$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aef5201-7e34-39df-9d93-d92297a32f87.roa File: 9aef5201-7e34-39df-9d93-d92297a32f87.roa (raw, json) Hash identifier: UBIv6L/cHP7H6TQL0KQjPEhQqSUjLC9TQ0Vdbv52W8w= Subject key identifier: BE:F4:0F:76:CB:DA:9D:5A:5F:D6:5A:CC:82:49:A3:4D:FD:E7:7F:D9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9420FE74EC3514FB86440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aef5201-7e34-39df-9d93-d92297a32f87.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2001:559:8745::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:42:0f:e7:4e:c3:51:4f:b8:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=998b5745-671d-46a1-b7be-f1c623ba064a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:6d:81:79:72:a3:83:bd:49:82:c3:d7:dd:c0: e3:62:dd:ce:34:ed:3a:9a:af:ef:c9:2c:92:a7:7f: 22:e2:68:44:0b:41:21:3c:11:e1:d0:85:f0:2a:e1: f2:82:b2:40:ee:f0:1e:91:8b:51:6a:cf:c9:30:7f: 3e:36:42:73:12:74:9f:0e:e5:32:d1:0e:4b:c4:7c: 4d:72:a4:ff:65:0b:10:eb:8d:61:7e:a5:a3:0a:4f: 71:cf:29:5e:0f:b8:cc:35:32:50:f0:91:65:eb:89: 72:46:5a:8c:06:e3:35:e2:e0:88:3a:87:80:0e:69: d7:47:3c:cb:64:04:0f:65:1f:10:91:19:e3:eb:d9: 84:65:67:4d:ed:14:ad:44:45:41:e7:4c:24:3a:b1: 84:6b:48:2b:08:0c:a7:dd:bc:99:58:cd:66:a5:49: d6:6e:44:80:a1:29:40:ee:34:8e:a8:bd:1f:36:61: f2:0d:fc:b3:df:96:10:60:b4:1a:ec:b5:cd:d2:96: e3:14:89:23:40:7e:35:29:c6:dc:6c:c5:30:a8:e8: 70:74:16:41:9f:77:81:a2:16:24:b2:6b:a3:d3:ab: c8:34:9f:f6:76:7b:f9:69:7e:1b:5f:45:49:c9:af: d0:58:a8:1f:4b:12:31:66:5c:da:87:6f:a7:3a:2c: 17:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:F4:0F:76:CB:DA:9D:5A:5F:D6:5A:CC:82:49:A3:4D:FD:E7:7F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9aef5201-7e34-39df-9d93-d92297a32f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8745::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:80:60:eb:74:6a:e8:a7:94:43:4d:db:12:2b:ad:08:d4:b0: 08:c2:d1:ef:8b:9b:54:12:4f:db:2c:1e:69:29:69:89:23:33: e8:e5:93:51:ee:cd:db:06:2f:e0:cc:7d:3e:0f:9c:ce:fd:32: 0e:a1:f6:8e:1d:0a:4c:95:5b:b5:27:23:9d:2f:29:87:f3:c6: 9d:d9:b4:1f:55:cb:e7:a6:f0:ef:75:3e:7b:84:2c:68:4f:b7: d0:a6:22:7c:44:a4:e3:75:34:29:19:f8:a3:2a:77:2e:0f:78: 58:e8:dd:05:5a:42:70:81:cc:93:89:27:69:ae:e3:83:a7:c5: 17:9c:a9:8d:a4:52:34:3f:1c:13:ca:51:b9:88:20:8f:8f:2e: 28:be:f2:7f:10:d8:2d:a9:9b:ca:d2:a4:48:60:b9:19:6a:05: b4:d7:cb:50:8c:d8:35:e7:28:d9:bd:3b:01:af:38:c8:d5:6d: d4:e5:f0:23:50:05:0e:46:f7:42:29:70:9b:c2:17:26:8c:53: 7c:d2:a6:ec:26:ab:6e:35:66:3d:31:4b:7b:0a:4c:eb:66:b5: ec:91:e2:e4:22:87:80:04:77:b5:45:99:89:4b:0b:0f:55:b1: 79:74:26:30:ca:ae:02:d1:8d:1d:71:4f:72:84:15:d7:64:46: 10:77:ec:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uUIP507DUU+4ZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTk4YjU3NDUtNjcxZC00NmExLWI3YmUtZjFjNjIzYmEwNjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG2BeXKjg71JgsPX3cDjYt3ONO06mq/vySyS p38i4mhEC0EhPBHh0IXwKuHygrJA7vAekYtRas/JMH8+NkJzEnSfDuUy0Q5LxHxN cqT/ZQsQ641hfqWjCk9xzyleD7jMNTJQ8JFl64lyRlqMBuM14uCIOoeADmnXRzzL ZAQPZR8QkRnj69mEZWdN7RStREVB50wkOrGEa0grCAyn3byZWM1mpUnWbkSAoSlA 7jSOqL0fNmHyDfyz35YQYLQa7LXN0pbjFIkjQH41KcbcbMUwqOhwdBZBn3eBohYk smuj06vINJ/2dnv5aX4bX0VJya/QWKgfSxIxZlzah2+nOiwXXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL70D3bL2p1aX9ZazIJJo03953/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWFlZjUyMDEtN2UzNC0z OWRmLTlkOTMtZDkyMjk3YTMyZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYdF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHKAYOt0auinlENN2xIrrQjUsAjC0e+Lm1QST9ssHmkpaYkjM+jl k1HuzdsGL+DMfT4PnM79Mg6h9o4dCkyVW7UnI50vKYfzxp3ZtB9Vy+em8O91PnuE LGhPt9CmInxEpON1NCkZ+KMqdy4PeFjo3QVaQnCBzJOJJ2mu44OnxRecqY2kUjQ/ HBPKUbmIII+PLii+8n8Q2C2pm8rSpEhguRlqBbTXy1CM2DXnKNm9OwGvOMjVbdTl 8CNQBQ5G90IpcJvCFyaMU3zSpuwmq241Zj0xS3sKTOtmteyR4uQih4AEd7VFmYlL Cw9VsXl0JjDKrgLRjR1xT3KEFddkRhB37PU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:24:34 2025 by rpki-client