$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f27ce7be-a950-34be-b7df-ebac69c1a9ab.roa File: f27ce7be-a950-34be-b7df-ebac69c1a9ab.roa (raw, json) Hash identifier: BraEF9S3mCF4y7OnXy5L37fFRIk1IwH3PI1XDTBiwvo= Subject key identifier: 41:B7:2A:49:E1:B5:94:B9:32:4A:31:89:04:89:A4:1B:3C:01:09:E3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9BE20019214AB4451C080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f27ce7be-a950-34be-b7df-ebac69c1a9ab.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 2001:559:d9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:be:20:01:92:14:ab:44:51:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=11310f5b-16c2-4589-8bd3-3c5012eee674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:da:02:69:6a:bb:36:3b:b7:b1:d1:b3:f0:08: 88:3d:c5:de:b4:ac:7e:86:ae:91:27:4c:05:92:1a: cd:96:3d:b2:1c:49:7a:64:0b:bd:43:d0:ec:d1:1f: 4c:87:a0:aa:fa:8c:5d:4e:d6:11:89:2c:bd:75:83: d1:f8:c7:2a:b3:a6:bd:be:ff:20:cd:a8:4d:83:5a: 74:8f:df:e3:9c:f7:7f:da:87:24:8e:54:d8:dc:e4: 6e:52:cb:9d:bd:00:0e:83:89:21:23:aa:70:98:db: d5:4c:fc:ed:46:6f:27:ae:6c:ef:98:f8:88:41:91: cf:fb:2c:60:e2:9b:66:14:c3:41:00:b7:7f:46:f5: a1:66:d6:66:b3:e0:55:05:e1:d9:c7:66:f4:c5:44: 98:81:10:7a:52:d8:eb:4f:b8:63:e7:3d:d9:23:b1: f8:db:9b:a9:a2:fc:16:d7:4f:d3:29:4c:e6:76:f9: c6:fd:f0:cc:47:e2:be:3c:75:58:e3:aa:f3:cf:08: 54:7c:ca:ad:48:cf:44:31:04:39:3f:9e:fa:90:11: 50:ce:15:62:88:01:d2:9f:28:22:dd:92:0e:53:5d: a2:f7:24:48:8d:18:56:1b:28:2d:a2:e8:80:52:20: ce:b3:13:80:a4:8b:90:9c:00:4e:bb:9e:7a:5d:9b: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B7:2A:49:E1:B5:94:B9:32:4A:31:89:04:89:A4:1B:3C:01:09:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f27ce7be-a950-34be-b7df-ebac69c1a9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:d9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:7b:bc:10:58:23:90:d5:53:fd:c7:6b:a6:7d:1a:c0:a1:1c: 80:8c:2d:ac:32:59:e1:9a:57:83:7b:f5:70:b2:fa:bc:a3:d7: 16:71:aa:93:5f:9a:16:0e:6a:32:61:ad:4b:1f:ab:be:41:d1: 1f:30:b8:00:ae:50:44:6c:3d:33:8f:52:6d:aa:e4:5a:ab:94: f4:f0:04:28:49:a7:ae:be:c7:69:6b:28:58:80:ce:c4:9a:df: 78:fc:ee:86:00:62:7a:a6:ba:ac:f6:57:d2:ce:86:af:9a:7a: f8:a2:50:16:2d:d8:29:5c:31:49:19:16:cd:e2:02:92:1c:44: cf:45:2a:ef:98:b2:f5:be:ed:8a:32:6a:d7:f6:bc:cf:d7:9c: 27:58:29:4e:79:bb:35:97:5c:d5:8b:b6:bd:77:27:c7:fd:9d: a8:28:e9:18:b7:4f:d8:d6:76:60:af:0a:c2:26:a2:92:f6:1f: c5:b8:25:2f:09:bf:33:6b:28:92:40:3b:91:da:3a:f9:1f:7c: 41:f3:a6:c9:9e:cf:a3:f0:75:2f:e0:4c:17:dd:a2:4d:98:da: 4a:1d:cf:92:84:4b:1d:ee:2e:42:e1:17:d9:07:27:ec:b9:e4: d9:29:92:5c:40:0b:8f:77:57:e1:93:27:2a:4d:11:b0:34:fb: 35:58:27:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ub4gAZIUq0RRwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTEzMTBmNWItMTZjMi00NTg5LThiZDMtM2M1MDEyZWVlNjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldoCaWq7Nju3sdGz8AiIPcXetKx+hq6RJ0wF khrNlj2yHEl6ZAu9Q9Ds0R9Mh6Cq+oxdTtYRiSy9dYPR+Mcqs6a9vv8gzahNg1p0 j9/jnPd/2ockjlTY3ORuUsudvQAOg4khI6pwmNvVTPztRm8nrmzvmPiIQZHP+yxg 4ptmFMNBALd/RvWhZtZms+BVBeHZx2b0xUSYgRB6UtjrT7hj5z3ZI7H425upovwW 10/TKUzmdvnG/fDMR+K+PHVY46rzzwhUfMqtSM9EMQQ5P576kBFQzhViiAHSnygi 3ZIOU12i9yRIjRhWGygtouiAUiDOsxOApIuQnABOu556XZt4JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEG3KknhtZS5MkoxiQSJpBs8AQnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjI3Y2U3YmUtYTk1MC0z NGJlLWI3ZGYtZWJhYzY5YzFhOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQDZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMp7vBBYI5DVU/3Ha6Z9GsChHICMLawyWeGaV4N79XCy+ryj1xZx qpNfmhYOajJhrUsfq75B0R8wuACuUERsPTOPUm2q5FqrlPTwBChJp66+x2lrKFiA zsSa33j87oYAYnqmuqz2V9LOhq+aeviiUBYt2ClcMUkZFs3iApIcRM9FKu+YsvW+ 7Yoyatf2vM/XnCdYKU55uzWXXNWLtr13J8f9nago6Ri3T9jWdmCvCsImopL2H8W4 JS8JvzNrKJJAO5HaOvkffEHzpsmez6PwdS/gTBfdok2Y2kodz5KESx3uLkLhF9kH J+y55NkpklxAC493V+GTJypNEbA0+zVYJ/I= -----END CERTIFICATE-----Generated at Mon Oct 20 03:22:06 2025 by rpki-client