$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90293568-a355-3bd7-a2db-49e0d8d844dc.roa File: 90293568-a355-3bd7-a2db-49e0d8d844dc.roa (raw, json) Hash identifier: 5OS99C/OKyQFAprU4u5M2VdiMhDFk2EUJKIylHCNdnE= Subject key identifier: 37:91:A3:F8:71:69:5A:E9:32:B1:20:90:A0:E2:D0:88:83:37:19:1F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB939BBD6220FC14E19BB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90293568-a355-3bd7-a2db-49e0d8d844dc.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2001:559:2dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:39:bb:d6:22:0f:c1:4e:19:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a969656e-544e-4ab5-a259-7abcf90273c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:dd:ec:cd:4d:c8:d6:a3:15:6a:a9:3f:83: e8:cf:d5:0e:60:58:a9:e7:c3:93:26:de:f5:7f:1c: 09:3f:1a:7b:f0:3a:53:6a:0e:44:b9:26:a4:7a:96: a0:4c:59:a1:c3:63:bb:df:3d:ba:29:41:5f:fc:4a: e1:b7:d8:28:08:f2:11:b7:5b:0c:4c:cb:e0:84:58: 3a:07:15:d0:b5:23:80:ce:fa:7f:f3:0c:66:84:a2: 4a:5b:f2:76:42:21:de:35:01:28:31:3b:f3:a6:10: 3f:eb:0a:4f:04:87:d5:b8:0c:8f:58:95:d0:64:3a: c3:a0:db:69:9c:b5:f5:f0:fb:5a:8f:f5:8b:7d:f6: ca:7e:9a:a4:96:e9:73:8b:f5:94:1c:a1:15:f6:7b: 44:ca:58:93:a1:da:7f:06:25:a5:88:ee:59:5f:a1: 30:3a:8b:93:09:70:ec:6a:a2:01:37:9b:b6:bc:c3: 59:bc:9a:e4:73:ac:02:87:2f:56:3d:e0:91:47:bd: 1e:ba:49:d4:5a:14:55:8e:24:b3:cc:fe:da:2c:48: 10:cd:4d:3e:5f:b7:07:d5:52:f0:96:d7:2a:42:a8: 07:1c:16:a4:3a:b2:13:dc:2b:f1:ff:3b:d1:1c:dd: b4:08:62:0b:56:ef:a8:31:9b:a6:7e:df:8e:82:e1: 5f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:91:A3:F8:71:69:5A:E9:32:B1:20:90:A0:E2:D0:88:83:37:19:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90293568-a355-3bd7-a2db-49e0d8d844dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2dc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5a:67:04:32:3e:9d:37:ef:eb:4b:95:36:fd:12:ab:6c:e0: 15:3a:5a:bf:a8:1a:2b:36:9b:b7:2d:4b:18:04:55:8e:bf:91: 86:ad:98:0d:c3:69:24:05:a4:2b:bc:8f:bd:57:c5:24:0b:c0: 6b:3a:66:c6:f4:59:de:10:3a:de:93:35:82:4f:d3:83:c1:36: 0d:1a:03:af:49:c3:1c:a6:3c:f6:d6:39:da:f9:f3:24:01:44: 7f:4b:45:1c:95:44:db:5d:fd:cd:6d:a4:16:e3:b9:28:87:bc: 58:b8:e4:74:1c:b7:ea:81:5e:64:29:82:28:b9:7e:3e:38:fd: 4d:e7:9c:4d:57:14:f2:fa:77:ee:4b:b3:bf:45:45:2d:95:54: 69:72:5a:44:05:b6:43:36:fc:b8:a9:84:98:a1:82:e4:9c:11: d7:09:a3:e1:1b:7d:34:fa:10:c2:52:09:59:65:9c:fd:a9:ea: df:4f:1f:ae:a1:b4:55:8c:71:b1:aa:df:ed:bf:70:9a:9e:37: 30:99:84:38:3f:c7:cc:5f:19:ae:15:c1:7e:51:a1:e3:99:15: 35:9f:a5:be:d1:9e:f8:0f:11:12:4c:16:45:9c:b5:65:c1:83: d4:5e:c7:f1:8f:79:28:cd:ca:47:af:cb:67:e3:2f:f2:37:5f: 2f:85:ea:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uTm71iIPwU4Zu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTk2OTY1NmUtNTQ0ZS00YWI1LWEyNTktN2FiY2Y5MDI3M2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOfd7M1NyNajFWqpP4Poz9UOYFip58OTJt71 fxwJPxp78DpTag5EuSakepagTFmhw2O73z26KUFf/Erht9goCPIRt1sMTMvghFg6 BxXQtSOAzvp/8wxmhKJKW/J2QiHeNQEoMTvzphA/6wpPBIfVuAyPWJXQZDrDoNtp nLX18Ptaj/WLffbKfpqklulzi/WUHKEV9ntEyliTodp/BiWliO5ZX6EwOouTCXDs aqIBN5u2vMNZvJrkc6wChy9WPeCRR70euknUWhRVjiSzzP7aLEgQzU0+X7cH1VLw ltcqQqgHHBakOrIT3Cvx/zvRHN20CGILVu+oMZumft+OguFfrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDeRo/hxaVrpMrEgkKDi0IiDNxkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTAyOTM1NjgtYTM1NS0z YmQ3LWEyZGItNDllMGQ4ZDg0NGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQLc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB1aZwQyPp037+tLlTb9Eqts4BU6Wr+oGis2m7ctSxgEVY6/kYat mA3DaSQFpCu8j71XxSQLwGs6Zsb0Wd4QOt6TNYJP04PBNg0aA69JwxymPPbWOdr5 8yQBRH9LRRyVRNtd/c1tpBbjuSiHvFi45HQct+qBXmQpgii5fj44/U3nnE1XFPL6 d+5Ls79FRS2VVGlyWkQFtkM2/LiphJihguScEdcJo+EbfTT6EMJSCVllnP2p6t9P H66htFWMcbGq3+2/cJqeNzCZhDg/x8xfGa4VwX5RoeOZFTWfpb7RnvgPERJMFkWc tWXBg9Rex/GPeSjNykevy2fjL/I3Xy+F6rA= -----END CERTIFICATE-----Generated at Mon Oct 20 12:35:32 2025 by rpki-client