$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f85340c-a8d7-3b09-b726-08d8a0a56ca0.roa File: 8f85340c-a8d7-3b09-b726-08d8a0a56ca0.roa (raw, json) Hash identifier: bfnzx/qxNk7AKpjM9OgBJgXR/jsOw5cPDSjA263DPvw= Subject key identifier: EA:13:BD:86:FB:A9:54:89:E5:A4:A6:73:C0:AB:B6:B0:9E:4F:50:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9F843584F9371502CE8C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f85340c-a8d7-3b09-b726-08d8a0a56ca0.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:a004::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:f8:43:58:4f:93:71:50:2c:e8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=0cea2b94-071d-4184-92d2-fcf06c827c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:fa:aa:c5:60:7f:27:d7:93:3b:0e:4d:17:c3: 4d:a3:4b:c6:b1:70:e1:a2:c8:30:aa:60:13:2c:81: 03:27:6a:dd:58:39:57:ef:9d:f3:8b:95:24:76:5a: 5f:84:3a:e5:eb:be:67:7b:d5:2d:1a:5b:77:00:3d: a9:70:d3:12:ee:a6:91:f7:7e:3a:a2:a2:c8:92:55: 9d:f4:ae:51:79:19:94:05:6d:40:c8:65:ec:4c:ce: 29:81:94:a5:40:ec:19:5b:20:40:d8:4d:08:97:3e: 44:93:3b:55:36:32:ec:a2:7d:f4:a9:e8:af:e3:01: d5:6e:fd:c0:07:07:3d:3f:a6:73:11:39:9e:63:ae: 1a:f3:2f:6d:41:fc:09:a8:1f:3c:40:6e:7a:4a:e0: 20:a4:43:d5:53:eb:13:87:09:3f:99:3e:80:bd:c9: 82:a6:b7:d0:08:90:c3:05:47:b0:b1:b9:cd:01:03: a8:ac:dd:33:ec:f6:85:8b:7c:b6:51:a4:dd:e9:24: 66:24:9b:fd:0c:2e:0b:6c:b0:d6:e9:9e:2d:15:89: f8:78:82:03:d6:2e:3a:9b:31:aa:4a:a9:62:1c:6f: 3e:ca:10:a4:04:4b:5c:12:a3:4e:5f:03:a2:15:f4: 74:bc:0b:1e:31:f3:d7:ff:d2:f6:57:8f:22:9e:0b: 7a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:13:BD:86:FB:A9:54:89:E5:A4:A6:73:C0:AB:B6:B0:9E:4F:50:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f85340c-a8d7-3b09-b726-08d8a0a56ca0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a004::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:08:9d:00:3f:8e:49:1e:6e:2c:ac:71:86:81:c1:f5:1f:80: 48:65:a1:b1:e7:60:0e:1f:b4:0c:b3:66:3a:cc:32:0b:d8:24: 86:55:7d:8f:9f:d6:45:5d:4f:30:d9:1b:c7:b9:b2:3b:f1:7f: 6c:e0:34:44:8d:ec:dc:c9:d9:a6:8e:9f:5a:a8:cf:ba:07:8b: 53:3e:b6:74:59:49:83:32:9d:93:da:28:4d:52:01:db:85:1c: 61:b7:23:16:9b:e9:ac:9e:c9:96:01:37:f4:bb:5b:f4:5a:4a: cb:4c:81:b5:67:5a:d6:75:a4:dc:b4:66:cb:c3:49:d1:98:9f: a5:a8:97:43:51:73:e8:0f:2a:cf:22:0b:49:a9:98:5b:18:6f: 1f:b5:7d:b2:63:41:9f:be:ea:23:b2:2d:02:87:83:46:e5:4b: 8c:79:d7:6b:08:a5:ed:7e:d0:3b:d0:0b:ef:6b:93:8b:02:7c: 89:4c:9a:a1:7a:d0:b6:34:c5:30:58:db:a4:a0:a5:78:59:7b: 37:4a:98:f9:ea:1f:4e:56:5e:39:01:0a:d4:67:a5:73:db:ce: 8f:40:8c:c3:26:e4:8c:48:87:fe:95:f5:5b:c8:ec:d0:22:71: 66:a0:a5:3f:c2:19:7c:52:5c:e4:02:63:2d:13:92:c8:c3:b3: f2:86:3f:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ufhDWE+TcVAs6MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MGNlYTJiOTQtMDcxZC00MTg0LTkyZDItZmNmMDZjODI3YzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfqqxWB/J9eTOw5NF8NNo0vGsXDhosgwqmAT LIEDJ2rdWDlX753zi5UkdlpfhDrl675ne9UtGlt3AD2pcNMS7qaR9346oqLIklWd 9K5ReRmUBW1AyGXsTM4pgZSlQOwZWyBA2E0Ilz5EkztVNjLson30qeiv4wHVbv3A Bwc9P6ZzETmeY64a8y9tQfwJqB88QG56SuAgpEPVU+sThwk/mT6AvcmCprfQCJDD BUewsbnNAQOorN0z7PaFi3y2UaTd6SRmJJv9DC4LbLDW6Z4tFYn4eIID1i46mzGq SqliHG8+yhCkBEtcEqNOXwOiFfR0vAseMfPX/9L2V48ingt60QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOoTvYb7qVSJ5aSmc8CrtrCeT1DdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGY4NTM0MGMtYThkNy0z YjA5LWI3MjYtMDhkOGEwYTU2Y2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEwInQA/jkkebiyscYaBwfUfgEhlobHnYA4ftAyzZjrMMgvYJIZV fY+f1kVdTzDZG8e5sjvxf2zgNESN7NzJ2aaOn1qoz7oHi1M+tnRZSYMynZPaKE1S AduFHGG3Ixab6ayeyZYBN/S7W/RaSstMgbVnWtZ1pNy0ZsvDSdGYn6Wol0NRc+gP Ks8iC0mpmFsYbx+1fbJjQZ++6iOyLQKHg0blS4x512sIpe1+0DvQC+9rk4sCfIlM mqF60LY0xTBY26SgpXhZezdKmPnqH05WXjkBCtRnpXPbzo9AjMMm5IxIh/6V9VvI 7NAicWagpT/CGXxSXOQCYy0TksjDs/KGP1E= -----END CERTIFICATE-----Generated at Mon Oct 20 06:22:20 2025 by rpki-client