$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc0168a-0dc2-3cd0-b9b0-e1699c3f8a54.roa File: efc0168a-0dc2-3cd0-b9b0-e1699c3f8a54.roa (raw, json) Hash identifier: 0uGteNKsVcn3xPhzaQWJLTtqMkhA+xQYCcER61kL+28= Subject key identifier: 90:DD:E7:B1:31:E9:97:31:E3:E8:2F:1E:6E:2A:9F:97:A9:B7:B7:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB85B7C24CB21C8523E3900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc0168a-0dc2-3cd0-b9b0-e1699c3f8a54.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:25b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:5b:7c:24:cb:21:c8:52:3e:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=f33ee077-f3bf-4e57-9b20-774c00a17e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c5:0e:53:1f:fb:04:94:14:31:da:61:f4:ec: 54:55:f7:5d:2f:9c:7e:88:5b:94:cb:39:7c:0f:11: 35:a3:51:2f:2b:23:b3:16:5c:75:69:63:c0:cf:6b: ce:d4:53:e0:2d:02:48:18:52:fb:9d:ae:22:90:f9: dc:3a:b9:5a:cc:82:8c:1f:d8:c7:c9:3d:53:7f:19: f5:94:d1:3f:4e:0b:5a:43:66:ca:ae:5e:5a:4f:d1: a9:2d:cd:dd:f7:63:dc:1e:57:2a:5e:19:12:8e:b4: 7d:0f:aa:f5:13:dd:ab:f4:5b:7f:43:70:a5:55:41: 88:9e:f1:1c:85:7a:c8:78:e2:d4:11:d5:af:2d:01: 94:39:7c:1f:96:2d:9c:99:32:71:55:e0:72:15:ff: 87:d7:79:7b:e5:5d:1c:41:14:f6:99:76:7a:4f:72: bb:b1:9f:f7:25:30:a9:a7:96:cb:38:a3:ed:04:15: d9:2a:ac:f5:e2:41:c7:f2:f9:fe:8b:1d:73:49:05: 1f:b8:d3:6e:10:02:7e:f0:79:aa:87:61:9b:74:4f: a3:16:be:49:cd:af:c9:58:ca:e9:58:5a:9d:78:d5: 41:e1:cb:51:2c:17:72:f6:c9:3f:1e:e5:93:6f:94: 6b:cd:34:f7:cc:51:cd:3b:d9:bd:cd:50:2f:fc:d2: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DD:E7:B1:31:E9:97:31:E3:E8:2F:1E:6E:2A:9F:97:A9:B7:B7:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc0168a-0dc2-3cd0-b9b0-e1699c3f8a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:25b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:26:83:e8:3e:1e:ef:2b:cd:fe:1d:1b:ce:36:ee:79:9d:ee: 7d:4a:2a:b3:31:02:ef:34:92:54:c6:20:65:68:a5:a6:eb:d5: ee:dc:7e:e5:be:ef:a4:50:12:bd:dc:f1:5a:89:d0:58:3b:b9: 1f:2d:3e:51:58:77:eb:b5:16:d3:8f:26:57:6a:64:cb:b9:62: 0e:0f:33:39:08:02:76:ac:c4:37:3f:73:ea:8e:5b:89:43:da: 67:a3:8c:1b:73:93:c7:67:3b:3b:ad:24:80:19:2d:d5:7d:c3: 9a:de:e8:5a:3c:a6:45:d7:62:c3:1e:02:31:c9:0f:c2:08:2f: 81:94:83:e9:5e:53:09:53:95:61:7c:59:46:27:d1:b4:77:b7: ee:6f:bc:a8:11:d4:48:f4:ce:05:4a:19:76:77:4f:3b:57:bf: 18:c5:cf:7c:ba:d3:3d:79:b7:0c:4b:96:67:bc:43:5f:ab:80: cf:89:5a:fd:20:5a:d3:f9:80:cf:db:f9:47:3a:64:3b:72:5a: 11:c2:5d:c4:fe:59:46:8e:ed:4f:c0:18:f2:a4:10:f9:b5:76: 36:58:9e:c8:f7:b4:df:d6:30:05:12:7d:c9:7c:27:d7:25:8d: 5a:68:21:54:9d:8c:12:f3:56:cb:3b:23:21:a1:e0:6e:6d:92: d2:37:63:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uFt8JMshyFI+OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZjMzZWUwNzctZjNiZi00ZTU3LTliMjAtNzc0YzAwYTE3ZTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMUOUx/7BJQUMdph9OxUVfddL5x+iFuUyzl8 DxE1o1EvKyOzFlx1aWPAz2vO1FPgLQJIGFL7na4ikPncOrlazIKMH9jHyT1Tfxn1 lNE/TgtaQ2bKrl5aT9GpLc3d92PcHlcqXhkSjrR9D6r1E92r9Ft/Q3ClVUGInvEc hXrIeOLUEdWvLQGUOXwfli2cmTJxVeByFf+H13l75V0cQRT2mXZ6T3K7sZ/3JTCp p5bLOKPtBBXZKqz14kHH8vn+ix1zSQUfuNNuEAJ+8Hmqh2GbdE+jFr5Jza/JWMrp WFqdeNVB4ctRLBdy9sk/HuWTb5RrzTT3zFHNO9m9zVAv/NJ3PQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJDd57Ex6Zcx4+gvHm4qn5ept7fYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZjMDE2OGEtMGRjMi0z Y2QwLWI5YjAtZTE2OTljM2Y4YTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQJb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKQmg+g+Hu8rzf4dG8427nmd7n1KKrMxAu80klTGIGVopabr1e7c fuW+76RQEr3c8VqJ0Fg7uR8tPlFYd+u1FtOPJldqZMu5Yg4PMzkIAnasxDc/c+qO W4lD2mejjBtzk8dnOzutJIAZLdV9w5re6Fo8pkXXYsMeAjHJD8IIL4GUg+leUwlT lWF8WUYn0bR3t+5vvKgR1Ej0zgVKGXZ3TztXvxjFz3y60z15twxLlme8Q1+rgM+J Wv0gWtP5gM/b+Uc6ZDtyWhHCXcT+WUaO7U/AGPKkEPm1djZYnsj3tN/WMAUSfcl8 J9cljVpoIVSdjBLzVss7IyGh4G5tktI3Yx0= -----END CERTIFICATE-----Generated at Mon Oct 20 06:54:40 2025 by rpki-client