$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21c8e45-91ee-3028-bc7a-76294a7aa1c9.roa File: f21c8e45-91ee-3028-bc7a-76294a7aa1c9.roa (raw, json) Hash identifier: 7wlSBFgUIWKUQKYo1HdtS01TrfiPASEisrEY23CnhEA= Subject key identifier: 5B:35:76:89:7E:3E:88:64:DB:2B:6B:84:86:3E:BE:99:F0:FA:90:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9BE6AC392B29A05568C44 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21c8e45-91ee-3028-bc7a-76294a7aa1c9.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 2001:559:4aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:be:6a:c3:92:b2:9a:05:56:8c:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1cac122a-89d9-482c-a75b-05cc7a6bd5f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:d5:b2:60:6b:eb:84:c7:34:8b:4f:84:71: f8:1c:65:4f:c8:5b:29:59:7c:8c:62:c8:58:d1:3b: f3:98:4a:a7:03:41:e8:5c:4e:81:26:9e:c0:dc:4b: 4f:bc:18:57:4c:ac:6b:4d:a4:40:86:3e:15:a3:e6: ee:ee:6a:17:64:3f:43:f0:fc:ec:75:96:84:d6:15: 55:f1:81:d0:41:47:b4:af:b6:5e:7f:7e:2b:34:40: 1e:e4:c0:5d:e8:84:f4:d9:e5:6e:a3:a9:ba:ce:55: 3e:72:43:d8:0d:f1:af:a3:50:fd:5a:e8:ce:bd:8a: 19:53:0b:90:4b:14:7e:ce:be:ed:70:17:1c:32:ee: 00:4d:02:f2:a3:50:e1:02:8e:11:57:59:98:6d:f9: 9f:c3:1b:e5:4e:61:0f:59:eb:f6:d2:ed:7c:51:b0: 04:c4:fe:a8:1b:dd:f7:c4:49:fb:73:0c:3e:19:04: 03:f1:10:61:49:40:b8:a3:df:c4:d1:46:7f:0f:19: e3:18:67:5c:d3:f7:2b:2b:e6:21:bb:66:f2:db:4e: 53:91:04:c7:3b:ec:aa:2f:de:9f:1d:b3:18:fc:6a: 59:87:fc:e7:74:42:d6:03:ee:4f:bf:5b:56:08:16: aa:23:28:16:e0:da:3b:21:bd:bf:4e:c5:50:29:48: 1e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:35:76:89:7E:3E:88:64:DB:2B:6B:84:86:3E:BE:99:F0:FA:90:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f21c8e45-91ee-3028-bc7a-76294a7aa1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:4aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:24:ea:59:5a:6f:4a:c7:e4:d3:14:04:b5:75:cf:8c:8a:12: db:3c:91:ec:a3:e0:36:a4:17:62:18:dd:5c:b5:dd:0d:6d:1b: 5b:58:ae:69:e0:fe:53:57:64:c0:ab:86:e6:59:80:b5:9a:bd: e4:f7:64:c1:e7:43:1c:50:65:df:32:08:a4:d4:b9:c4:e5:56: ac:6b:b4:08:56:26:f7:e2:76:34:42:a5:ee:0c:86:d4:69:1f: 7e:bb:c1:b1:79:9c:94:dd:d8:51:bc:31:6d:e3:45:35:89:66: ec:66:d2:c3:4e:64:22:64:c0:30:f5:4f:52:aa:5c:22:8b:e1: ba:3a:1f:98:b2:0c:0e:bf:31:2e:c3:1b:00:ca:ec:91:db:62: 58:4b:85:a0:82:59:18:43:b6:9b:8d:3c:4a:f3:6d:17:2b:4d: bc:5a:73:6c:45:3b:a1:56:92:8a:98:1b:76:8a:23:5f:f0:ee: 32:57:05:18:a7:aa:0e:26:b0:39:d6:7b:0a:f5:34:11:ea:b5: 2c:27:b3:18:0a:41:18:18:48:fa:2d:1c:52:23:31:e8:a5:e1: fe:74:90:65:06:af:6b:6b:b8:1f:5e:cf:32:92:f0:78:46:79: 6f:0c:1d:97:9c:f1:49:22:1c:57:2e:99:21:4f:39:69:e0:94: f9:62:0d:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ub5qw5KymgVWjEQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MWNhYzEyMmEtODlkOS00ODJjLWE3NWItMDVjYzdhNmJkNWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzbVsmBr64THNItPhHH4HGVPyFspWXyMYshY 0TvzmEqnA0HoXE6BJp7A3EtPvBhXTKxrTaRAhj4Vo+bu7moXZD9D8PzsdZaE1hVV 8YHQQUe0r7Zef34rNEAe5MBd6IT02eVuo6m6zlU+ckPYDfGvo1D9WujOvYoZUwuQ SxR+zr7tcBccMu4ATQLyo1DhAo4RV1mYbfmfwxvlTmEPWev20u18UbAExP6oG933 xEn7cww+GQQD8RBhSUC4o9/E0UZ/DxnjGGdc0/crK+Yhu2by205TkQTHO+yqL96f HbMY/GpZh/zndELWA+5Pv1tWCBaqIygW4No7Ib2/TsVQKUge1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFs1dol+Pohk2ytrhIY+vpnw+pA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjIxYzhlNDUtOTFlZS0z MDI4LWJjN2EtNzYyOTRhN2FhMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQSq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEgk6llab0rH5NMUBLV1z4yKEts8keyj4DakF2IY3Vy13Q1tG1tY rmng/lNXZMCrhuZZgLWaveT3ZMHnQxxQZd8yCKTUucTlVqxrtAhWJvfidjRCpe4M htRpH367wbF5nJTd2FG8MW3jRTWJZuxm0sNOZCJkwDD1T1KqXCKL4bo6H5iyDA6/ MS7DGwDK7JHbYlhLhaCCWRhDtpuNPErzbRcrTbxac2xFO6FWkoqYG3aKI1/w7jJX BRinqg4msDnWewr1NBHqtSwnsxgKQRgYSPotHFIjMeil4f50kGUGr2truB9ezzKS 8HhGeW8MHZec8UkiHFcumSFPOWnglPliDRk= -----END CERTIFICATE-----Generated at Mon Oct 20 03:25:03 2025 by rpki-client