$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9ac8d67-392e-3872-b14e-8e7d9ba34048.roa File: d9ac8d67-392e-3872-b14e-8e7d9ba34048.roa (raw, json) Hash identifier: XsSClYIgKHZsyi1m+/8r7cl1RYYmuAF7GQGeKe+Drwc= Subject key identifier: 25:56:52:4B:37:8F:FD:8D:D9:BB:FE:42:81:D2:07:AF:95:D2:09:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9BE5E4BC9659CAF2D5AFC Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9ac8d67-392e-3872-b14e-8e7d9ba34048.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 2001:559:3b7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:be:5e:4b:c9:65:9c:af:2d:5a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=61bed204-a7a8-4639-ae2d-10fa092c0c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:94:8a:48:a4:18:bd:9a:ba:59:91:30:c8:bd: 71:46:65:42:a4:9d:66:f2:e3:39:bf:b6:38:c1:e2: 06:af:10:fe:58:de:66:0d:a3:a5:58:40:f7:a8:53: 71:8a:c2:f4:b0:24:be:19:8e:3f:26:a3:b1:d2:07: ae:31:60:8d:45:21:90:64:06:0f:02:b6:43:60:2c: 62:bc:ce:94:32:4f:09:2d:10:c2:d3:31:8a:73:8b: 4f:03:05:c0:ab:d4:78:bf:63:3f:01:49:41:0d:20: 11:8b:4d:ce:5b:27:82:bb:09:12:5e:ed:e0:61:31: 1f:7c:ba:17:9c:e1:b7:39:5c:e6:8c:f2:a7:0c:e6: b1:ff:53:df:13:97:f1:01:de:30:40:16:bf:58:4d: 5f:8a:c8:63:ce:2a:ec:b9:ca:3b:b6:5a:7a:b4:0f: 49:1d:95:a8:55:49:0f:29:54:ca:cb:28:7c:74:a4: b5:c2:03:6f:6c:c6:eb:a4:49:7e:44:c2:67:cf:69: 04:a1:9a:1a:86:84:6f:5a:a4:b4:b2:b2:b0:a6:94: a4:c9:35:fa:a2:5d:30:c4:04:ff:e7:5e:9f:5f:ff: 03:40:6b:8c:94:98:a0:7f:9b:ed:f9:1a:60:eb:ab: e9:67:cd:43:9d:4c:50:7b:89:7c:5c:c1:c8:5e:ed: 6b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:56:52:4B:37:8F:FD:8D:D9:BB:FE:42:81:D2:07:AF:95:D2:09:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d9ac8d67-392e-3872-b14e-8e7d9ba34048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:3b7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:97:20:c2:43:89:f6:84:cf:57:51:89:a0:00:af:d9:3a:87: ea:17:17:b7:1a:23:82:e0:21:26:9e:3e:e0:71:52:bf:49:27: 39:92:dc:9b:81:30:59:51:6a:ce:d4:65:88:38:e1:8a:83:ee: ca:f9:68:1c:5a:35:8e:f4:c9:34:0a:f2:b1:51:65:a0:d5:ef: a8:f4:49:2a:0b:96:bc:56:95:ce:69:f0:98:b4:08:de:87:8b: 16:91:3f:8f:86:dc:b4:ad:58:31:b5:9d:cb:96:dd:6f:a6:1f: bf:1f:2c:29:5b:96:de:a1:0a:32:bd:cf:66:07:f7:a8:f3:c2: d2:f9:25:a2:be:7a:9b:96:1e:8a:30:1f:dc:05:e3:a3:46:90: 57:5f:0c:cc:76:16:aa:71:8b:9f:26:7d:c7:a8:58:ef:82:b1: 6a:33:bb:51:d7:02:6b:64:d5:1a:94:ce:c3:e7:bd:86:fb:52: 35:26:d5:87:3a:36:6d:a9:64:9e:d5:1f:bf:ba:43:69:d4:38: c7:89:56:6e:33:5c:71:c9:63:38:e3:d1:18:3e:0a:fe:59:61: 4f:9c:c3:2c:20:b8:ee:f3:0e:f8:f4:97:d0:81:da:53:5a:1b: 6a:88:b6:a0:f4:e9:01:0d:9f:a4:f4:0d:56:96:2b:71:7b:fe: 22:93:43:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ub5eS8llnK8tWvwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjFiZWQyMDQtYTdhOC00NjM5LWFlMmQtMTBmYTA5MmMwYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJSKSKQYvZq6WZEwyL1xRmVCpJ1m8uM5v7Y4 weIGrxD+WN5mDaOlWED3qFNxisL0sCS+GY4/JqOx0geuMWCNRSGQZAYPArZDYCxi vM6UMk8JLRDC0zGKc4tPAwXAq9R4v2M/AUlBDSARi03OWyeCuwkSXu3gYTEffLoX nOG3OVzmjPKnDOax/1PfE5fxAd4wQBa/WE1fishjzirsuco7tlp6tA9JHZWoVUkP KVTKyyh8dKS1wgNvbMbrpEl+RMJnz2kEoZoahoRvWqS0srKwppSkyTX6ol0wxAT/ 516fX/8DQGuMlJigf5vt+Rpg66vpZ81DnUxQe4l8XMHIXu1rLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCVWUks3j/2N2bv+QoHSB6+V0gmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDlhYzhkNjctMzkyZS0z ODcyLWIxNGUtOGU3ZDliYTM0MDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQO3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADeXIMJDifaEz1dRiaAAr9k6h+oXF7caI4LgISaePuBxUr9JJzmS 3JuBMFlRas7UZYg44YqD7sr5aBxaNY70yTQK8rFRZaDV76j0SSoLlrxWlc5p8Ji0 CN6HixaRP4+G3LStWDG1ncuW3W+mH78fLClblt6hCjK9z2YH96jzwtL5JaK+epuW HoowH9wF46NGkFdfDMx2Fqpxi58mfceoWO+CsWozu1HXAmtk1RqUzsPnvYb7UjUm 1Yc6Nm2pZJ7VH7+6Q2nUOMeJVm4zXHHJYzjj0Rg+Cv5ZYU+cwywguO7zDvj0l9CB 2lNaG2qItqD06QENn6T0DVaWK3F7/iKTQ1o= -----END CERTIFICATE-----Generated at Mon Oct 20 03:28:26 2025 by rpki-client