$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad7a6afa-030a-3187-8f5f-69b2e831c42c.roa File: ad7a6afa-030a-3187-8f5f-69b2e831c42c.roa (raw, json) Hash identifier: swxN31kLKTXA8MRAhFXjfbdVYkbGDJxqvWl6bmgKc5M= Subject key identifier: 89:E4:52:04:45:78:98:3B:95:10:D6:FD:32:D3:7A:4E:8E:EA:54:58 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8F4AC436E2FC82F3C4060 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad7a6afa-030a-3187-8f5f-69b2e831c42c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7016 IP address blocks: 2001:559:dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:f4:ac:43:6e:2f:c8:2f:3c:40:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a2cac7c0-88b0-4e95-8be5-b336c3f477a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:70:e7:79:22:1f:bb:a0:f7:dc:e1:05:d5:a6: 79:55:7f:2d:bc:d2:b7:a9:5f:c2:51:c6:d2:c0:38: 16:89:8e:5e:5d:04:55:f2:48:61:72:5a:98:fb:84: 1f:57:7f:91:2f:96:57:85:21:a2:52:99:e2:1d:07: 6c:a4:05:c0:12:b8:d8:0a:62:dc:24:a1:8b:e0:1e: c1:9c:4f:31:91:d7:13:7a:77:c7:e0:e5:db:27:f2: 9e:68:d7:64:b2:8c:04:3f:37:38:93:8e:09:bb:5e: bd:1e:ba:bf:86:68:88:f4:c8:ef:c2:b6:18:e1:9f: be:6e:5e:7e:24:27:63:4a:eb:09:11:27:75:14:b5: 3c:47:b4:75:99:b4:13:ad:bd:8a:e9:f9:91:f2:2d: 47:73:28:6b:d2:5c:03:fb:c1:fa:b8:6c:61:cb:96: c0:47:9b:a1:40:1d:d0:61:c8:7f:85:4d:10:b0:45: a3:e6:64:f0:68:c4:b0:f4:61:2f:58:6b:78:69:47: b1:94:4e:e6:38:2b:29:49:4d:83:85:30:74:e5:7b: 4d:af:05:da:30:8b:ab:1f:ae:cd:ce:dc:a8:7b:93: a2:5c:c5:91:7d:df:11:e8:68:da:8c:91:1b:71:b4: 0d:33:c4:43:1b:2a:ce:6e:24:61:e7:6b:c0:0e:c4: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:E4:52:04:45:78:98:3B:95:10:D6:FD:32:D3:7A:4E:8E:EA:54:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad7a6afa-030a-3187-8f5f-69b2e831c42c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:dc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:ab:e2:77:22:90:e2:97:6c:1e:c0:53:7c:47:4b:82:8d:d7: 04:80:25:90:46:44:8b:15:5c:b9:0a:57:fb:81:99:e0:6c:46: 97:fb:cd:36:fe:ad:6f:29:7f:bd:04:1c:9d:e6:5e:d7:a6:d0: 18:c4:e7:1f:94:3f:48:a1:3e:d9:6f:63:b5:7c:50:43:6e:62: 90:b3:aa:2b:d0:38:e4:8a:5b:05:41:8f:c7:45:a4:ce:fc:87: e3:a2:7b:6e:81:02:9b:82:7b:45:3c:8d:78:9d:29:ce:85:48: d6:21:e3:9f:b7:83:a5:e2:fd:3c:10:18:63:c1:bd:d7:04:72: f0:79:f2:ae:62:67:58:57:a6:1f:66:c4:57:a9:e4:c4:f2:95: d5:0c:39:25:b1:a9:d3:c2:d4:29:af:59:db:5c:19:df:a0:8c: 6f:eb:c9:d2:bc:c4:09:22:78:3e:f3:c9:c0:3f:53:5c:3c:16: 66:c1:5f:cd:72:53:50:3e:f6:7b:6e:c2:ca:be:03:91:20:0f: 74:1d:8c:fe:af:ad:39:7f:31:12:d8:a3:fb:a1:47:a0:6c:87: e0:9f:9a:6b:d4:48:b6:cc:eb:2b:80:af:52:17:51:70:57:ef: 9d:53:bf:7f:56:b6:23:e7:22:63:e8:2e:81:2b:83:8a:52:3d: 78:1a:0d:97 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uPSsQ24vyC88QGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTJjYWM3YzAtODhiMC00ZTk1LThiZTUtYjMzNmMzZjQ3N2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnDneSIfu6D33OEF1aZ5VX8tvNK3qV/CUcbS wDgWiY5eXQRV8khhclqY+4QfV3+RL5ZXhSGiUpniHQdspAXAErjYCmLcJKGL4B7B nE8xkdcTenfH4OXbJ/KeaNdksowEPzc4k44Ju169Hrq/hmiI9MjvwrYY4Z++bl5+ JCdjSusJESd1FLU8R7R1mbQTrb2K6fmR8i1Hcyhr0lwD+8H6uGxhy5bAR5uhQB3Q Ych/hU0QsEWj5mTwaMSw9GEvWGt4aUexlE7mOCspSU2DhTB05XtNrwXaMIurH67N ztyoe5OiXMWRfd8R6GjajJEbcbQNM8RDGyrObiRh52vADsRZ+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFInkUgRFeJg7lRDW/TLTek6O6lRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWQ3YTZhZmEtMDMwYS0z MTg3LThmNWYtNjliMmU4MzFjNDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQDc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMGr4ncikOKXbB7AU3xHS4KN1wSAJZBGRIsVXLkKV/uBmeBsRpf7 zTb+rW8pf70EHJ3mXtem0BjE5x+UP0ihPtlvY7V8UENuYpCzqivQOOSKWwVBj8dF pM78h+Oie26BApuCe0U8jXidKc6FSNYh45+3g6Xi/TwQGGPBvdcEcvB58q5iZ1hX ph9mxFep5MTyldUMOSWxqdPC1CmvWdtcGd+gjG/rydK8xAkieD7zycA/U1w8FmbB X81yU1A+9ntuwsq+A5EgD3QdjP6vrTl/MRLYo/uhR6Bsh+CfmmvUSLbM6yuAr1IX UXBX751Tv39WtiPnImPoLoErg4pSPXgaDZc= -----END CERTIFICATE-----Generated at Mon Oct 20 07:10:11 2025 by rpki-client