvWlhghXY6lcPOgYY8zduJj6UZp7c3b GKDNZlO3Zl1U57b9Oju+bZUPrNU1BJxaR9OuCX/8XLQyHF+L/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFSLUFxY4UGjnqSLEnK7S/VDDFOJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGM2N2RmMGMtMDFiZS0z ZGY4LTk5NjgtMGY3YzQwYjdhMTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQFR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAI58o+jMR9nxsnrUf/qHLdleB/SLDolkdd347rMPhPIp0ubYpopT iqRSRGyDlCUd8PcS2oMiCE7K/CcNZbG4DPeQsR+KkEQRRnzPRvsKXb/iweSXycYp tn42dBEX4+DZwFMHwpTeAUG2Lwgp2FUjAwUSpIYXbLUkg01OMRJwu+Gvj1RRRz3A 1R+bsf2UVkdca9bkhaoi0ibyh2/im+PcOUOBNIIZfSabndDaglGr13w4D08Fs3jX CSCendwSCgpe2cBTZi8637znEYBAjMD4DABWsdcq1mHylRAdrFebHfoIPIwiXIuI NIEoZJwcz1Kothw8Gz53xW3Mcfo7rBes8gA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:56:01 2025 by rpki-client