$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f912b59e-4a6d-3bac-a682-dde419d27820.roa File: f912b59e-4a6d-3bac-a682-dde419d27820.roa (raw, json) Hash identifier: 7euPgzlqtdNBigeGqvkQmEltfuJpSiKTqXocanh1Z0Y= Subject key identifier: 51:60:5F:7C:4B:55:E7:83:A3:D7:A9:01:15:6A:6D:6F:35:DA:25:C8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ECE9827480B69A2CCD2440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f912b59e-4a6d-3bac-a682-dde419d27820.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 33662 IP address blocks: 2001:559:c020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ec:e9:82:74:80:b6:9a:2c:cd:24:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=a8f1ae6c-a57a-42b5-9668-057984d408bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:5e:18:fa:8e:df:0e:35:10:3f:7e:08:3e: bd:6d:0e:72:a3:4f:16:ae:33:5f:9f:65:bc:4f:d5: 70:9b:14:42:19:a2:b9:e6:93:5e:ba:29:f6:42:a5: 59:27:a9:40:88:9e:40:ff:42:59:9e:72:3c:21:dd: 6c:3c:f9:b6:08:a0:60:74:f9:45:70:fd:5c:89:27: c4:00:38:e4:61:bb:5a:ac:cd:c0:8f:dc:ed:a0:02: e9:86:5f:71:e7:ed:ad:76:a3:03:51:e9:1e:5e:ea: bd:a8:8d:c7:26:59:21:17:86:eb:33:dd:7d:a4:0e: 90:02:dd:e7:03:74:dc:f6:6a:5e:2a:69:7c:54:b0: 1f:6d:72:c5:86:81:63:8f:36:7d:ea:f4:8b:5e:07: a2:05:a8:9c:cc:bf:db:23:b7:0d:e5:b0:7f:9f:25: df:13:96:ea:19:87:4c:f0:5f:56:3d:bf:7a:e8:78: 2b:62:c8:1c:d4:5f:d8:c0:5d:ee:c4:f9:13:44:1d: 9f:5c:49:a1:0c:a1:fd:84:e1:50:ba:89:b2:d8:c7: b3:48:8d:bd:1a:4a:33:0b:41:20:e2:ca:c6:13:92: 1d:92:36:3f:6f:0a:ba:1f:43:69:6c:3b:6b:10:36: 35:69:b4:b4:1b:12:05:db:9d:9d:b7:88:33:fc:00: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:60:5F:7C:4B:55:E7:83:A3:D7:A9:01:15:6A:6D:6F:35:DA:25:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f912b59e-4a6d-3bac-a682-dde419d27820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c020::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:f8:ac:45:b3:dc:46:70:13:ae:a6:59:17:e5:27:8b:14:4b: 57:73:5c:5d:56:5d:03:4d:ea:ae:45:b3:ae:5a:fe:75:3c:62: 89:75:c3:3a:98:a6:c4:05:e1:80:94:de:d7:99:b3:90:38:08: 70:d2:b1:96:54:1d:a1:52:92:9b:c2:94:8b:4e:d1:39:e6:37: 36:1e:1b:ac:09:f4:ad:75:ef:db:69:1e:35:cc:1b:64:9e:4b: 7c:e4:7e:67:60:7c:c3:03:86:65:54:88:b5:b0:e7:cc:2e:12: e8:0e:bb:40:09:23:8c:86:70:b8:fc:8e:bd:ad:e2:c5:4b:ee: 5f:cb:55:10:18:5d:fa:20:7c:4a:7b:13:15:0d:85:35:d1:8b: 7e:94:40:70:9b:22:68:02:eb:f0:22:a5:5a:51:6b:6f:76:e9: 5b:b1:f5:1c:a7:7c:78:81:73:5b:b2:ce:da:b8:3f:30:b4:f9: ee:3a:57:ea:e1:9a:e7:db:5e:01:52:98:6e:83:ec:a3:0f:cc: 16:bd:93:38:77:08:70:05:3e:b4:e4:68:3c:c3:95:c3:c4:04: 5e:4a:f7:25:1c:d7:52:13:1f:65:4c:0c:cc:a3:f4:ac:97:0c: 37:6b:46:a3:d5:ea:20:50:bd:c8:20:da:78:29:4d:60:6f:05: 2b:d8:bc:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq07OmCdIC2mizNJEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk YThmMWFlNmMtYTU3YS00MmI1LTk2NjgtMDU3OTg0ZDQwOGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8peGPqO3w41ED9+CD69bQ5yo08WrjNfn2W8 T9VwmxRCGaK55pNeuin2QqVZJ6lAiJ5A/0JZnnI8Id1sPPm2CKBgdPlFcP1ciSfE ADjkYbtarM3Aj9ztoALphl9x5+2tdqMDUekeXuq9qI3HJlkhF4brM919pA6QAt3n A3Tc9mpeKml8VLAfbXLFhoFjjzZ96vSLXgeiBaiczL/bI7cN5bB/nyXfE5bqGYdM 8F9WPb966HgrYsgc1F/YwF3uxPkTRB2fXEmhDKH9hOFQuomy2MezSI29GkozC0Eg 4srGE5IdkjY/bwq6H0NpbDtrEDY1abS0GxIF252dt4gz/ADg7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFFgX3xLVeeDo9epARVqbW812iXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjkxMmI1OWUtNGE2ZC0z YmFjLWE2ODItZGRlNDE5ZDI3ODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHf4rEWz3EZwE66mWRflJ4sUS1dzXF1WXQNN6q5Fs65a/nU8Yol1 wzqYpsQF4YCU3teZs5A4CHDSsZZUHaFSkpvClItO0TnmNzYeG6wJ9K1179tpHjXM G2SeS3zkfmdgfMMDhmVUiLWw58wuEugOu0AJI4yGcLj8jr2t4sVL7l/LVRAYXfog fEp7ExUNhTXRi36UQHCbImgC6/AipVpRa2926Vux9RynfHiBc1uyztq4PzC0+e46 V+rhmufbXgFSmG6D7KMPzBa9kzh3CHAFPrTkaDzDlcPEBF5K9yUc11ITH2VMDMyj 9KyXDDdrRqPV6iBQvcgg2ngpTWBvBSvYvHQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:12 2025 by rpki-client