$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa File: bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa (raw, json) Hash identifier: vUDImKJ6JmU64Uo4AjEwnfcFrS1Z+Mp7d7KvbvnNpvY= Subject key identifier: D4:25:C6:D9:0F:72:53:19:46:9C:FC:8A:9E:F7:BC:03:19:B7:61:41 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7D82EA15BA7C5023BEF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:713::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:d8:2e:a1:5b:a7:c5:02:3b:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=14783cb8-bc28-4c0f-9b88-523f46e2ec1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:c1:6f:62:ed:c7:76:56:78:87:c3:3c:ae: 6a:cb:a8:25:bc:f0:67:13:fe:5e:5e:27:c0:6b:08: ba:55:5b:fb:6c:14:20:3b:50:3d:10:be:81:7b:44: 7c:57:67:9b:14:60:91:75:74:c6:dd:af:09:c6:cf: 68:5d:50:98:2d:4e:e3:1b:c2:03:02:0d:34:86:c1: 27:09:4c:73:6f:ee:93:e0:20:66:f5:fb:d3:97:86: ec:f6:53:e6:19:30:a1:97:d5:e4:21:35:b5:f6:4a: d4:6d:98:cb:02:d7:bb:8f:f8:a7:dd:c5:81:78:c4: 21:b0:c6:1f:86:97:6d:e0:3d:3a:1d:ec:cc:86:d3: 37:45:f5:ee:ce:a1:6b:45:fe:61:de:c3:fc:2e:82: 56:c7:68:9d:42:ee:b3:45:af:3b:60:2d:bf:6b:5a: 82:81:42:97:b2:27:ba:24:8d:ad:87:91:76:98:bb: 66:1e:09:88:6e:87:22:8f:d3:a6:f1:76:88:d5:29: ea:8d:f3:4d:a6:70:95:a3:2e:cb:01:01:8b:be:9c: 3c:b7:53:a5:07:e0:1c:6d:53:41:ae:0c:b4:40:08: c7:5a:99:d8:a9:fa:d4:a9:f3:12:5b:04:44:ac:0a: c2:e6:46:8b:66:6a:4b:e8:e4:c4:cd:8e:ca:22:61: a0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:25:C6:D9:0F:72:53:19:46:9C:FC:8A:9E:F7:BC:03:19:B7:61:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfd10aea-83aa-32fb-b166-1901f4d3f67e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:713::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:dd:ad:c4:25:f7:5e:32:f7:10:5c:d9:bf:f1:36:17:f5:f8: cf:21:9f:f7:21:2b:fc:c9:ab:9c:b1:c0:0c:41:8b:5c:f4:bd: 61:f7:eb:91:d0:62:63:e1:66:55:9c:79:2d:a0:11:4e:9e:9c: a3:45:2d:20:79:77:fe:03:26:9d:57:2a:b3:a1:5e:68:ad:2f: d7:b1:5f:3e:68:e1:ea:ab:ce:d4:c0:e7:05:cc:2b:59:d9:97: 94:3a:a3:a0:ed:37:7d:f6:fe:a6:2f:f5:18:43:d0:59:f2:3d: 85:72:19:ec:cb:ae:aa:9d:d6:01:47:cb:bb:43:f2:53:e2:e5: 26:9b:4e:ae:35:63:66:66:7d:2e:f9:2b:43:dc:0b:a5:e6:d5: e4:41:61:ea:0b:10:79:92:36:f8:c2:4c:8c:92:49:78:89:b3: 58:7d:e3:ee:7d:78:69:83:f3:cb:ca:66:d1:3c:b7:86:d0:82: 28:f3:d8:04:c8:99:8b:28:d3:be:4a:78:52:2b:32:2a:2f:ab: a9:4b:8e:48:61:c8:2d:67:50:d1:41:db:28:7f:9e:1a:fd:ef: ed:95:8b:60:dd:6c:68:2e:25:6c:a4:eb:0b:6d:ee:8a:82:8e: 53:1b:1c:58:08:d6:b0:ed:51:8f:58:9e:8c:f3:0d:84:f1:6b: 70:7d:89:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t9guoVunxQI77wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTQ3ODNjYjgtYmMyOC00YzBmLTliODgtNTIzZjQ2ZTJlYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBjBb2Ltx3ZWeIfDPK5qy6glvPBnE/5eXifA awi6VVv7bBQgO1A9EL6Be0R8V2ebFGCRdXTG3a8Jxs9oXVCYLU7jG8IDAg00hsEn CUxzb+6T4CBm9fvTl4bs9lPmGTChl9XkITW19krUbZjLAte7j/in3cWBeMQhsMYf hpdt4D06HezMhtM3RfXuzqFrRf5h3sP8LoJWx2idQu6zRa87YC2/a1qCgUKXsie6 JI2th5F2mLtmHgmIbocij9Om8XaI1SnqjfNNpnCVoy7LAQGLvpw8t1OlB+AcbVNB rgy0QAjHWpnYqfrUqfMSWwRErArC5kaLZmpL6OTEzY7KImGgwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNQlxtkPclMZRpz8ip73vAMZt2FBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmZkMTBhZWEtODNhYS0z MmZiLWIxNjYtMTkwMWY0ZDNmNjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQcT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH3drcQl914y9xBc2b/xNhf1+M8hn/chK/zJq5yxwAxBi1z0vWH3 65HQYmPhZlWceS2gEU6enKNFLSB5d/4DJp1XKrOhXmitL9exXz5o4eqrztTA5wXM K1nZl5Q6o6DtN332/qYv9RhD0FnyPYVyGezLrqqd1gFHy7tD8lPi5SabTq41Y2Zm fS75K0PcC6Xm1eRBYeoLEHmSNvjCTIySSXiJs1h94+59eGmD88vKZtE8t4bQgijz 2ATImYso075KeFIrMiovq6lLjkhhyC1nUNFB2yh/nhr97+2Vi2DdbGguJWyk6wtt 7oqCjlMbHFgI1rDtUY9YnozzDYTxa3B9iUo= -----END CERTIFICATE-----Generated at Mon Oct 20 05:27:36 2025 by rpki-client