$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9846f3f-82a9-329f-91d2-432bd363c575.roa File: f9846f3f-82a9-329f-91d2-432bd363c575.roa (raw, json) Hash identifier: XwLnotwe1NxqJz2Dd6l1sqmRzpSkeAL4AxSRs5Px6yo= Subject key identifier: 57:E9:AC:37:C2:5E:91:0E:49:53:01:AE:22:4B:A6:35:05:0D:A0:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB85BACE7FD6341F58D9B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9846f3f-82a9-329f-91d2-432bd363c575.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:288::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:5b:ac:e7:fd:63:41:f5:8d:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=88afca0f-014a-4f46-945a-edc67e764ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:be:fe:71:15:5d:da:f1:24:ef:ef:d7:20:56: ba:2b:7c:1d:90:cb:27:21:16:3f:0b:4c:5a:09:84: 73:9c:c3:5e:f0:f7:c5:45:b4:12:4d:a5:da:3b:1c: 6a:2f:7b:5a:01:1f:87:41:4a:76:9b:de:2d:90:b7: f0:87:30:29:87:ec:8e:b3:4b:27:6b:46:58:a2:18: 23:81:3d:a1:fd:44:ba:27:03:98:60:90:dc:0b:79: 74:19:e1:3b:5a:61:65:6e:f1:c6:d8:46:41:30:5c: af:55:c5:fe:0b:92:8e:14:97:48:1c:b6:bb:2f:9e: eb:81:1c:78:70:7e:23:a8:66:a3:c0:07:2a:10:7b: c3:b2:d9:5a:66:ab:fa:0c:78:29:63:71:48:c3:1b: e9:59:51:2a:45:e7:6b:7e:79:24:51:fb:a6:00:7e: 7d:2c:75:c8:b1:7f:2d:76:f3:83:5c:25:d8:7c:cc: 81:2d:c0:8e:43:97:c4:2a:c1:42:b2:08:59:b7:e5: 43:60:73:1f:cc:89:bf:1e:55:4f:21:e8:07:b1:e4: 10:98:d7:af:ec:ae:6f:a8:cc:74:db:60:1c:ab:e2: bc:47:df:be:4c:79:a9:e4:3b:1e:28:34:9b:e7:3d: 99:fb:2e:03:75:7f:ad:f2:80:b6:18:70:5e:3d:be: 0f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E9:AC:37:C2:5E:91:0E:49:53:01:AE:22:4B:A6:35:05:0D:A0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9846f3f-82a9-329f-91d2-432bd363c575.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:288::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:9b:11:da:6f:75:ff:59:e9:cf:d5:d6:3a:f8:cb:1b:f3:b7: 16:6e:27:05:78:c3:66:24:28:82:30:7a:7c:99:a7:34:c2:ed: 68:ac:9c:a1:f1:85:f6:a7:82:b3:27:87:fa:4f:36:d9:84:ec: 6c:01:db:80:9a:60:41:8e:73:f3:d0:d8:7b:6b:2f:e9:a7:c1: ae:5c:49:78:57:06:44:a1:15:91:4b:b1:9d:e8:0c:d4:95:9c: db:63:73:10:dc:26:d8:a1:4f:f6:53:90:00:4a:17:68:ad:b3: bc:10:11:29:6c:0a:06:0f:18:69:37:9d:42:46:60:9e:cd:ac: e6:4b:59:f4:28:b3:fb:78:23:3b:12:40:20:31:42:68:b3:2f: f7:bb:48:d0:f5:47:75:c0:bf:fb:32:56:9f:81:d8:1d:14:59: 18:f3:33:73:6b:1f:a2:fd:ac:44:73:18:84:fd:c1:80:48:db: 8f:73:bb:e0:bc:cf:3e:6c:3d:a1:e9:07:ec:c7:e0:41:72:0c: 13:0c:70:ec:db:12:67:4b:53:00:91:ae:93:82:e3:d1:6f:40: 2a:aa:b7:73:e3:89:8a:c4:4f:64:f6:b1:ae:f8:92:19:39:07: ed:17:da:77:d2:ae:4e:74:1c:a3:9b:97:18:98:15:66:01:1c: 0c:c6:7f:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uFus5/1jQfWNm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODhhZmNhMGYtMDE0YS00ZjQ2LTk0NWEtZWRjNjdlNzY0ZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAib7+cRVd2vEk7+/XIFa6K3wdkMsnIRY/C0xa CYRznMNe8PfFRbQSTaXaOxxqL3taAR+HQUp2m94tkLfwhzAph+yOs0sna0ZYohgj gT2h/US6JwOYYJDcC3l0GeE7WmFlbvHG2EZBMFyvVcX+C5KOFJdIHLa7L57rgRx4 cH4jqGajwAcqEHvDstlaZqv6DHgpY3FIwxvpWVEqRedrfnkkUfumAH59LHXIsX8t dvODXCXYfMyBLcCOQ5fEKsFCsghZt+VDYHMfzIm/HlVPIegHseQQmNev7K5vqMx0 22Acq+K8R9++THmp5DseKDSb5z2Z+y4DdX+t8oC2GHBePb4P1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFfprDfCXpEOSVMBriJLpjUFDaA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk4NDZmM2YtODJhOS0z MjlmLTkxZDItNDMyYmQzNjNjNTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQKI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANibEdpvdf9Z6c/V1jr4yxvztxZuJwV4w2YkKIIwenyZpzTC7Wis nKHxhfangrMnh/pPNtmE7GwB24CaYEGOc/PQ2HtrL+mnwa5cSXhXBkShFZFLsZ3o DNSVnNtjcxDcJtihT/ZTkABKF2its7wQESlsCgYPGGk3nUJGYJ7NrOZLWfQos/t4 IzsSQCAxQmizL/e7SND1R3XAv/syVp+B2B0UWRjzM3NrH6L9rERzGIT9wYBI249z u+C8zz5sPaHpB+zH4EFyDBMMcOzbEmdLUwCRrpOC49FvQCqqt3PjiYrET2T2sa74 khk5B+0X2nfSrk50HKOblxiYFWYBHAzGf70= -----END CERTIFICATE-----Generated at Mon Oct 20 03:32:17 2025 by rpki-client