$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9baf0c13-adaa-3e03-8dfb-d66bd26e2b51.roa File: 9baf0c13-adaa-3e03-8dfb-d66bd26e2b51.roa (raw, json) Hash identifier: Z32/BA5jpgXhvYuDd/hft1/VN74xtzlxq0bKFoR1DQc= Subject key identifier: 3F:CC:7C:42:5C:B2:82:82:D0:A3:FA:02:72:99:3B:4C:D1:45:33:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8F8291A35654F2A5A6300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9baf0c13-adaa-3e03-8dfb-d66bd26e2b51.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7016 IP address blocks: 2001:559:7ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:f8:29:1a:35:65:4f:2a:5a:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=4c60cf2f-de61-44c1-a73c-340c599b318a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8c:c0:b6:89:a5:cf:32:6b:f7:59:21:06:46: 41:7b:09:4b:7a:ba:c2:dd:12:36:d8:0d:7c:22:71: bd:2a:fa:ae:4d:1b:56:47:ff:b1:90:ce:d8:69:36: 71:ab:14:68:e5:a7:63:b5:38:cd:38:e9:6c:01:85: 8f:81:85:52:cb:90:55:8e:a4:d9:65:2d:f0:93:7d: c6:11:36:d5:35:26:a1:21:7a:0c:83:80:bb:a7:af: 94:c0:1a:d1:a7:b4:d6:e2:f8:b3:f8:ef:c0:92:42: 34:a0:01:00:07:3a:60:db:f4:f1:8f:70:50:7e:3e: 25:92:b8:01:39:88:12:5e:be:71:60:89:07:ef:c1: 08:bc:73:15:06:9c:c4:09:4d:fa:2d:ac:d2:a1:06: 54:77:1b:84:e5:f0:3c:aa:03:24:a4:8b:72:b6:8a: 36:fd:eb:5e:b9:c0:b1:74:fa:52:4d:0f:66:87:93: 81:76:c3:ed:91:09:e1:b6:d1:e6:52:d3:d5:65:60: 8b:3b:79:6e:fb:e2:3b:e6:91:c9:d1:4d:9c:2a:ab: 8d:18:5e:79:17:85:cf:6e:ea:21:b4:67:61:c2:21: e9:1e:06:ff:24:38:23:01:90:00:45:37:16:45:a8: 45:4b:0c:5d:4a:56:bf:a0:33:41:48:38:fa:71:a0: 10:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CC:7C:42:5C:B2:82:82:D0:A3:FA:02:72:99:3B:4C:D1:45:33:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9baf0c13-adaa-3e03-8dfb-d66bd26e2b51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:7ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:67:91:ab:5e:c4:0f:cb:59:a5:f8:14:42:ce:f2:25:3b:73: 85:8e:ef:1f:91:92:4c:3e:b4:5c:52:34:04:6e:17:93:35:22: 5f:4e:08:64:c6:dc:fc:5b:97:0a:a1:93:74:a5:9b:c0:d4:d0: 62:f9:35:4b:96:d1:07:c1:7e:7d:68:21:21:4d:ad:b7:b3:63: 10:d3:8e:c5:b2:8e:dc:d3:90:79:90:db:91:03:b8:d0:25:0c: e5:4a:00:b2:ec:66:9f:6b:8e:17:8e:ce:23:95:57:d4:0d:13: c0:51:a3:dc:61:db:7f:2a:8c:8f:f6:bb:b7:0f:f7:e7:06:87: 10:04:48:ac:1d:9a:92:64:4e:74:27:18:69:63:02:8b:00:49: 07:5c:82:f8:43:06:79:a0:d8:c7:ef:e7:53:b7:b0:26:60:6e: 43:3b:94:6c:e8:9b:8a:f8:fc:71:6a:b6:58:40:0d:9c:d9:70: 35:2d:1c:2b:9a:3a:2b:c0:81:6d:4e:7e:ad:9b:0b:7b:1a:c3: b5:2b:ba:be:62:a8:a1:94:77:5d:f6:7e:d1:b6:5f:d6:11:7c: a5:28:c6:9a:4b:f4:de:fa:76:6c:00:c1:b3:9a:36:25:b4:40: a9:03:15:72:9d:29:6c:3a:3b:d9:82:96:5a:e5:c6:a5:e4:dd: e4:d9:c7:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uPgpGjVlTypaYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NGM2MGNmMmYtZGU2MS00NGMxLWE3M2MtMzQwYzU5OWIzMThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIzAtomlzzJr91khBkZBewlLerrC3RI22A18 InG9KvquTRtWR/+xkM7YaTZxqxRo5adjtTjNOOlsAYWPgYVSy5BVjqTZZS3wk33G ETbVNSahIXoMg4C7p6+UwBrRp7TW4viz+O/AkkI0oAEABzpg2/Txj3BQfj4lkrgB OYgSXr5xYIkH78EIvHMVBpzECU36LazSoQZUdxuE5fA8qgMkpItytoo2/eteucCx dPpSTQ9mh5OBdsPtkQnhttHmUtPVZWCLO3lu++I75pHJ0U2cKquNGF55F4XPbuoh tGdhwiHpHgb/JDgjAZAARTcWRahFSwxdSla/oDNBSDj6caAQrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD/MfEJcsoKC0KP6AnKZO0zRRTOxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWJhZjBjMTMtYWRhYS0z ZTAzLThkZmItZDY2YmQyNmUyYjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQft MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMdnkatexA/LWaX4FELO8iU7c4WO7x+Rkkw+tFxSNARuF5M1Il9O CGTG3Pxblwqhk3Slm8DU0GL5NUuW0QfBfn1oISFNrbezYxDTjsWyjtzTkHmQ25ED uNAlDOVKALLsZp9rjheOziOVV9QNE8BRo9xh238qjI/2u7cP9+cGhxAESKwdmpJk TnQnGGljAosASQdcgvhDBnmg2Mfv51O3sCZgbkM7lGzom4r4/HFqtlhADZzZcDUt HCuaOivAgW1Ofq2bC3saw7Urur5iqKGUd132ftG2X9YRfKUoxppL9N76dmwAwbOa NiW0QKkDFXKdKWw6O9mCllrlxqXk3eTZxw0= -----END CERTIFICATE-----Generated at Tue Oct 21 01:34:15 2025 by rpki-client