$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2a59e72-3ab6-3b2a-8cd7-6d67a92a42e2.roa File: a2a59e72-3ab6-3b2a-8cd7-6d67a92a42e2.roa (raw, json) Hash identifier: KiZs6FOcAx0jeHn4XUAlnbfxXXVPF370jqL9IOQN8qU= Subject key identifier: B3:0F:0C:92:CA:33:9F:22:7D:9B:C4:DD:FB:0A:57:14:DE:3F:D5:8A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8E6656DE981D466A91A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2a59e72-3ab6-3b2a-8cd7-6d67a92a42e2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 19047 IP address blocks: 2001:559:0:5e::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:e6:65:6d:e9:81:d4:66:a9:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1390d6b9-5c17-498a-bf8a-99abe5ee439a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:0e:a6:2d:39:d1:b4:8d:f0:13:14:ac:49: 09:78:1d:46:91:56:b7:ce:0a:78:bc:98:ac:f1:82: 1b:b3:61:0e:47:d1:e7:a3:54:3e:3c:2c:0c:ea:bc: fa:7e:f7:07:ed:72:a2:b8:da:e8:4d:2a:93:fc:e6: c8:f5:0b:dc:f5:ca:4c:26:a2:69:d0:6e:ca:c8:ab: b1:9f:7c:a0:13:f2:38:82:0a:39:73:63:1a:12:1e: d5:2b:1d:18:63:61:dd:d3:99:c0:e7:5b:63:5d:75: 16:09:92:65:4e:a6:8a:9e:94:9f:f2:a1:f8:46:85: cc:5d:43:85:26:ba:7f:c2:0e:82:fb:62:80:b7:54: aa:2d:09:93:46:79:12:d6:7c:69:55:13:1e:0f:5f: 8f:16:8f:bc:d5:0c:5a:bb:5e:3a:0d:11:61:03:5b: 45:bf:e7:98:67:6b:27:a2:e6:a1:00:12:c2:fa:6a: 3f:3c:03:69:b0:c5:0e:f0:38:3e:41:f9:d3:dc:ae: 7c:98:e1:b8:20:73:dc:ec:37:c7:b0:d6:b2:50:de: 51:79:05:0a:11:80:e8:7b:2e:40:31:41:12:c9:43: 41:c5:f6:4c:86:56:c7:75:39:3d:7b:78:f3:41:54: 90:20:42:dd:2b:45:25:75:5a:bf:a4:2f:4c:af:23: 32:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0F:0C:92:CA:33:9F:22:7D:9B:C4:DD:FB:0A:57:14:DE:3F:D5:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2a59e72-3ab6-3b2a-8cd7-6d67a92a42e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:0:5e::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:c2:ff:96:7c:10:52:b0:53:ab:ee:79:e8:74:80:bc:76:70: ae:b2:1a:50:67:51:f5:4c:70:15:88:4f:f3:45:91:5b:45:7a: f0:2e:63:ee:c3:4c:43:c5:eb:56:bf:95:05:e8:92:a5:b0:41: a2:89:f8:a3:1e:34:4e:6e:38:c3:f1:fe:a6:44:1b:77:03:59: fc:6c:1d:72:7a:3f:91:56:77:a7:5c:22:42:8b:a4:b7:81:7c: 9b:83:51:9c:ab:14:06:b9:80:6a:df:a3:09:04:a2:09:a2:54: 50:af:0f:44:0e:d5:2f:9b:7e:ed:c4:15:6f:e4:eb:ae:9c:74: 14:60:17:80:5a:a5:17:97:11:69:33:d1:26:e4:ad:9d:2a:66: ea:00:e0:63:80:cb:f3:fd:4a:0a:28:f1:da:31:d9:3b:32:f1: 7c:f3:e1:be:60:fc:b3:2e:7f:80:68:c7:5f:c6:be:8a:75:d9: a4:07:1f:a5:6c:4b:fc:61:0c:a0:ff:95:23:84:35:c3:72:54: 7a:1f:3d:97:a5:79:ff:01:0b:45:2e:4b:a1:48:27:03:64:b2: 24:db:f7:f0:52:9b:41:f4:a5:81:ee:43:b7:c4:6e:78:eb:35: 70:c3:f8:04:5d:49:29:d8:ac:03:3f:81:6b:72:91:1a:04:a3: 23:d0:c3:e1 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEs9uOZlbemB1GapGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTM5MGQ2YjktNWMxNy00OThhLWJmOGEtOTlhYmU1ZWU0MzlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUcOpi050bSN8BMUrEkJeB1GkVa3zgp4vJis 8YIbs2EOR9Hno1Q+PCwM6rz6fvcH7XKiuNroTSqT/ObI9Qvc9cpMJqJp0G7KyKux n3ygE/I4ggo5c2MaEh7VKx0YY2Hd05nA51tjXXUWCZJlTqaKnpSf8qH4RoXMXUOF Jrp/wg6C+2KAt1SqLQmTRnkS1nxpVRMeD1+PFo+81Qxau146DRFhA1tFv+eYZ2sn ouahABLC+mo/PANpsMUO8Dg+QfnT3K58mOG4IHPc7DfHsNayUN5ReQUKEYDoey5A MUESyUNBxfZMhlbHdTk9e3jzQVSQIELdK0UldVq/pC9MryMyywIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFLMPDJLKM58ifZvE3fsKVxTeP9WKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJhNTllNzItM2FiNi0z YjJhLThjZDctNmQ2N2E5MmE0MmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA AF4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAlcL/lnwQUrBTq+556HSAvHZwrrIaUGdR9UxwFYhP80WRW0V6 8C5j7sNMQ8XrVr+VBeiSpbBBoon4ox40Tm44w/H+pkQbdwNZ/Gwdcno/kVZ3p1wi Qoukt4F8m4NRnKsUBrmAat+jCQSiCaJUUK8PRA7VL5t+7cQVb+Trrpx0FGAXgFql F5cRaTPRJuStnSpm6gDgY4DL8/1KCijx2jHZOzLxfPPhvmD8sy5/gGjHX8a+inXZ pAcfpWxL/GEMoP+VI4Q1w3JUeh89l6V5/wELRS5LoUgnA2SyJNv38FKbQfSlge5D t8RueOs1cMP4BF1JKdisAz+Ba3KRGgSjI9DD4Q== -----END CERTIFICATE-----Generated at Mon Oct 20 06:43:58 2025 by rpki-client