$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95a91eec-0aad-3fca-8893-b68159f26c82.roa File: 95a91eec-0aad-3fca-8893-b68159f26c82.roa (raw, json) Hash identifier: 4FKrOh7vVVIYpnTlYwz4BJJZ/nFagaKuKDCWvkcAQvc= Subject key identifier: D2:2E:8F:0A:D9:F8:AB:B0:1A:A3:08:78:0E:3B:D1:BC:B6:63:81:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB93F43C60F5BF5951C70C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95a91eec-0aad-3fca-8893-b68159f26c82.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2001:559:845a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:3f:43:c6:0f:5b:f5:95:1c:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1ac49010-8f9b-49ed-9fc7-8581ba3ddf9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:df:8e:cd:ce:e8:8d:c7:60:79:18:85:06:4b: 81:90:bf:d6:2a:f1:e0:fd:c3:44:29:af:b0:65:12: 90:9d:95:40:19:54:53:84:85:0d:31:dd:71:26:0a: b8:91:ee:a2:36:bd:77:af:9e:80:85:33:e9:0b:b9: 7b:c2:e5:35:6f:19:c2:f1:82:d2:bd:b9:ce:43:91: d5:98:29:04:c2:6d:e8:e1:7e:09:4d:b8:d5:78:51: 13:b6:65:6e:6c:2a:7f:2b:df:25:1d:29:99:e1:6b: b5:00:3f:0c:66:96:8e:33:04:09:87:3c:ca:f0:ab: 99:22:29:66:c4:90:73:7b:5e:65:79:a9:fe:d7:95: 9f:1f:11:36:cc:0e:06:32:2e:c8:27:7d:48:00:72: 86:2c:21:32:f1:71:f6:4e:c8:00:a5:08:45:6c:be: 46:65:29:46:c5:40:47:d2:cf:10:ea:1f:50:fd:78: c3:13:2d:ad:44:b5:98:07:9d:54:49:c6:79:42:ca: fe:75:cc:23:9e:08:6e:08:fa:ab:7a:f7:16:12:09: f5:91:7a:0b:e7:9a:89:1b:70:3b:77:88:57:7e:de: 67:68:29:36:c4:f5:42:42:ab:58:5d:b2:39:d2:7f: de:01:47:eb:40:3d:36:75:0e:55:1d:7f:2c:0f:b4: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:2E:8F:0A:D9:F8:AB:B0:1A:A3:08:78:0E:3B:D1:BC:B6:63:81:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/95a91eec-0aad-3fca-8893-b68159f26c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:845a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f4:67:d7:f4:39:e6:51:87:9e:fa:f0:ac:78:95:9a:c6:a0: 01:e3:a6:94:2f:48:b7:94:68:7d:0f:b2:cf:35:5d:5d:92:a3: 12:3d:a2:ca:9d:c9:ed:ab:9b:e3:b8:b0:80:8c:05:ed:c4:69: 33:44:1c:7b:f1:41:cf:a8:53:be:ae:b9:ad:81:85:53:7f:c2: 47:1c:22:c9:55:01:9e:99:e9:98:fb:e8:de:f2:bb:62:64:ac: 59:50:14:c7:48:e1:f3:da:cc:2c:ba:b2:ac:df:ba:35:43:b9: d7:8d:c1:54:84:56:fd:87:97:95:68:17:64:ba:f9:dd:9d:63: 44:13:35:99:e4:a5:8e:71:25:7f:bf:6b:7d:aa:af:c3:1c:d4: c3:e2:42:6c:59:0c:dc:06:9d:a0:e2:06:56:15:79:15:6f:a2: 7d:b2:c8:db:80:9a:b1:45:ae:19:e6:b0:8a:ec:51:6b:e0:e7: 65:c5:1b:f2:1b:c8:c6:f0:98:d8:64:de:5c:ea:5d:37:16:33: fa:41:81:78:b4:3c:2d:8f:9e:0a:c1:95:43:0c:cc:b7:ba:1d: 0e:46:5c:af:2f:7c:df:a1:86:7c:1e:c3:98:24:c2:e3:e8:0f: 5c:4e:e4:bc:89:73:f5:53:ec:98:87:93:24:66:50:4d:38:c3: 25:e2:82:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uT9Dxg9b9ZUccMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MWFjNDkwMTAtOGY5Yi00OWVkLTlmYzctODU4MWJhM2RkZjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN+Ozc7ojcdgeRiFBkuBkL/WKvHg/cNEKa+w ZRKQnZVAGVRThIUNMd1xJgq4ke6iNr13r56AhTPpC7l7wuU1bxnC8YLSvbnOQ5HV mCkEwm3o4X4JTbjVeFETtmVubCp/K98lHSmZ4Wu1AD8MZpaOMwQJhzzK8KuZIilm xJBze15lean+15WfHxE2zA4GMi7IJ31IAHKGLCEy8XH2TsgApQhFbL5GZSlGxUBH 0s8Q6h9Q/XjDEy2tRLWYB51UScZ5Qsr+dcwjnghuCPqrevcWEgn1kXoL55qJG3A7 d4hXft5naCk2xPVCQqtYXbI50n/eAUfrQD02dQ5VHX8sD7TP0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNIujwrZ+KuwGqMIeA470by2Y4GCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTVhOTFlZWMtMGFhZC0z ZmNhLTg4OTMtYjY4MTU5ZjI2YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYRa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABr0Z9f0OeZRh5768Kx4lZrGoAHjppQvSLeUaH0Pss81XV2SoxI9 osqdye2rm+O4sICMBe3EaTNEHHvxQc+oU76uua2BhVN/wkccIslVAZ6Z6Zj76N7y u2JkrFlQFMdI4fPazCy6sqzfujVDudeNwVSEVv2Hl5VoF2S6+d2dY0QTNZnkpY5x JX+/a32qr8Mc1MPiQmxZDNwGnaDiBlYVeRVvon2yyNuAmrFFrhnmsIrsUWvg52XF G/IbyMbwmNhk3lzqXTcWM/pBgXi0PC2PngrBlUMMzLe6HQ5GXK8vfN+hhnwew5gk wuPoD1xO5LyJc/VT7JiHkyRmUE04wyXignM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:00:42 2025 by rpki-client