$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0c37cbc-a6d6-305a-b0a8-a7dd7ca4de1b.roa File: e0c37cbc-a6d6-305a-b0a8-a7dd7ca4de1b.roa (raw, json) Hash identifier: CEqOYt0QLGW1CIJZWKWrPUYGo2Eycv/3Q3MCpUbYADQ= Subject key identifier: 74:51:B7:BF:C6:84:F7:61:2A:55:B3:4E:91:3A:A2:A1:00:EC:BC:61 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7E8F4A02DC4ECE3C4D080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0c37cbc-a6d6-305a-b0a8-a7dd7ca4de1b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:c24e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:e8:f4:a0:2d:c4:ec:e3:c4:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6db4bd2e-1ee1-4ebe-aead-e0d9a3266dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:13:70:5a:a4:16:85:23:f4:43:89:e4:ce:31: 81:92:19:98:7f:10:f5:ba:9c:76:48:13:bf:af:41: 82:4f:fe:37:f2:7c:68:a8:37:05:21:4b:3d:8a:35: 37:e0:08:20:67:ce:5b:db:fc:4f:f2:06:c8:a4:24: 17:e7:62:75:72:82:79:5d:99:b9:3f:dc:0f:d1:51: 72:c9:dc:84:a9:d5:4d:de:06:47:be:05:98:81:68: bd:dc:04:28:70:1b:a5:0e:06:22:de:10:08:43:c4: e7:19:28:d1:fd:79:08:7f:ad:ac:3b:be:57:85:bc: ee:a0:3c:ef:b5:14:2a:e0:fc:01:46:d0:8b:27:22: 8f:18:eb:50:de:9d:6f:21:2e:d7:a0:2a:d9:29:f0: 1c:7d:e3:27:d5:f8:ee:03:ed:90:39:91:3d:07:e4: 0f:76:51:b1:5b:25:02:06:2b:40:ea:72:5e:ae:9e: 47:8e:04:0d:51:0a:9e:03:1d:87:2e:f4:fa:66:06: 5a:cc:17:4c:44:61:21:11:a0:9b:33:7e:3b:d3:54: 23:96:d0:54:e9:12:6f:b9:49:ee:a6:28:62:7f:d2: b6:b7:97:80:21:e9:bf:ac:62:b4:62:5e:3f:e4:12: 43:63:fa:7e:ba:a5:97:03:54:55:e7:f9:7d:6b:83: 86:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:51:B7:BF:C6:84:F7:61:2A:55:B3:4E:91:3A:A2:A1:00:EC:BC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0c37cbc-a6d6-305a-b0a8-a7dd7ca4de1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c24e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:85:76:84:0f:b2:e5:3d:f1:eb:a5:02:e6:81:8d:97:f2:01: 82:34:49:64:f7:ee:e3:17:3d:62:e8:6f:a3:0b:0e:18:49:0e: f4:0a:ea:43:1e:7a:7a:57:b3:b2:f8:47:10:23:c3:6c:76:00: c5:73:9e:44:3b:0c:82:3d:4c:f3:d8:d0:63:b6:f1:87:91:48: ca:35:cb:8e:22:ad:71:e1:55:8f:41:86:1c:8a:3d:a6:cc:92: bc:ff:1a:01:4f:05:8e:8f:2b:2e:a3:25:d4:c8:28:d8:62:f6: 46:bd:50:de:80:b4:c4:58:d1:00:48:0d:bd:ec:90:f3:27:9f: e0:0b:bb:9f:7a:f0:9f:f8:92:6c:74:c2:64:78:50:9e:fc:43: b1:c9:f4:f7:28:0c:99:d2:e0:21:b6:23:fe:2d:19:b0:43:8a: 2b:2b:21:17:e8:23:90:b9:a0:3e:9d:d4:7e:8b:9e:7f:e9:cb: 5e:37:f4:62:ab:df:03:91:76:e1:d7:61:10:56:12:88:c2:54: 97:19:90:45:e5:3f:8d:1d:95:92:7a:b3:5a:f8:1e:48:c3:f2: 2c:64:d7:5d:91:d4:cf:0a:4d:3f:12:0d:14:51:d6:48:b1:a5: d7:8c:67:4f:36:07:20:3e:a0:c5:c3:53:d4:f1:22:ab:ba:44: 54:23:6e:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t+j0oC3E7OPE0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NmRiNGJkMmUtMWVlMS00ZWJlLWFlYWQtZTBkOWEzMjY2ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBNwWqQWhSP0Q4nkzjGBkhmYfxD1upx2SBO/ r0GCT/438nxoqDcFIUs9ijU34AggZ85b2/xP8gbIpCQX52J1coJ5XZm5P9wP0VFy ydyEqdVN3gZHvgWYgWi93AQocBulDgYi3hAIQ8TnGSjR/XkIf62sO75XhbzuoDzv tRQq4PwBRtCLJyKPGOtQ3p1vIS7XoCrZKfAcfeMn1fjuA+2QOZE9B+QPdlGxWyUC BitA6nJerp5HjgQNUQqeAx2HLvT6ZgZazBdMRGEhEaCbM34701QjltBU6RJvuUnu pihif9K2t5eAIem/rGK0Yl4/5BJDY/p+uqWXA1RV5/l9a4OGQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHRRt7/GhPdhKlWzTpE6oqEA7LxhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTBjMzdjYmMtYTZkNi0z MDVhLWIwYTgtYTdkZDdjYTRkZTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcJO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADqFdoQPsuU98eulAuaBjZfyAYI0SWT37uMXPWLob6MLDhhJDvQK 6kMeenpXs7L4RxAjw2x2AMVznkQ7DII9TPPY0GO28YeRSMo1y44irXHhVY9BhhyK PabMkrz/GgFPBY6PKy6jJdTIKNhi9ka9UN6AtMRY0QBIDb3skPMnn+ALu5968J/4 kmx0wmR4UJ78Q7HJ9PcoDJnS4CG2I/4tGbBDiisrIRfoI5C5oD6d1H6Lnn/py143 9GKr3wORduHXYRBWEojCVJcZkEXlP40dlZJ6s1r4HkjD8ixk112R1M8KTT8SDRRR 1kixpdeMZ082ByA+oMXDU9TxIqu6RFQjbrk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:31:05 2025 by rpki-client