$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bcfd5d-bf56-3c0f-9bcc-be8432b76ce1.roa File: 21bcfd5d-bf56-3c0f-9bcc-be8432b76ce1.roa (raw, json) Hash identifier: qxUV2zl89KxF8HNvw8xPTUtCQO6PWaKehXxFAd+eQBc= Subject key identifier: F4:98:3E:83:10:F4:66:DF:3F:CA:25:45:B6:35:0F:77:2C:10:45:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7A38ED7C9D8F8624989E4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bcfd5d-bf56-3c0f-9bcc-be8432b76ce1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2001:559:8538::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:a3:8e:d7:c9:d8:f8:62:49:89:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6d8a651c-1046-4d29-87e9-a033fc04a9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b5:54:c8:ad:55:13:c3:fa:2f:3e:b1:b6:1f: d6:20:7d:c4:0c:4d:2c:2d:89:4d:12:61:a2:78:97: be:32:2a:8c:a1:ff:5a:45:23:8f:3c:bb:12:75:c8: e5:7e:4f:6a:11:11:89:54:06:25:a7:b6:f7:d6:c5: 85:fe:ae:75:0e:b6:bb:f7:b7:37:5f:98:06:d3:5d: e1:5a:2b:59:f3:d3:d5:fc:3a:7c:50:11:03:4f:01: 83:8c:da:dd:3c:7b:13:07:95:7f:50:8d:1d:46:44: ad:6f:9b:26:89:e9:e3:0c:f6:25:e9:c9:4c:d2:bd: 69:50:c3:07:7a:14:b0:fa:c9:9a:c2:9f:bb:61:f2: 39:7a:c4:a5:cf:31:85:94:e5:94:be:f1:ce:48:0b: ce:80:34:7c:f3:a4:08:b7:66:62:a6:17:8c:b0:b1: 45:01:f2:c2:a8:72:94:28:a2:87:7a:ad:09:25:0b: 21:6e:50:ee:04:36:1a:74:3c:ef:8a:60:8f:bc:69: a5:03:fb:05:84:ee:fb:48:e3:c8:5f:27:a6:6f:b9: 3e:cf:46:84:a5:a6:70:50:d7:6b:9d:94:10:0f:c7: b6:29:42:e7:c1:ab:9b:97:ea:cd:00:b3:63:47:0f: 7c:ff:24:c8:65:03:6d:e6:30:b2:c6:81:17:a5:a3: 32:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:98:3E:83:10:F4:66:DF:3F:CA:25:45:B6:35:0F:77:2C:10:45:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21bcfd5d-bf56-3c0f-9bcc-be8432b76ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8538::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e5:dd:46:54:59:e0:80:11:66:72:78:d9:31:3b:4d:07:c9: 35:1a:a7:4d:13:b4:69:c0:1e:8f:dc:55:09:e2:4a:66:f6:74: 66:bd:71:41:7b:85:4a:2d:f4:a2:8f:c1:e2:45:67:23:99:a1: 1d:cc:d3:15:9b:f2:93:6f:dd:04:68:60:af:7d:09:e8:e9:75: fd:88:db:a2:74:72:2b:43:8f:c1:39:5a:75:58:3e:09:3a:ae: f6:85:17:1b:51:ba:33:c2:0b:70:1d:04:4e:b5:08:1e:6d:78: e3:ff:2d:ba:da:6b:d0:bf:41:5a:77:47:a8:09:01:87:56:00: 67:57:de:69:eb:5f:30:f6:c9:f3:17:24:fa:e0:66:a7:a9:78: a4:59:c6:98:bd:fb:86:49:e0:13:7b:ce:66:e1:79:89:fd:e9: bb:ee:bf:32:6d:aa:3b:cc:9e:94:e4:12:9d:95:d1:2c:1b:29: 45:b5:9a:45:1d:23:c6:49:ce:e4:90:19:f3:34:08:96:80:62: b0:16:95:1e:38:09:57:61:e1:8e:6d:eb:dd:7a:11:3b:5b:4d: 66:54:82:de:74:1c:69:72:36:59:c4:11:b6:92:e5:39:85:88: 1f:55:97:33:51:5d:52:7e:78:5e:93:7e:fc:d2:5d:6d:4e:cc: 84:95:51:77 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t6OO18nY+GJJieQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NmQ4YTY1MWMtMTA0Ni00ZDI5LTg3ZTktYTAzM2ZjMDRhOWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLVUyK1VE8P6Lz6xth/WIH3EDE0sLYlNEmGi eJe+MiqMof9aRSOPPLsSdcjlfk9qERGJVAYlp7b31sWF/q51Dra797c3X5gG013h WitZ89PV/Dp8UBEDTwGDjNrdPHsTB5V/UI0dRkStb5smienjDPYl6clM0r1pUMMH ehSw+smawp+7YfI5esSlzzGFlOWUvvHOSAvOgDR886QIt2ZipheMsLFFAfLCqHKU KKKHeq0JJQshblDuBDYadDzvimCPvGmlA/sFhO77SOPIXyemb7k+z0aEpaZwUNdr nZQQD8e2KULnwaubl+rNALNjRw98/yTIZQNt5jCyxoEXpaMyowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPSYPoMQ9GbfP8olRbY1D3csEEV5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFiY2ZkNWQtYmY1Ni0z YzBmLTliY2MtYmU4NDMyYjc2Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYU4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIPl3UZUWeCAEWZyeNkxO00HyTUap00TtGnAHo/cVQniSmb2dGa9 cUF7hUot9KKPweJFZyOZoR3M0xWb8pNv3QRoYK99Cejpdf2I26J0citDj8E5WnVY Pgk6rvaFFxtRujPCC3AdBE61CB5teOP/Lbraa9C/QVp3R6gJAYdWAGdX3mnrXzD2 yfMXJPrgZqepeKRZxpi9+4ZJ4BN7zmbheYn96bvuvzJtqjvMnpTkEp2V0SwbKUW1 mkUdI8ZJzuSQGfM0CJaAYrAWlR44CVdh4Y5t6916ETtbTWZUgt50HGlyNlnEEbaS 5TmFiB9VlzNRXVJ+eF6TfvzSXW1OzISVUXc= -----END CERTIFICATE-----Generated at Wed Nov 5 02:11:32 2025 by rpki-client