$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10a95855-fffc-324e-88cd-44b6633b8a7b.roa File: 10a95855-fffc-324e-88cd-44b6633b8a7b.roa (raw, json) Hash identifier: cvvzVyCqpFcD2575MoK9Fqf9jI2QSuBp2IACm+EZI1w= Subject key identifier: D6:23:69:57:99:05:E5:C1:DF:E2:69:45:99:24:BB:89:B2:8F:6B:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9D18741188D3A9D5DCC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10a95855-fffc-324e-88cd-44b6633b8a7b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:8653::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:d1:87:41:18:8d:3a:9d:5d:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=b438d344-7bb5-44a6-b785-b0757ab9fd72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:a4:54:83:7a:6f:7e:47:9a:b6:57:17:8d: bd:6f:dd:94:2b:fb:70:41:8b:50:3c:09:a8:42:73: 65:59:3c:fa:ac:c1:c4:f9:86:e1:8e:d1:bb:fa:69: 59:c7:b4:9a:e5:74:06:6d:83:1b:64:b6:65:96:ae: cc:40:5d:64:17:c1:80:dc:8b:9d:ee:f2:bc:2e:bc: 99:20:5f:7f:7a:2e:42:4f:a7:a9:e0:72:36:ad:c4: 81:59:b6:59:3c:42:c1:8c:21:86:74:24:97:a9:9e: e0:44:a4:2f:13:47:c0:1c:5c:aa:9f:e9:5d:16:3f: 9b:2f:79:91:08:90:76:1a:cf:3a:bc:cd:25:67:ee: 6f:79:dd:aa:a2:ad:75:d4:44:c3:76:d7:19:f7:94: 13:08:55:e9:4c:52:77:5c:a1:95:73:97:42:cb:ec: 3d:9e:52:07:dc:cd:a4:ba:44:ec:aa:6d:a9:e8:4c: ce:a8:79:09:2e:b9:b8:f3:e2:f7:80:3c:29:94:00: 8b:81:fb:92:ac:57:cc:12:2b:81:65:3f:f7:a8:dd: 6b:5d:16:a3:36:83:28:bb:fd:4f:a4:8f:00:1d:57: 9a:81:ae:4c:e2:9f:9f:a3:9f:33:75:05:ef:68:d1: df:06:93:53:43:9b:d8:ed:09:a3:a8:5d:ab:ed:b3: da:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:23:69:57:99:05:E5:C1:DF:E2:69:45:99:24:BB:89:B2:8F:6B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10a95855-fffc-324e-88cd-44b6633b8a7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8653::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:fc:ec:a2:71:65:48:ed:dd:fc:52:b6:ca:72:e9:f9:38:5a: f0:c7:db:97:64:dc:18:2e:25:88:d7:09:91:fe:35:d3:c0:96: 23:97:d8:b1:c3:75:c0:9e:f5:a3:91:50:76:b8:c8:1b:7e:27: 94:29:94:d7:63:4f:b7:9a:16:6a:73:29:cb:15:a9:72:13:08: 3a:35:26:b9:eb:af:46:c9:bd:54:bd:24:05:41:da:44:5d:a6: 8a:ca:df:cb:e3:61:6e:a8:2d:a7:b4:4f:9e:c1:72:d7:a5:0a: 6a:fd:1c:c5:54:b5:df:d3:a4:5a:22:78:40:bc:d2:7b:8e:4f: 6d:fd:34:6a:00:c2:08:02:ee:d3:a5:5a:df:02:76:1a:28:5c: 7e:83:0b:51:53:2d:b4:cd:b1:a4:66:58:9e:63:f3:71:54:f5: b2:cb:34:5e:48:df:74:11:ff:77:b6:6b:f8:3b:24:a1:0d:dc: 11:08:ed:b4:57:17:93:07:ce:01:24:a2:94:4f:8b:11:64:69: b5:96:b5:83:af:f3:90:db:72:2e:6b:98:f8:4e:37:78:6b:b0: 64:d3:d5:55:b9:7f:96:90:dd:dc:4b:5d:73:78:da:69:3a:e6: 30:7f:6a:1b:11:32:31:a0:e0:bd:86:80:c0:ca:ed:48:76:2b: 61:69:19:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9udGHQRiNOp1dzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YjQzOGQzNDQtN2JiNS00NGE2LWI3ODUtYjA3NTdhYjlmZDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9OkVIN6b35HmrZXF429b92UK/twQYtQPAmo QnNlWTz6rMHE+YbhjtG7+mlZx7Sa5XQGbYMbZLZllq7MQF1kF8GA3Iud7vK8LryZ IF9/ei5CT6ep4HI2rcSBWbZZPELBjCGGdCSXqZ7gRKQvE0fAHFyqn+ldFj+bL3mR CJB2Gs86vM0lZ+5ved2qoq111ETDdtcZ95QTCFXpTFJ3XKGVc5dCy+w9nlIH3M2k ukTsqm2p6EzOqHkJLrm48+L3gDwplACLgfuSrFfMEiuBZT/3qN1rXRajNoMou/1P pI8AHVeaga5M4p+fo58zdQXvaNHfBpNTQ5vY7QmjqF2r7bPaqQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNYjaVeZBeXB3+JpRZkku4myj2uoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTBhOTU4NTUtZmZmYy0z MjRlLTg4Y2QtNDRiNjYzM2I4YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYZT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM/87KJxZUjt3fxStspy6fk4WvDH25dk3BguJYjXCZH+NdPAliOX 2LHDdcCe9aORUHa4yBt+J5QplNdjT7eaFmpzKcsVqXITCDo1Jrnrr0bJvVS9JAVB 2kRdporK38vjYW6oLae0T57BctelCmr9HMVUtd/TpFoieEC80nuOT239NGoAwggC 7tOlWt8CdhooXH6DC1FTLbTNsaRmWJ5j83FU9bLLNF5I33QR/3e2a/g7JKEN3BEI 7bRXF5MHzgEkopRPixFkabWWtYOv85Dbci5rmPhON3hrsGTT1VW5f5aQ3dxLXXN4 2mk65jB/ahsRMjGg4L2GgMDK7Uh2K2FpGRs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:11:00 2025 by rpki-client