$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9fc5b57-dfe6-3266-a0a3-11097a09f76a.roa File: c9fc5b57-dfe6-3266-a0a3-11097a09f76a.roa (raw, json) Hash identifier: e/0d5WV4yaXgYp9VT5YKvSuFh2FBCeug4IZJA0Cf5s4= Subject key identifier: 74:3B:39:62:E7:62:AF:1E:6B:51:B7:BC:19:B6:D1:76:C4:EA:1B:CF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9BE45ED1D0E2B0D2F4840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9fc5b57-dfe6-3266-a0a3-11097a09f76a.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 2001:559:396::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:be:45:ed:1d:0e:2b:0d:2f:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1571f9b8-90a4-48d9-8980-386d203dbc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:68:33:c6:73:fd:cc:98:97:b9:80:9f:94:15: 24:79:14:07:72:bc:d0:6d:62:3a:e9:7e:1a:d4:51: 92:b1:a0:ee:0c:d4:b6:62:69:89:05:a8:a8:92:85: d0:5a:78:99:23:26:96:dc:7d:9b:d0:85:33:7f:98: c1:0e:45:b3:73:fc:16:aa:f7:a3:c6:f1:b3:78:6d: 5b:00:7e:3b:36:dd:03:b5:af:23:20:a6:07:9a:d6: 51:34:83:fe:b0:3a:d2:5a:f5:18:4b:f1:2b:a3:7e: ec:a0:5e:67:36:99:64:c3:ef:5e:57:3d:01:d7:88: b0:81:19:e2:ad:ff:2f:3e:46:17:99:b9:33:58:d2: b0:1d:fe:c9:b6:a7:d7:1e:b4:85:32:d2:03:38:53: 53:48:8b:89:f4:7e:78:01:47:df:28:cf:44:e3:9f: 3d:17:6c:89:88:c9:41:78:d5:1a:f4:93:4c:44:3f: 2e:48:2c:c4:8b:32:0d:20:a7:c2:0b:33:b1:ac:45: 0f:42:8f:b9:f2:8f:77:3f:35:d7:93:b8:b2:92:43: 9f:98:4d:c5:a2:fa:b7:be:1a:23:7c:cd:1d:57:dd: 8a:2f:1d:31:fd:b7:e3:71:b7:04:bf:d4:81:b4:10: 61:f8:ce:62:15:f1:44:d3:d2:1e:cb:39:12:93:f2: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:3B:39:62:E7:62:AF:1E:6B:51:B7:BC:19:B6:D1:76:C4:EA:1B:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c9fc5b57-dfe6-3266-a0a3-11097a09f76a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:396::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f6:c2:2b:df:ed:dc:61:d1:7e:eb:f6:d8:2e:e8:68:a4:e6: 75:07:0f:d7:3a:2f:f2:4a:c2:a8:bb:24:99:22:24:ab:f7:23: d1:14:8e:f7:40:df:20:51:72:68:e9:13:4c:c6:c0:cf:10:e8: ba:c3:c7:6e:48:22:e9:57:eb:b8:21:42:63:fc:de:78:e0:ee: d6:8d:33:e9:01:b4:45:95:85:e8:1a:4a:3b:3f:cf:6b:8b:7a: bf:e6:1e:eb:2d:e7:ed:df:f1:5d:8c:1c:d7:a5:3e:4e:61:d2: 7c:3c:9b:e4:c9:14:9a:1f:49:86:8d:2a:a3:bd:b7:05:f7:71: a5:ac:f7:c1:84:6d:0d:7d:b7:53:e7:cc:0a:bc:1d:d4:a7:f3: 8f:d1:36:d2:05:9c:bd:62:ad:61:8c:4c:e9:c0:d2:92:50:98: 89:a2:97:06:96:f6:20:70:6a:1a:06:d0:21:c8:23:ee:38:c0: 13:63:f6:35:7f:a2:de:60:78:3e:6a:7b:1b:97:d2:14:37:b3: 44:65:5b:94:d1:6f:13:3f:69:1f:54:8d:68:4e:86:77:ae:20: 37:40:45:30:c7:fe:c5:55:0d:ba:f3:e1:75:b4:f1:92:e2:fb: 3a:2c:1e:aa:5a:06:94:1e:5d:7f:64:d7:7a:f6:14:55:be:59: c0:0e:91:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ub5F7R0OKw0vSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTU3MWY5YjgtOTBhNC00OGQ5LTg5ODAtMzg2ZDIwM2RiYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWgzxnP9zJiXuYCflBUkeRQHcrzQbWI66X4a 1FGSsaDuDNS2YmmJBaiokoXQWniZIyaW3H2b0IUzf5jBDkWzc/wWqvejxvGzeG1b AH47Nt0Dta8jIKYHmtZRNIP+sDrSWvUYS/Ero37soF5nNplkw+9eVz0B14iwgRni rf8vPkYXmbkzWNKwHf7JtqfXHrSFMtIDOFNTSIuJ9H54AUffKM9E4589F2yJiMlB eNUa9JNMRD8uSCzEizINIKfCCzOxrEUPQo+58o93PzXXk7iykkOfmE3Fovq3vhoj fM0dV92KLx0x/bfjcbcEv9SBtBBh+M5iFfFE09IeyzkSk/K5CQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHQ7OWLnYq8ea1G3vBm20XbE6hvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzlmYzViNTctZGZlNi0z MjY2LWEwYTMtMTEwOTdhMDlmNzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQOW MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGT2wivf7dxh0X7r9tgu6Gik5nUHD9c6L/JKwqi7JJkiJKv3I9EU jvdA3yBRcmjpE0zGwM8Q6LrDx25IIulX67ghQmP83njg7taNM+kBtEWVhegaSjs/ z2uLer/mHust5+3f8V2MHNelPk5h0nw8m+TJFJofSYaNKqO9twX3caWs98GEbQ19 t1PnzAq8HdSn84/RNtIFnL1irWGMTOnA0pJQmImilwaW9iBwahoG0CHII+44wBNj 9jV/ot5geD5qexuX0hQ3s0RlW5TRbxM/aR9UjWhOhneuIDdARTDH/sVVDbrz4XW0 8ZLi+zosHqpaBpQeXX9k13r2FFW+WcAOkZ4= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:24 2025 by rpki-client