$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b89c60e8-e7d4-3377-afc9-c26a9637e1a4.roa File: b89c60e8-e7d4-3377-afc9-c26a9637e1a4.roa (raw, json) Hash identifier: KbzK9QO65CVfG0vF6SXhAi0x7zNIgPkai9Sg9kb+6mo= Subject key identifier: 18:C9:D1:80:53:73:3F:6A:21:1E:1C:C7:2A:B0:07:CF:D6:DA:1B:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB85CCCCA0F76B048DE4A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b89c60e8-e7d4-3377-afc9-c26a9637e1a4.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:488::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:5c:cc:ca:0f:76:b0:48:de:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=04a5aa38-5a6f-4bee-a86a-eb5aeec9e6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:ce:7e:0d:96:d6:07:92:2c:c1:6d:a2:41: 3f:a1:56:10:7c:13:09:40:b4:e3:e4:0a:df:b5:86: 82:b7:d2:d4:6f:36:4d:34:1e:14:75:3a:60:3d:c7: 16:e9:81:a8:61:3b:8f:2d:a4:78:69:ab:db:4e:4c: 3a:7a:9f:90:41:3e:5f:4e:9d:98:fe:eb:f1:3c:5e: 87:77:66:30:f8:8c:b8:41:ae:96:a9:0c:e9:db:00: 60:a6:e6:4d:93:29:16:58:ca:ef:9f:58:af:31:4e: f2:80:77:99:24:44:4a:a1:34:d7:04:05:bd:ab:0f: 7c:3c:00:6b:ad:fe:5d:89:40:3c:c9:42:f0:6b:03: 6e:69:e1:e2:b1:f7:46:c3:4f:7b:93:d6:36:aa:3e: d4:dd:1d:96:76:94:e0:de:92:1a:a3:94:8d:a6:c5: 7f:5e:85:65:1b:d7:ab:5f:3b:5e:73:86:d2:ed:6a: 2a:89:63:fa:c1:df:51:0d:e9:0d:08:b0:c9:24:d2: 8f:e7:33:a6:b7:e8:60:0b:17:f5:78:a5:60:d9:ce: 04:94:60:32:43:b9:10:dc:5c:ad:e3:73:3c:6c:95: 88:7d:a1:d1:c9:85:ef:9b:80:bd:f9:e0:96:92:1c: 75:12:0d:cb:92:03:cb:81:85:81:96:7b:58:eb:7c: 6b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C9:D1:80:53:73:3F:6A:21:1E:1C:C7:2A:B0:07:CF:D6:DA:1B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b89c60e8-e7d4-3377-afc9-c26a9637e1a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:488::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:18:e9:1d:13:f4:73:f2:35:49:65:09:65:18:d6:6b:e8:59: a2:37:6e:e3:68:83:de:0a:13:9e:35:9b:8c:ff:3a:aa:00:2d: 28:a5:0c:be:e9:e8:7b:bb:7e:f4:0c:0f:3e:be:61:9d:0e:41: cb:c8:da:f1:e7:4f:71:c3:3c:dc:8b:e3:b7:5b:c7:6c:23:18: 15:13:14:11:7c:d3:40:c6:31:70:2a:03:9f:70:43:ac:83:0b: 43:ca:c0:c5:ff:78:f2:86:77:4d:39:79:43:b9:82:b8:a4:0a: cb:38:82:30:c9:b8:0b:eb:44:71:2c:e6:d0:b0:98:33:7e:67: 53:6b:6e:01:5d:83:40:a3:4a:b9:9a:01:0a:7d:a9:ac:72:46: 68:d9:fa:a7:99:3f:1a:20:91:7b:1e:4c:d6:0d:62:dd:3f:54: 27:b1:b5:c1:45:e7:97:11:ae:f8:0a:11:aa:e7:27:57:4f:55: 51:5c:5e:90:12:cc:f6:ed:86:04:f6:6c:71:a1:80:d6:37:86: 9f:03:d1:4e:51:5b:35:f5:da:5f:47:d7:43:0a:ed:c1:4c:41: 09:e7:7f:7c:9a:45:5d:8f:97:64:aa:90:56:7f:e5:e6:f2:ca: 98:f0:bf:98:ba:e6:b6:bb:bd:aa:cf:fe:a5:fe:5e:18:94:45: 84:3c:05:d3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uFzMyg92sEjeSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MDRhNWFhMzgtNWE2Zi00YmVlLWE4NmEtZWI1YWVlYzllNmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/nOfg2W1geSLMFtokE/oVYQfBMJQLTj5Arf tYaCt9LUbzZNNB4UdTpgPccW6YGoYTuPLaR4aavbTkw6ep+QQT5fTp2Y/uvxPF6H d2Yw+Iy4Qa6WqQzp2wBgpuZNkykWWMrvn1ivMU7ygHeZJERKoTTXBAW9qw98PABr rf5diUA8yULwawNuaeHisfdGw097k9Y2qj7U3R2WdpTg3pIao5SNpsV/XoVlG9er Xztec4bS7WoqiWP6wd9RDekNCLDJJNKP5zOmt+hgCxf1eKVg2c4ElGAyQ7kQ3Fyt 43M8bJWIfaHRyYXvm4C9+eCWkhx1Eg3LkgPLgYWBlntY63xrMwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBjJ0YBTcz9qIR4cxyqwB8/W2hutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjg5YzYwZTgtZTdkNC0z Mzc3LWFmYzktYzI2YTk2MzdlMWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQSI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFcY6R0T9HPyNUllCWUY1mvoWaI3buNog94KE541m4z/OqoALSil DL7p6Hu7fvQMDz6+YZ0OQcvI2vHnT3HDPNyL47dbx2wjGBUTFBF800DGMXAqA59w Q6yDC0PKwMX/ePKGd005eUO5grikCss4gjDJuAvrRHEs5tCwmDN+Z1NrbgFdg0Cj SrmaAQp9qaxyRmjZ+qeZPxogkXseTNYNYt0/VCextcFF55cRrvgKEarnJ1dPVVFc XpASzPbthgT2bHGhgNY3hp8D0U5RWzX12l9H10MK7cFMQQnnf3yaRV2Pl2SqkFZ/ 5ebyypjwv5i65ra7varP/qX+XhiURYQ8BdM= -----END CERTIFICATE-----Generated at Mon Oct 20 06:35:44 2025 by rpki-client