$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc5add42-6272-339b-ae38-1581123b1220.roa File: bc5add42-6272-339b-ae38-1581123b1220.roa (raw, json) Hash identifier: QYKGeMbcphfeproxz3i1ivqJ3kX6xqcnOnmmzKne1cI= Subject key identifier: 20:7A:34:21:09:24:51:C3:F4:98:41:90:B8:E2:DF:BE:04:71:73:0E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB867C8AE76DEA3E5076A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc5add42-6272-339b-ae38-1581123b1220.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:c3f2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:67:c8:ae:76:de:a3:e5:07:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=c69ee0bb-e43c-45e6-a021-19b9b3754f92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:33:77:3b:38:85:a8:af:7f:b1:f9:08:31: e3:9c:7d:be:e4:c6:c5:0f:bd:01:01:c7:cf:41:32: b0:ad:eb:ea:c7:65:ec:59:ca:5d:94:ed:2b:91:ab: 1e:9f:a4:81:55:5f:52:c5:27:47:79:a7:47:ae:67: fc:7e:e6:2c:e1:d0:3d:7e:3d:cf:54:a8:b6:8d:eb: 0d:cf:f0:fe:28:76:45:3f:61:1f:69:d1:1f:a2:4a: 5d:2b:85:91:b0:3f:9c:0a:f7:cf:56:9f:2f:20:83: 28:26:32:01:9c:92:81:1e:d7:52:e7:06:e0:45:f6: 62:04:f8:b8:27:c5:cd:fa:f7:c4:7a:fb:61:30:3a: 4a:4a:be:8d:71:68:b7:88:c4:e1:d1:f2:ef:ba:47: 64:6d:93:bd:d1:7a:97:ff:3f:51:af:e6:b7:46:db: d6:b1:cd:c8:ea:28:39:2d:59:e4:4b:37:72:59:0a: 68:d5:4d:8c:f9:53:d7:1e:9e:a2:02:9c:e6:b2:0f: 83:29:48:70:3f:36:16:63:63:0c:2a:30:0b:c4:5f: 60:81:0f:20:5e:21:de:02:f4:8d:2b:46:58:aa:5e: ba:ab:b2:00:ff:dd:56:25:2e:ba:bd:1f:d3:7a:8a: 5e:0c:bf:17:01:1c:ca:68:be:61:6e:96:7a:80:b1: 50:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:7A:34:21:09:24:51:C3:F4:98:41:90:B8:E2:DF:BE:04:71:73:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc5add42-6272-339b-ae38-1581123b1220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3f2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:7b:1b:90:7d:db:7f:58:1a:40:c3:8f:85:de:21:79:60:62: ff:2a:92:be:5a:cf:ed:d2:69:54:85:3f:4c:90:fe:47:21:25: 3b:14:b5:4e:1a:ab:44:ab:be:f0:8c:60:4c:29:bb:44:ec:aa: 46:9d:56:70:c8:3a:e3:1c:20:63:85:8a:f3:34:78:ad:73:9d: d3:99:ee:9d:6c:4f:93:99:52:74:d5:39:61:98:31:56:2f:32: 13:2c:cf:c5:51:2f:27:d9:fb:ec:00:16:0d:29:f7:40:eb:1d: 3b:59:5b:58:f1:c9:57:96:9e:52:e9:8b:60:19:f5:5b:bb:5f: 08:29:67:b3:21:87:2e:26:ec:fe:bb:f1:f2:59:55:fd:05:14: 08:22:63:2e:ad:03:73:b6:37:19:41:22:76:ad:b3:4d:f9:a7: e5:e9:0f:ec:3e:ce:74:f8:26:8c:9a:c9:62:02:2e:52:22:15: 6c:df:c0:ee:03:b5:cf:2a:ee:16:7c:47:98:b7:75:a3:45:ed: 48:7b:86:b1:90:14:7b:58:db:33:2c:03:bb:6d:47:79:71:1b: ac:98:2a:31:d5:57:f9:59:0d:ba:30:bf:09:44:11:44:17:23: ba:98:4f:e8:01:57:dd:2a:75:6e:bf:81:f9:cb:79:c0:d0:e4: 44:5c:26:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uGfIrnbeo+UHagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YzY5ZWUwYmItZTQzYy00NWU2LWEwMjEtMTliOWIzNzU0ZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt68zdzs4haivf7H5CDHjnH2+5MbFD70BAcfP QTKwrevqx2XsWcpdlO0rkasen6SBVV9SxSdHeadHrmf8fuYs4dA9fj3PVKi2jesN z/D+KHZFP2EfadEfokpdK4WRsD+cCvfPVp8vIIMoJjIBnJKBHtdS5wbgRfZiBPi4 J8XN+vfEevthMDpKSr6NcWi3iMTh0fLvukdkbZO90XqX/z9Rr+a3RtvWsc3I6ig5 LVnkSzdyWQpo1U2M+VPXHp6iApzmsg+DKUhwPzYWY2MMKjALxF9ggQ8gXiHeAvSN K0ZYql66q7IA/91WJS66vR/TeopeDL8XARzKaL5hbpZ6gLFQ6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCB6NCEJJFHD9JhBkLji374EcXMOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmM1YWRkNDItNjI3Mi0z MzliLWFlMzgtMTU4MTEyM2IxMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFd7G5B9239YGkDDj4XeIXlgYv8qkr5az+3SaVSFP0yQ/kchJTsU tU4aq0SrvvCMYEwpu0TsqkadVnDIOuMcIGOFivM0eK1zndOZ7p1sT5OZUnTVOWGY MVYvMhMsz8VRLyfZ++wAFg0p90DrHTtZW1jxyVeWnlLpi2AZ9Vu7XwgpZ7Mhhy4m 7P678fJZVf0FFAgiYy6tA3O2NxlBInats035p+XpD+w+znT4JoyayWICLlIiFWzf wO4Dtc8q7hZ8R5i3daNF7Uh7hrGQFHtY2zMsA7ttR3lxG6yYKjHVV/lZDbowvwlE EUQXI7qYT+gBV90qdW6/gfnLecDQ5ERcJk4= -----END CERTIFICATE-----Generated at Mon Oct 20 08:53:53 2025 by rpki-client