$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4be5ad6-b7e8-345d-bc99-9bfb2c7e03e1.roa File: c4be5ad6-b7e8-345d-bc99-9bfb2c7e03e1.roa (raw, json) Hash identifier: 7TdRAlX6rkCDfuad+VZQQ2zrnygUJfFw8veHg7TAT1M= Subject key identifier: 44:37:A9:B5:6B:4C:90:C2:D2:8F:C5:55:AF:9F:01:DB:12:2E:94:D1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9D11FB04202B51E881040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4be5ad6-b7e8-345d-bc99-9bfb2c7e03e1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:8508::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:d1:1f:b0:42:02:b5:1e:88:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=27588523-5d86-4e2f-9888-88ea4dd1f821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:88:d7:f0:85:78:55:52:2c:82:68:37:1e: 1f:dc:00:df:16:fa:8b:73:b9:ca:b4:e0:09:5b:d0: 44:a2:59:75:b8:02:26:5c:b9:f4:1e:95:51:a1:16: 4a:1c:82:78:a0:da:fb:37:18:78:5c:4e:7b:50:a3: 0a:9c:0d:48:33:0a:c0:44:2c:a6:9c:a8:d6:d8:d2: a6:a1:4b:a9:d8:51:33:4f:37:b1:b1:e2:33:95:06: ba:2d:a6:7f:64:3e:7c:55:79:ea:76:24:4a:2e:0f: 80:a4:b2:9b:6e:b4:71:d8:30:64:99:52:c3:af:f5: 41:7e:b9:66:fb:38:78:e5:e0:2f:41:43:31:fc:1e: 6d:01:ad:34:78:a7:00:e3:b7:ac:11:6c:db:01:bf: e4:0d:97:54:7b:b1:50:b5:af:c8:ea:17:f3:cc:34: 9a:8d:c0:c3:de:1b:bc:39:b1:b4:7e:2f:b0:ac:e6: 71:5a:df:5e:c8:6e:3b:4e:b9:b5:e0:98:3b:3d:a1: 36:7d:d7:cf:25:d6:5c:51:35:0c:2b:4d:3a:3f:4d: 97:03:a0:f8:d8:63:9e:1b:66:2d:e4:f5:92:0a:5e: 20:20:a1:30:56:e7:81:e5:0a:d6:f3:33:72:4e:18: be:e5:1b:30:0d:64:6d:4a:5a:ef:2e:c8:8b:89:6e: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:37:A9:B5:6B:4C:90:C2:D2:8F:C5:55:AF:9F:01:DB:12:2E:94:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4be5ad6-b7e8-345d-bc99-9bfb2c7e03e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8508::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:54:8e:78:b5:92:b0:ee:0d:5c:07:64:7f:b6:75:e0:eb:b5: d6:fb:dd:df:9f:5d:b0:5c:7a:35:b6:13:ec:12:36:44:eb:8e: 4d:56:84:be:e0:a9:9d:43:4c:11:c9:73:71:75:f9:45:a9:23: 30:66:1d:c2:eb:3f:37:fa:5f:18:79:b4:ae:c7:e8:4e:c0:0d: f5:c9:58:f0:ba:7e:7f:76:21:d9:db:78:9d:39:94:b5:69:a9: 71:2f:2e:3c:95:a3:11:37:42:e8:e6:c8:80:f5:3a:00:02:1f: 3c:2e:68:fe:4b:69:bd:4c:38:81:5a:09:8e:b2:aa:73:d0:b8: da:e5:63:c8:a1:db:83:fa:1e:60:9a:70:a6:3c:4e:53:a0:79: b7:a9:6e:bf:e2:6f:ba:37:cd:30:67:7e:e8:92:dc:f7:a3:80: ba:5c:8e:ef:50:c0:35:08:f8:69:7d:cc:e9:2c:0b:5d:a0:01: b0:db:57:31:9d:40:0a:9f:89:51:ca:1d:c3:5a:5b:4e:98:3a: e0:9d:ab:ef:27:ea:83:92:2f:20:73:83:eb:4f:9f:26:ed:fc: 2c:44:f7:4a:9e:65:c7:24:44:6f:e1:46:28:ba:1b:9f:6e:a1: c5:ff:8b:c9:7d:1f:ae:a0:7f:63:50:a0:98:93:ec:2e:7f:70: 71:38:2d:f9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9udEfsEICtR6IEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Mjc1ODg1MjMtNWQ4Ni00ZTJmLTk4ODgtODhlYTRkZDFmODIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+KI1/CFeFVSLIJoNx4f3ADfFvqLc7nKtOAJ W9BEoll1uAImXLn0HpVRoRZKHIJ4oNr7Nxh4XE57UKMKnA1IMwrARCymnKjW2NKm oUup2FEzTzexseIzlQa6LaZ/ZD58VXnqdiRKLg+ApLKbbrRx2DBkmVLDr/VBfrlm +zh45eAvQUMx/B5tAa00eKcA47esEWzbAb/kDZdUe7FQta/I6hfzzDSajcDD3hu8 ObG0fi+wrOZxWt9eyG47Trm14Jg7PaE2fdfPJdZcUTUMK006P02XA6D42GOeG2Yt 5PWSCl4gIKEwVueB5QrW8zNyThi+5RswDWRtSlrvLsiLiW5BIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEQ3qbVrTJDC0o/FVa+fAdsSLpTRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzRiZTVhZDYtYjdlOC0z NDVkLWJjOTktOWJmYjJjN2UwM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYUI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACVUjni1krDuDVwHZH+2deDrtdb73d+fXbBcejW2E+wSNkTrjk1W hL7gqZ1DTBHJc3F1+UWpIzBmHcLrPzf6Xxh5tK7H6E7ADfXJWPC6fn92IdnbeJ05 lLVpqXEvLjyVoxE3QujmyID1OgACHzwuaP5Lab1MOIFaCY6yqnPQuNrlY8ih24P6 HmCacKY8TlOgebepbr/ib7o3zTBnfuiS3PejgLpcju9QwDUI+Gl9zOksC12gAbDb VzGdQAqfiVHKHcNaW06YOuCdq+8n6oOSLyBzg+tPnybt/CxE90qeZcckRG/hRii6 G59uocX/i8l9H66gf2NQoJiT7C5/cHE4Lfk= -----END CERTIFICATE-----Generated at Mon Oct 20 06:26:15 2025 by rpki-client