$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdad6ce8-f9ed-3c54-a711-904d197e7ec0.roa File: cdad6ce8-f9ed-3c54-a711-904d197e7ec0.roa (raw, json) Hash identifier: uX0Q6ry9KxiKe17nL7qY+PPCx3NRbeLtNI1WWL+td1Q= Subject key identifier: 08:D1:B7:C1:3E:47:72:51:1F:EF:69:86:B7:71:43:23:CA:F1:3A:F9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB94063A2CBA6046E880600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdad6ce8-f9ed-3c54-a711-904d197e7ec0.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2001:559:85f4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:40:63:a2:cb:a6:04:6e:88:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8b80310d-2be8-4116-9b93-3359b067710d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:14:e8:b3:ea:75:2d:d2:c7:e3:e9:88:dc: c4:fb:9b:10:bf:70:23:49:7d:0e:f2:ed:a9:d3:fe: 68:34:b6:4e:0c:a3:ef:3c:80:35:fb:cc:63:68:49: 6d:68:29:cc:2a:f9:45:28:4c:24:e8:7a:7e:3b:62: dc:c2:cc:86:83:30:71:f8:52:1d:bb:6f:0f:3f:55: 2e:a3:af:0f:20:ac:67:71:c8:ee:7f:a9:81:ed:58: d4:14:24:3f:ff:a6:29:41:da:4d:2a:9e:6e:d7:69: 54:43:72:0b:65:fd:a0:84:06:c5:f7:d1:a8:91:95: 0d:0d:bb:7c:3d:e5:77:27:dd:7c:16:0c:6f:45:56: 2a:09:33:6c:dc:39:cd:cc:e4:21:e0:2c:7e:0e:aa: 56:18:ee:72:0b:71:69:0c:c5:17:02:c6:de:7b:16: c3:28:fd:4f:93:e1:32:b9:09:bc:73:8a:8c:31:65: 51:02:ce:da:b5:3f:82:7b:1d:24:f4:65:45:21:7a: 35:4a:e9:02:2c:c7:f7:70:78:b3:20:96:23:79:ef: 60:7e:fa:0b:49:44:75:d5:8b:6e:8d:ba:37:84:9b: 35:95:b9:37:5e:47:4c:73:02:29:b6:42:bf:db:f2: 2c:f5:d9:4b:4f:56:2d:b2:3f:ee:13:64:78:29:6c: 7a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D1:B7:C1:3E:47:72:51:1F:EF:69:86:B7:71:43:23:CA:F1:3A:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdad6ce8-f9ed-3c54-a711-904d197e7ec0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:85f4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:ed:b3:2e:3a:9c:e0:8f:10:76:ef:3b:b7:19:28:f4:7f:cf: 47:f9:38:95:51:77:40:c7:d7:4f:76:1b:7a:47:84:5e:f2:13: 02:97:05:a9:da:89:39:6d:35:31:1c:13:35:ca:96:ac:e6:4a: 97:6a:1b:6b:32:bb:60:01:b7:0c:b6:94:67:c2:4e:ce:c7:2e: f9:51:6c:64:77:2a:8e:bb:42:42:fe:56:88:9d:0d:b5:7c:c5: 11:e1:6b:a3:83:f9:01:c2:0b:d1:ec:9b:48:65:e7:2f:18:94: 0c:61:0f:8b:4a:ba:ba:75:ea:13:30:32:28:4f:38:a8:40:73: ae:51:b0:da:dc:fa:2a:97:25:3b:0b:2d:22:16:65:21:2b:0f: 62:ea:48:8d:07:22:7b:d5:b5:65:15:30:8d:48:cd:f4:f0:95: 03:b9:48:b5:d6:4b:2d:35:99:97:6a:81:12:f9:0c:03:8e:f8: e7:de:5b:21:6d:22:b4:d1:0a:b5:70:c9:1b:3f:13:bb:0a:02: ac:fb:d2:4f:c6:10:32:88:b4:9d:85:89:f2:5e:b3:28:13:81: 55:71:10:13:e1:8b:af:e4:7c:e1:76:b6:a2:12:e9:83:52:9d: a2:16:d4:f1:0b:1d:f3:fd:85:47:d1:55:49:ab:ce:e6:b5:b8: 69:7b:ef:84 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uUBjosumBG6IBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OGI4MDMxMGQtMmJlOC00MTE2LTliOTMtMzM1OWIwNjc3MTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2oU6LPqdS3Sx+PpiNzE+5sQv3AjSX0O8u2p 0/5oNLZODKPvPIA1+8xjaEltaCnMKvlFKEwk6Hp+O2LcwsyGgzBx+FIdu28PP1Uu o68PIKxnccjuf6mB7VjUFCQ//6YpQdpNKp5u12lUQ3ILZf2ghAbF99GokZUNDbt8 PeV3J918FgxvRVYqCTNs3DnNzOQh4Cx+DqpWGO5yC3FpDMUXAsbeexbDKP1Pk+Ey uQm8c4qMMWVRAs7atT+Cex0k9GVFIXo1SukCLMf3cHizIJYjee9gfvoLSUR11Ytu jbo3hJs1lbk3XkdMcwIptkK/2/Is9dlLT1Ytsj/uE2R4KWx6awIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAjRt8E+R3JRH+9phrdxQyPK8Tr5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2RhZDZjZTgtZjllZC0z YzU0LWE3MTEtOTA0ZDE5N2U3ZWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYX0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKrtsy46nOCPEHbvO7cZKPR/z0f5OJVRd0DH1092G3pHhF7yEwKX BanaiTltNTEcEzXKlqzmSpdqG2syu2ABtwy2lGfCTs7HLvlRbGR3Ko67QkL+Void DbV8xRHha6OD+QHCC9Hsm0hl5y8YlAxhD4tKurp16hMwMihPOKhAc65RsNrc+iqX JTsLLSIWZSErD2LqSI0HInvVtWUVMI1IzfTwlQO5SLXWSy01mZdqgRL5DAOO+Ofe WyFtIrTRCrVwyRs/E7sKAqz70k/GEDKItJ2FifJesygTgVVxEBPhi6/kfOF2tqIS 6YNSnaIW1PELHfP9hUfRVUmrzua1uGl774Q= -----END CERTIFICATE-----Generated at Mon Oct 20 04:59:41 2025 by rpki-client