$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd663f27-147c-39d8-abb5-9ff8e4fc1aea.roa File: fd663f27-147c-39d8-abb5-9ff8e4fc1aea.roa (raw, json) Hash identifier: Ok3jbJv+8DZRFZ573ytg5Zr408gYJFz2QBFDYLh9XLA= Subject key identifier: 53:74:F7:2F:51:0C:13:2D:9F:6A:F5:D3:1A:D8:E4:C2:61:72:C1:72 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB989F80CC7769E41761C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd663f27-147c-39d8-abb5-9ff8e4fc1aea.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:c399::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:89:f8:0c:c7:76:9e:41:76:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=12784c80-c554-417f-ad25-b078bb2a0179 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:27:31:17:d8:68:5e:00:45:db:30:47:48: db:b3:ff:2e:19:c9:53:0b:22:fb:29:6f:41:c9:fc: 1f:9e:17:43:ef:92:e9:cc:7c:2f:01:f0:bd:2e:c6: 4e:c1:d5:38:5b:74:36:d7:5a:f1:2c:50:09:a5:68: 89:bf:f3:37:76:55:53:66:ff:bd:2a:fd:cb:e4:81: 58:41:3f:88:c6:d3:b6:a8:e3:d8:67:2a:b8:95:91: 1c:b1:8e:ec:63:46:22:46:1c:12:c1:09:38:d0:fd: 1f:f6:7d:7e:ea:4f:bc:58:a0:74:a8:83:7e:d6:29: d5:e5:6b:a7:00:aa:25:aa:5c:f5:e0:27:9b:03:92: fa:80:72:05:2e:9d:2d:6e:b4:a1:bf:f7:7e:b2:2d: b0:9b:4d:e2:cb:f9:7b:9c:83:c3:71:65:cd:15:26: fc:16:57:c4:14:a1:18:d5:7e:d8:23:8a:87:e6:4f: b8:18:31:c7:74:9a:0f:d7:c3:9f:71:2a:1f:dc:96: 86:d9:ea:21:7e:fc:16:f6:22:43:76:0d:72:af:f0: 0d:8b:30:1c:8b:32:5f:cd:f9:b5:e8:07:67:0a:07: 60:42:cd:d9:e2:72:f4:ac:03:91:72:40:08:1a:db: c4:49:81:7d:ad:3a:38:7c:fd:1f:7e:6c:ac:4f:2f: f5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:74:F7:2F:51:0C:13:2D:9F:6A:F5:D3:1A:D8:E4:C2:61:72:C1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd663f27-147c-39d8-abb5-9ff8e4fc1aea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c399::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:92:b1:8e:b2:0f:6f:19:1f:0f:5d:b6:0c:e5:55:31:3f:95: bb:76:72:8c:14:6a:eb:e3:b3:40:93:03:77:c1:3f:d8:b9:1d: da:af:b5:84:32:ce:96:8b:e2:96:07:3b:f4:8d:6f:bd:00:32: 58:4d:eb:b1:b3:b0:0a:ff:38:37:11:53:b6:2e:df:ca:78:7c: ca:41:34:ee:62:a1:39:43:c9:6a:80:f4:15:fc:f8:81:c9:96: d3:c0:0b:c4:62:12:fb:87:c9:5e:0b:f6:61:7d:aa:cc:d2:f7: 6b:d2:df:bb:62:77:07:16:3f:7e:89:ee:52:29:ed:02:3b:27: 3d:da:c6:db:8f:75:46:e5:b6:4b:3c:bd:8b:9f:7c:db:18:b7: d5:34:40:d4:f4:6c:93:85:54:45:23:4a:96:eb:7e:f1:5b:0c: 83:ac:86:a7:3d:fe:0c:f4:bf:5a:34:f8:34:c5:62:16:68:04: 79:44:b3:c6:5f:2e:8c:3f:20:c0:da:37:da:cc:ac:92:21:da: eb:f4:ac:6d:8b:cc:db:a6:50:49:9b:62:45:41:09:eb:49:e4: 38:fe:bc:17:92:9f:5c:fa:7a:74:87:b9:2e:42:e9:3b:6d:b6: aa:79:ae:6d:49:26:63:10:30:5a:5f:10:ad:40:d1:91:18:56: f1:50:07:5f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uYn4DMd2nkF2HAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MTI3ODRjODAtYzU1NC00MTdmLWFkMjUtYjA3OGJiMmEwMTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAousnMRfYaF4ARdswR0jbs/8uGclTCyL7KW9B yfwfnhdD75LpzHwvAfC9LsZOwdU4W3Q211rxLFAJpWiJv/M3dlVTZv+9Kv3L5IFY QT+IxtO2qOPYZyq4lZEcsY7sY0YiRhwSwQk40P0f9n1+6k+8WKB0qIN+1inV5Wun AKolqlz14CebA5L6gHIFLp0tbrShv/d+si2wm03iy/l7nIPDcWXNFSb8FlfEFKEY 1X7YI4qH5k+4GDHHdJoP18OfcSof3JaG2eohfvwW9iJDdg1yr/ANizAcizJfzfm1 6AdnCgdgQs3Z4nL0rAORckAIGtvESYF9rTo4fP0ffmysTy/1pQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFN09y9RDBMtn2r10xrY5MJhcsFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmQ2NjNmMjctMTQ3Yy0z OWQ4LWFiYjUtOWZmOGU0ZmMxYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcOZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGmSsY6yD28ZHw9dtgzlVTE/lbt2cowUauvjs0CTA3fBP9i5Hdqv tYQyzpaL4pYHO/SNb70AMlhN67GzsAr/ODcRU7Yu38p4fMpBNO5ioTlDyWqA9BX8 +IHJltPAC8RiEvuHyV4L9mF9qszS92vS37tidwcWP36J7lIp7QI7Jz3axtuPdUbl tks8vYuffNsYt9U0QNT0bJOFVEUjSpbrfvFbDIOshqc9/gz0v1o0+DTFYhZoBHlE s8ZfLow/IMDaN9rMrJIh2uv0rG2LzNumUEmbYkVBCetJ5Dj+vBeSn1z6enSHuS5C 6Ttttqp5rm1JJmMQMFpfEK1A0ZEYVvFQB18= -----END CERTIFICATE-----Generated at Mon Oct 20 07:37:00 2025 by rpki-client