$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e235afda-da95-3797-aaf2-12d814118588.roa File: e235afda-da95-3797-aaf2-12d814118588.roa (raw, json) Hash identifier: fO/YUq/GAnOFX7WXiVQVZF1ECH2LNbMLfbr70Y8lf0U= Subject key identifier: 2A:4C:4B:4A:C5:90:61:15:98:7E:D9:FF:32:0E:9A:10:13:7A:A4:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9EFA0AA3CB50699E8AA60 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e235afda-da95-3797-aaf2-12d814118588.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:335::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:ef:a0:aa:3c:b5:06:99:e8:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=0020d90b-6f65-4fcf-88ad-26ab99127935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f2:d1:ff:5d:8d:35:82:6a:0b:ef:8d:d1:3f: a6:dd:a0:67:cf:b3:f7:ae:14:43:07:45:bb:99:e1: db:19:20:28:7f:68:d5:46:35:54:8d:ab:6c:0d:21: 66:5d:7c:81:e5:be:f2:fb:ba:42:8b:76:16:d7:4f: 3b:df:1d:41:80:02:a1:b7:af:53:64:0f:de:80:8f: b5:b6:c8:d3:a2:73:fc:80:b6:59:5b:5c:fa:e6:80: 06:f5:ae:43:69:74:59:e9:7e:e5:64:ad:32:91:54: 94:ee:76:8a:45:2e:af:73:d0:8f:dc:40:18:81:2e: 55:1a:0c:07:53:d6:2b:62:e7:8b:6f:b3:65:d9:0c: b5:d9:53:ac:c8:b1:5e:3c:88:ba:d8:bb:4c:5b:b5: 9b:4b:95:2b:b8:89:ee:08:fa:c7:2d:90:54:4a:44: d2:9b:24:28:d3:44:3e:5b:bd:72:46:52:63:17:76: f9:b0:ab:e1:e3:f5:1e:81:0a:ca:22:8c:ec:59:81: 10:19:c1:68:d9:52:40:62:72:e1:62:ca:92:d3:60: f3:49:31:d7:5c:ab:19:a5:05:c5:37:49:4b:78:b0: 92:31:bf:6c:b0:9b:e3:de:f7:ca:5d:57:e1:5b:51: be:98:55:61:b0:45:ce:30:e2:f0:68:da:e1:a4:8d: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:4B:4A:C5:90:61:15:98:7E:D9:FF:32:0E:9A:10:13:7A:A4:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e235afda-da95-3797-aaf2-12d814118588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:335::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:21:14:17:8e:19:6d:79:8f:73:a1:b6:02:4c:ed:25:d5:38: 9f:1e:3a:07:4f:2d:43:c9:d9:c9:01:4c:9d:96:a1:c7:dd:2c: c2:06:94:46:2b:5b:84:5f:60:6f:99:96:22:7e:0e:d8:14:01: f3:8c:cf:b2:65:0e:a3:25:77:7d:51:08:a0:eb:2c:4f:88:9a: ba:27:60:dc:a4:9a:5a:ae:25:5e:dd:73:28:b2:79:71:1c:18: a4:aa:a8:ce:be:4c:f5:c8:e8:81:94:36:c9:60:ee:82:14:ba: 5d:ef:a5:3e:33:41:6c:ac:8d:78:a5:46:06:05:90:63:16:5a: e1:39:f0:79:5b:88:e2:ef:85:01:5c:7b:9a:e9:77:5d:fb:47: 50:16:c8:77:f5:2c:29:be:8a:a3:bc:7e:a3:89:9a:a7:09:cc: bd:a6:22:87:44:ea:61:b2:47:a6:f4:a4:fd:2c:fc:96:b3:10: 59:cc:6a:b1:41:3a:d9:d2:4a:90:29:1e:a1:c0:de:ba:c5:00: 78:2d:f3:84:ce:84:f3:5b:46:74:94:24:ab:bd:be:31:e3:18: 6a:00:16:4f:31:5d:22:e3:4f:b8:2d:4d:c3:04:29:fc:14:3a: 27:83:c5:06:6d:68:76:7a:2c:cb:44:97:23:07:e2:75:eb:54: 50:16:6d:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ue+gqjy1BpnoqmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MDAyMGQ5MGItNmY2NS00ZmNmLTg4YWQtMjZhYjk5MTI3OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/LR/12NNYJqC++N0T+m3aBnz7P3rhRDB0W7 meHbGSAof2jVRjVUjatsDSFmXXyB5b7y+7pCi3YW10873x1BgAKht69TZA/egI+1 tsjTonP8gLZZW1z65oAG9a5DaXRZ6X7lZK0ykVSU7naKRS6vc9CP3EAYgS5VGgwH U9YrYueLb7Nl2Qy12VOsyLFePIi62LtMW7WbS5UruInuCPrHLZBUSkTSmyQo00Q+ W71yRlJjF3b5sKvh4/UegQrKIozsWYEQGcFo2VJAYnLhYsqS02DzSTHXXKsZpQXF N0lLeLCSMb9ssJvj3vfKXVfhW1G+mFVhsEXOMOLwaNrhpI3uZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCpMS0rFkGEVmH7Z/zIOmhATeqT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTIzNWFmZGEtZGE5NS0z Nzk3LWFhZjItMTJkODE0MTE4NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQM1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHUhFBeOGW15j3OhtgJM7SXVOJ8eOgdPLUPJ2ckBTJ2WocfdLMIG lEYrW4RfYG+ZliJ+DtgUAfOMz7JlDqMld31RCKDrLE+ImronYNykmlquJV7dcyiy eXEcGKSqqM6+TPXI6IGUNslg7oIUul3vpT4zQWysjXilRgYFkGMWWuE58HlbiOLv hQFce5rpd137R1AWyHf1LCm+iqO8fqOJmqcJzL2mIodE6mGyR6b0pP0s/JazEFnM arFBOtnSSpApHqHA3rrFAHgt84TOhPNbRnSUJKu9vjHjGGoAFk8xXSLjT7gtTcME KfwUOieDxQZtaHZ6LMtElyMH4nXrVFAWbXM= -----END CERTIFICATE-----Generated at Mon Oct 20 04:49:25 2025 by rpki-client