$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9675f6-a91a-3613-96dd-be9a8f0aacb3.roa File: bf9675f6-a91a-3613-96dd-be9a8f0aacb3.roa (raw, json) Hash identifier: yohPux/x46xaPizGZj3bP9iFjoE/HHcT8gAxkH4NycE= Subject key identifier: 60:7E:2B:1B:8C:DE:B7:52:95:0A:3E:4A:F7:8B:CD:21:4C:97:EA:A9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB83C202BB836060C5E7CC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9675f6-a91a-3613-96dd-be9a8f0aacb3.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:810f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:3c:20:2b:b8:36:06:0c:5e:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8a0e05a6-c8e1-4d94-b5e5-2debae75bd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:24:00:7e:33:9d:a4:96:44:32:7e:61:dc:d2: 02:a1:15:cd:ed:bf:c1:31:90:fd:b1:6f:6a:11:62: 9f:e0:e4:06:b5:bb:51:fe:00:6e:3d:b2:74:31:1a: 8b:17:22:cb:0e:f4:1e:db:79:74:a9:c0:59:df:83: 66:49:16:b2:86:29:0b:9a:7f:60:42:cb:2a:a7:d4: 9e:68:14:c8:2d:3a:6d:d5:ab:77:32:68:f4:5c:ea: 29:e8:d6:93:ea:ab:2b:21:6c:1b:6b:db:a0:af:95: fc:42:91:ec:ad:ef:a9:6b:f9:d5:71:d4:80:ce:63: 77:63:97:b9:b0:82:65:84:ae:01:2d:5c:3d:d8:b8: ba:2c:ba:70:e3:0c:aa:12:54:e1:ae:c1:44:79:dd: d3:13:b9:b4:c8:98:e2:ad:72:a4:a3:40:b5:d7:86: 59:28:db:d7:38:e1:89:d7:88:5f:22:b0:42:df:ae: 79:ef:6e:72:76:2e:06:65:67:39:87:b0:c8:d9:03: 9a:7a:22:c3:e2:1e:33:cd:54:96:27:50:67:1c:87: 10:ec:e5:cf:fb:92:d5:14:47:f9:32:b6:48:a1:8c: 03:12:85:27:3b:b4:3c:b2:82:63:af:21:8e:76:e4: 5d:9e:a2:ba:a9:f4:71:c8:fb:c6:bd:6e:e8:7b:0f: 28:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:7E:2B:1B:8C:DE:B7:52:95:0A:3E:4A:F7:8B:CD:21:4C:97:EA:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf9675f6-a91a-3613-96dd-be9a8f0aacb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:810f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:8c:e0:ff:fe:c0:b0:fb:5b:fa:02:ca:e9:59:b6:11:75:42: b3:f7:cd:13:ff:b7:ba:8a:ad:45:65:a5:2a:d7:50:1b:f4:f3: e2:e5:87:4d:99:df:6a:28:17:c7:25:ff:ec:1e:a4:d4:8a:e2: 12:1a:5b:58:a6:9a:7f:33:69:e1:a1:de:c9:15:e2:5d:df:f8: 59:a8:f8:df:b8:32:70:e9:f6:a9:3e:3b:d6:3c:dc:aa:5b:ce: ff:94:c2:5e:48:9c:91:ff:ef:47:79:d4:b8:48:ea:bd:ac:d4: fc:c3:7e:f6:aa:16:4c:95:1c:08:a1:a7:00:f3:9c:d3:f2:96: 58:4d:21:24:7f:d5:d0:dc:30:93:eb:02:4c:f6:42:24:0d:76: 95:38:04:e9:70:a7:58:38:6b:42:2c:9f:c5:aa:df:7a:d9:c2: ba:b6:c3:9e:96:7d:2f:07:7b:94:71:58:c1:13:cb:e9:79:6f: 9e:b5:80:30:ba:d4:25:7c:ea:7a:86:10:5b:9d:fa:db:71:09: 79:bf:5e:51:9e:18:58:11:24:6c:06:19:44:9f:1a:a2:e0:58: 6f:f2:20:56:18:d2:8c:68:72:a0:60:82:ff:9e:43:fe:d4:f8: 17:04:33:c8:2c:42:d6:c1:8e:33:1f:27:99:c2:3e:fb:6e:d2: bf:ea:30:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uDwgK7g2BgxefMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OGEwZTA1YTYtYzhlMS00ZDk0LWI1ZTUtMmRlYmFlNzViZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyQAfjOdpJZEMn5h3NICoRXN7b/BMZD9sW9q EWKf4OQGtbtR/gBuPbJ0MRqLFyLLDvQe23l0qcBZ34NmSRayhikLmn9gQssqp9Se aBTILTpt1at3Mmj0XOop6NaT6qsrIWwba9ugr5X8QpHsre+pa/nVcdSAzmN3Y5e5 sIJlhK4BLVw92Li6LLpw4wyqElThrsFEed3TE7m0yJjirXKko0C114ZZKNvXOOGJ 14hfIrBC3655725ydi4GZWc5h7DI2QOaeiLD4h4zzVSWJ1BnHIcQ7OXP+5LVFEf5 MrZIoYwDEoUnO7Q8soJjryGOduRdnqK6qfRxyPvGvW7oew8oOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGB+KxuM3rdSlQo+SveLzSFMl+qpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY5Njc1ZjYtYTkxYS0z NjEzLTk2ZGQtYmU5YThmMGFhY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYEP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6M4P/+wLD7W/oCyulZthF1QrP3zRP/t7qKrUVlpSrXUBv08+Ll h02Z32ooF8cl/+wepNSK4hIaW1immn8zaeGh3skV4l3f+Fmo+N+4MnDp9qk+O9Y8 3Kpbzv+Uwl5InJH/70d51LhI6r2s1PzDfvaqFkyVHAihpwDznNPyllhNISR/1dDc MJPrAkz2QiQNdpU4BOlwp1g4a0Isn8Wq33rZwrq2w56WfS8He5RxWMETy+l5b561 gDC61CV86nqGEFud+ttxCXm/XlGeGFgRJGwGGUSfGqLgWG/yIFYY0oxocqBggv+e Q/7U+BcEM8gsQtbBjjMfJ5nCPvtu0r/qMN0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:38:09 2025 by rpki-client