$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5e58018-ba43-36cf-b324-b40d0a718ad3.roa File: c5e58018-ba43-36cf-b324-b40d0a718ad3.roa (raw, json) Hash identifier: NIVMNfzBXb7Ajhh3mSLdpKzmF1dff4l6SMSW+mi+ivs= Subject key identifier: AA:C2:FF:80:ED:E4:03:39:9F:A1:DA:4A:E7:30:60:A8:6A:2E:8C:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7A04EBCEE46A534151B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5e58018-ba43-36cf-b324-b40d0a718ad3.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2001:559:18c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:a0:4e:bc:ee:46:a5:34:15:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=563fd094-cf5f-4c3a-af84-6db6a8bce79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a1:3c:3e:15:ba:be:0c:93:3d:a8:96:9c:55: 82:60:b1:e4:a7:a3:92:a7:c3:3b:39:41:77:54:e1: ac:ed:31:9b:e3:47:8f:71:fa:e5:fb:74:e1:22:ae: 46:44:e1:03:b5:83:3c:70:a0:b8:23:9f:e0:74:ac: 4a:84:6c:45:7d:ed:0e:f9:f8:bc:77:83:6d:7c:d7: 5c:a1:bc:67:06:77:c1:fe:ea:49:c6:61:76:40:b3: bf:e4:f6:60:b8:d0:d4:29:e7:de:eb:47:ea:e9:f5: 72:0e:fe:ae:9b:da:11:ce:a9:f4:56:69:ad:e3:40: 07:9a:7c:b0:ee:f8:07:60:29:db:7a:3c:d0:27:76: 2d:b2:30:18:db:bf:6d:7b:b7:6e:fe:6d:f4:82:4f: 11:c8:20:a9:27:32:42:75:69:07:f3:f5:fc:1c:8c: db:7e:70:4e:af:df:1f:19:a4:67:b8:e2:ea:3a:ac: 89:7b:79:03:90:46:aa:7b:15:5b:d1:3d:b7:eb:47: 20:ad:5c:e8:2b:06:c4:b6:2d:3e:2f:22:f5:26:6d: f0:f9:7e:05:a8:13:2b:20:b7:53:dc:5c:35:64:cd: 5d:d9:8d:b0:18:b1:e9:54:8e:79:56:4f:06:54:88: 1d:1c:64:91:b3:95:f5:63:c3:ff:02:cb:a2:70:37: 13:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C2:FF:80:ED:E4:03:39:9F:A1:DA:4A:E7:30:60:A8:6A:2E:8C:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5e58018-ba43-36cf-b324-b40d0a718ad3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:18c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:bd:70:f7:d4:cf:b0:97:e5:19:4d:e3:0e:9d:10:8c:3d:5e: 66:73:e6:18:c9:2c:9e:c6:be:e1:03:13:a3:d9:90:98:a8:e6: 4c:a1:6d:18:1c:5a:c3:33:00:25:6c:14:08:ae:1c:7a:48:76: ab:ea:cd:43:ee:75:ae:7c:de:ac:f3:68:8a:f3:83:78:54:a2: 07:f7:c7:eb:86:9c:70:f7:0e:b7:5a:87:c2:61:ac:6d:1d:93: 07:0f:00:fb:19:e9:74:6b:88:4b:f0:97:d9:4d:56:92:6c:76: f8:b0:c0:ee:6c:8f:6a:94:cf:41:d1:e0:aa:25:a0:8f:25:58: d0:ee:b1:ee:ae:64:62:1d:a6:86:59:7b:cf:6e:b0:6b:6d:3c: 76:91:2c:dc:6d:32:36:8e:9b:68:d6:fd:af:9e:c6:18:8a:9c: a6:0d:53:00:ca:72:2b:87:ab:23:ca:ad:a8:35:80:8f:d9:82: ef:a3:c1:c0:5f:50:0a:0d:3c:ba:35:19:8e:36:d7:ad:f6:6b: 32:30:3a:e1:09:9b:7d:25:f6:82:3c:df:dc:e2:89:21:cc:63: 37:96:e3:07:99:92:a2:df:d3:6a:ad:78:d2:4a:dd:ef:bf:49: 66:12:e0:0f:06:4e:0a:c6:00:51:04:8f:fe:9a:f1:73:5e:25: a7:83:0f:47 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t6BOvO5GpTQVG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NTYzZmQwOTQtY2Y1Zi00YzNhLWFmODQtNmRiNmE4YmNlNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaE8PhW6vgyTPaiWnFWCYLHkp6OSp8M7OUF3 VOGs7TGb40ePcfrl+3ThIq5GROEDtYM8cKC4I5/gdKxKhGxFfe0O+fi8d4NtfNdc obxnBnfB/upJxmF2QLO/5PZguNDUKefe60fq6fVyDv6um9oRzqn0Vmmt40AHmnyw 7vgHYCnbejzQJ3YtsjAY279te7du/m30gk8RyCCpJzJCdWkH8/X8HIzbfnBOr98f GaRnuOLqOqyJe3kDkEaqexVb0T2360cgrVzoKwbEti0+LyL1Jm3w+X4FqBMrILdT 3Fw1ZM1d2Y2wGLHpVI55Vk8GVIgdHGSRs5X1Y8P/AsuicDcTOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKrC/4Dt5AM5n6HaSucwYKhqLoxxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzVlNTgwMTgtYmE0My0z NmNmLWIzMjQtYjQwZDBhNzE4YWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQGM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIC9cPfUz7CX5RlN4w6dEIw9XmZz5hjJLJ7GvuEDE6PZkJio5kyh bRgcWsMzACVsFAiuHHpIdqvqzUPuda583qzzaIrzg3hUogf3x+uGnHD3Drdah8Jh rG0dkwcPAPsZ6XRriEvwl9lNVpJsdviwwO5sj2qUz0HR4KoloI8lWNDuse6uZGId poZZe89usGttPHaRLNxtMjaOm2jW/a+exhiKnKYNUwDKciuHqyPKrag1gI/Zgu+j wcBfUAoNPLo1GY421632azIwOuEJm30l9oI839ziiSHMYzeW4weZkqLf02qteNJK 3e+/SWYS4A8GTgrGAFEEj/6a8XNeJaeDD0c= -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:17 2025 by rpki-client