$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afab92b1-61db-3f02-a692-fdc7b78f1a50.roa File: afab92b1-61db-3f02-a692-fdc7b78f1a50.roa (raw, json) Hash identifier: ddd5Kp1AdlPzSQjHGV6sKNYGtWTECugqn7uz6Cy4t08= Subject key identifier: 20:7A:14:62:D9:79:5F:36:6A:41:32:B2:1A:96:2A:84:B1:F3:78:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB98AA4FA58D770FDD00880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afab92b1-61db-3f02-a692-fdc7b78f1a50.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:c3ec::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:8a:a4:fa:58:d7:70:fd:d0:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=951713d8-4f4b-45fd-a26e-1f54d22f917e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:db:8b:bd:ba:e2:b2:ec:97:ef:ad:fe:a5: 32:ed:ec:1f:8b:2b:4c:f5:a0:d2:5a:5c:fe:ce:ac: 06:88:32:33:3a:d8:fd:17:2f:90:a2:1e:51:e6:ae: 3e:d7:2b:79:9d:f5:a7:ce:84:93:db:f1:4a:95:ab: 2a:4d:8b:15:59:4a:29:f1:81:36:62:91:04:3a:cd: 64:d9:09:5b:99:12:43:3d:e1:ed:d1:2a:48:e1:91: f5:f5:04:e1:d5:f5:32:51:07:d0:e4:3a:24:e7:16: e6:3a:00:6b:2e:ce:19:90:fd:85:b1:83:71:75:74: 4f:7f:d8:7e:28:e3:9c:59:f3:7e:40:05:90:99:66: e0:1d:48:1e:17:e9:07:eb:90:a9:bf:d2:be:8d:a9: 5e:56:35:cc:11:b8:2c:36:f4:72:b3:18:ba:e2:6f: 84:85:53:aa:64:3d:17:bd:82:18:b6:79:fa:7e:5f: 55:36:ce:da:85:15:11:53:01:dd:5e:4e:ff:0a:f4: e9:b9:5b:9d:df:aa:8d:57:34:84:d0:29:8a:18:7b: 0a:1c:b6:d3:3f:c4:bd:ed:02:2e:89:c9:38:ac:83: 8e:fa:dc:61:90:fe:3c:48:1e:48:d6:ad:c9:40:8e: 71:ca:24:88:db:6d:b6:88:4e:e9:de:4a:a9:2b:ad: 8c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:14:62:D9:79:5F:36:6A:41:32:B2:1A:96:2A:84:B1:F3:78:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afab92b1-61db-3f02-a692-fdc7b78f1a50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3ec::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:dd:b7:44:14:e7:c2:4f:92:38:5d:28:26:e9:09:e2:ee:d6: ba:23:8f:90:56:c2:c6:f7:70:91:42:ab:91:34:91:53:97:3b: ec:cb:08:7e:fe:c4:0a:c8:a5:fb:e5:65:5f:b3:39:d4:74:78: 96:1b:8f:ea:4b:0b:43:3e:e7:5b:2c:aa:8e:e1:76:ae:ea:c7: 4c:4a:9d:04:a2:3e:f8:6e:d1:87:38:9d:b9:10:4a:6e:9e:f6: d0:f5:3f:1f:46:65:22:b4:ad:34:68:18:a3:40:62:ae:99:98: 85:c2:b2:b7:95:b4:f1:a9:28:2d:d4:83:99:4b:1f:09:20:5c: 07:75:5c:79:82:b5:de:5c:94:d6:19:ba:ab:fb:09:85:fb:cf: 5c:39:5b:9a:79:13:da:6b:ee:f2:47:ba:9d:2b:63:c5:08:03: a4:c8:00:1b:f4:6d:36:f5:96:6a:5a:f5:4d:d1:8e:ea:cc:b9: d5:60:ed:8b:f4:f3:db:f7:64:99:f8:56:ca:0d:02:8f:29:50: 93:1b:84:e4:07:60:c5:79:e5:d0:75:83:ea:21:0b:25:31:54: b1:f2:73:38:15:85:d9:df:6b:54:2f:fe:22:75:e9:72:0c:11: 2b:eb:7b:ed:e4:51:71:2c:af:73:d5:ce:15:d0:51:ba:52:74: 05:8b:21:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uYqk+ljXcP3QCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTUxNzEzZDgtNGY0Yi00NWZkLWEyNmUtMWY1NGQyMmY5MTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAzbi7264rLsl++t/qUy7ewfiytM9aDSWlz+ zqwGiDIzOtj9Fy+Qoh5R5q4+1yt5nfWnzoST2/FKlasqTYsVWUop8YE2YpEEOs1k 2QlbmRJDPeHt0SpI4ZH19QTh1fUyUQfQ5Dok5xbmOgBrLs4ZkP2FsYNxdXRPf9h+ KOOcWfN+QAWQmWbgHUgeF+kH65Cpv9K+jaleVjXMEbgsNvRysxi64m+EhVOqZD0X vYIYtnn6fl9VNs7ahRURUwHdXk7/CvTpuVud36qNVzSE0CmKGHsKHLbTP8S97QIu ick4rIOO+txhkP48SB5I1q3JQI5xyiSI2222iE7p3kqpK62MEwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCB6FGLZeV82akEyshqWKoSx83hJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWZhYjkyYjEtNjFkYi0z ZjAyLWE2OTItZmRjN2I3OGYxYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACjdt0QU58JPkjhdKCbpCeLu1rojj5BWwsb3cJFCq5E0kVOXO+zL CH7+xArIpfvlZV+zOdR0eJYbj+pLC0M+51ssqo7hdq7qx0xKnQSiPvhu0Yc4nbkQ Sm6e9tD1Px9GZSK0rTRoGKNAYq6ZmIXCsreVtPGpKC3Ug5lLHwkgXAd1XHmCtd5c lNYZuqv7CYX7z1w5W5p5E9pr7vJHup0rY8UIA6TIABv0bTb1lmpa9U3RjurMudVg 7Yv089v3ZJn4VsoNAo8pUJMbhOQHYMV55dB1g+ohCyUxVLHyczgVhdnfa1Qv/iJ1 6XIMESvre+3kUXEsr3PVzhXQUbpSdAWLIYw= -----END CERTIFICATE-----Generated at Mon Oct 20 07:21:30 2025 by rpki-client