$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3342c34-f296-3f93-84ba-8c99d4773b1b.roa File: d3342c34-f296-3f93-84ba-8c99d4773b1b.roa (raw, json) Hash identifier: l4i/nUiXaysRXv41dk2bQqwxBN1DQwVrwUkdsPvs6r8= Subject key identifier: A7:FB:95:4E:E0:9B:2A:5F:EF:77:77:38:C1:7D:4B:9F:80:80:27:40 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB75A1E439A47831BADD340 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3342c34-f296-3f93-84ba-8c99d4773b1b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7016 IP address blocks: 2001:559:503::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:5a:1e:43:9a:47:83:1b:ad:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=258773bb-c599-412f-901a-5cf7d0b0511c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ae:d3:a2:14:32:45:61:0a:3f:d8:19:85:a5: 09:ec:f6:10:88:dc:ab:94:a8:74:4b:58:36:2e:aa: 7d:51:19:97:16:d1:36:61:97:ee:94:0b:1f:f6:22: 4b:2c:e8:ad:1f:3f:94:90:e2:e0:c0:47:62:f4:65: 38:33:38:93:62:90:78:20:33:cc:7b:34:c6:18:98: b4:5a:a7:fb:89:4f:6e:8c:a4:76:4d:51:dc:b2:1f: 5e:b2:ed:f5:14:ef:cf:49:a8:d8:27:e9:fd:53:13: 2f:33:58:dd:23:bd:fa:cf:7c:66:0a:2a:37:1e:4b: a0:86:21:83:49:ee:ef:9f:bd:2c:76:e0:56:0a:c9: ad:4f:23:45:b4:d0:3d:ee:19:24:af:d7:45:0d:61: 0e:99:69:46:b2:73:3a:08:5f:20:b6:ef:68:41:cf: 68:93:d7:4a:8a:65:7a:b2:d5:d2:98:42:30:8b:dc: 70:76:fe:d8:2a:5f:3b:1c:12:c8:a5:b1:cc:f9:f7: 20:c9:16:ec:9c:3e:ab:a8:dc:0b:64:b1:e5:7f:95: 4e:f3:da:13:fe:d3:d5:f9:72:b5:8e:07:fc:50:2c: e8:5c:ed:f4:e9:05:9e:40:85:3a:61:be:19:6d:89: f5:80:17:51:f4:5a:f8:c8:97:b3:21:3e:14:0f:59: 84:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FB:95:4E:E0:9B:2A:5F:EF:77:77:38:C1:7D:4B:9F:80:80:27:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3342c34-f296-3f93-84ba-8c99d4773b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:503::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:8f:bd:b7:24:3f:5b:d8:d0:7b:02:37:4a:60:0f:b1:07:d8: 0a:aa:d3:b0:ac:3a:69:40:20:67:d9:42:f1:f6:7d:b8:72:21: 09:1f:23:c1:7c:be:34:1b:65:dd:93:e0:2b:12:26:8b:29:b0: 3e:f5:84:d9:f1:14:1e:f9:3e:b1:49:3b:71:27:eb:2a:a6:b2: 39:33:4b:7c:7f:8a:f4:44:eb:03:62:c2:81:79:b4:90:91:af: c8:7f:3d:be:05:e5:b6:7a:2c:5b:0d:7c:22:e5:66:d8:15:58: a8:3a:0d:1e:2e:aa:60:82:50:14:5a:53:58:aa:06:c4:9c:a8: eb:9a:08:de:2e:55:6c:e2:6a:39:82:0c:cf:75:9e:2a:49:a4: 02:62:b8:56:20:24:72:4d:42:6c:29:56:a0:96:c3:57:17:60: 39:54:92:8f:87:19:8e:c8:a2:5e:7a:1d:08:92:5b:3e:6a:4e: d9:ae:18:7b:64:e8:6f:5c:d8:f2:b3:c1:cc:70:94:36:6f:e4: 39:d0:8e:bd:2b:a6:af:28:b0:39:b7:ce:5e:5a:f7:93:05:36: 78:af:48:2f:e6:e8:d4:10:c8:63:92:09:f4:6c:7e:e4:19:94: 1c:60:65:31:a4:07:10:6c:fa:6e:8e:4c:48:59:21:0b:07:92: a2:74:ac:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t1oeQ5pHgxut00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MjU4NzczYmItYzU5OS00MTJmLTkwMWEtNWNmN2QwYjA1MTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq7TohQyRWEKP9gZhaUJ7PYQiNyrlKh0S1g2 Lqp9URmXFtE2YZfulAsf9iJLLOitHz+UkOLgwEdi9GU4MziTYpB4IDPMezTGGJi0 Wqf7iU9ujKR2TVHcsh9esu31FO/PSajYJ+n9UxMvM1jdI736z3xmCio3HkughiGD Se7vn70sduBWCsmtTyNFtNA97hkkr9dFDWEOmWlGsnM6CF8gtu9oQc9ok9dKimV6 stXSmEIwi9xwdv7YKl87HBLIpbHM+fcgyRbsnD6rqNwLZLHlf5VO89oT/tPV+XK1 jgf8UCzoXO306QWeQIU6Yb4ZbYn1gBdR9Fr4yJezIT4UD1mElwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKf7lU7gmypf73d3OMF9S5+AgCdAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDMzNDJjMzQtZjI5Ni0z ZjkzLTg0YmEtOGM5OWQ0NzczYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQUD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANiPvbckP1vY0HsCN0pgD7EH2Aqq07CsOmlAIGfZQvH2fbhyIQkf I8F8vjQbZd2T4CsSJospsD71hNnxFB75PrFJO3En6yqmsjkzS3x/ivRE6wNiwoF5 tJCRr8h/Pb4F5bZ6LFsNfCLlZtgVWKg6DR4uqmCCUBRaU1iqBsScqOuaCN4uVWzi ajmCDM91nipJpAJiuFYgJHJNQmwpVqCWw1cXYDlUko+HGY7Iol56HQiSWz5qTtmu GHtk6G9c2PKzwcxwlDZv5DnQjr0rpq8osDm3zl5a95MFNnivSC/m6NQQyGOSCfRs fuQZlBxgZTGkBxBs+m6OTEhZIQsHkqJ0rDg= -----END CERTIFICATE-----Generated at Mon Oct 20 06:56:47 2025 by rpki-client