$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28bc2f35-54cf-31ef-8432-48d52322a5df.roa File: 28bc2f35-54cf-31ef-8432-48d52322a5df.roa (raw, json) Hash identifier: WG+v7lxkqo4Bn3VESNKdb1nXG0lAw+4OLr2Jeregtsg= Subject key identifier: BE:38:39:15:97:B6:0E:12:ED:9A:96:9E:FC:0F:D8:EC:8E:6F:33:A4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B99D7B5A471EE2E1C2BC65500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28bc2f35-54cf-31ef-8432-48d52322a5df.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 36040 IP address blocks: 2001:559:0:74::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b5:a4:71:ee:2e:1c:2b:c6:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=22b34dd6-f0cc-48bb-843c-e66364718a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:30:b3:55:0c:ce:a7:2c:5d:22:70:bb:d8:7d: 28:6c:4e:92:db:f9:b8:a4:ca:c7:68:ee:af:7a:14: 5b:3a:8d:2d:d4:94:43:a5:d1:1f:5d:39:5d:c6:f6: a3:96:80:8f:c5:7d:87:19:c8:6e:70:92:3a:df:0a: a3:5b:7c:53:d8:11:e0:99:b0:26:c5:81:10:fe:67: af:58:aa:5e:89:a2:39:72:77:e9:8d:dc:6e:8b:39: 7a:04:11:44:d8:f8:cb:56:19:01:7a:a2:27:66:2d: 09:8a:b3:83:57:2e:47:4a:85:99:34:23:7b:52:f4: 9d:86:b1:22:58:bf:90:58:6d:c1:97:41:f1:e2:d7: b8:e3:e0:1d:3f:cf:68:06:52:49:de:92:76:ce:18: a6:40:04:0b:02:c7:1e:bd:e6:04:6b:a7:0a:2b:b1: 31:06:9f:bc:b8:0c:52:10:43:3a:bf:49:17:ef:b3: bd:26:fa:62:8f:8a:ee:75:94:b4:16:0d:24:f4:d5: 0d:7f:3b:04:0d:87:f9:ab:19:3f:c8:64:64:02:c2: af:62:d0:6b:2f:f1:5b:4a:68:19:73:37:f3:1d:49: ae:04:5f:96:4e:ce:ae:a5:ad:ec:1c:3a:8c:70:8e: 9e:48:ae:00:7f:73:a9:b6:41:7f:c9:0c:48:c6:b8: 62:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:38:39:15:97:B6:0E:12:ED:9A:96:9E:FC:0F:D8:EC:8E:6F:33:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28bc2f35-54cf-31ef-8432-48d52322a5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:0:74::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a1:a5:44:d3:f7:32:03:7d:2a:02:dc:30:c9:ec:97:a4:c5: 17:f9:a5:88:83:e2:8f:c7:41:92:37:4b:32:60:ee:1d:1f:ab: 39:95:94:1b:b3:d6:4a:c3:a5:4d:a0:8f:f4:37:c8:c2:e9:77: 22:e6:2d:ef:d7:65:39:fd:1c:9a:16:d2:be:fb:58:37:6f:7c: 35:2a:cd:3c:76:84:fc:6c:9c:2a:5d:48:40:8f:7d:1f:7c:3b: b3:a2:f4:55:18:00:6d:b9:f2:63:67:7e:d6:f4:2a:dc:37:27: 00:af:2e:1e:41:a5:cf:b6:2c:6a:86:e5:31:7c:52:76:d2:b3: 5f:9c:d4:d4:14:88:c3:93:32:3c:ad:41:55:56:f7:0e:96:e0: e1:d5:fe:74:72:f7:c0:9f:95:60:d2:bb:ef:7e:51:68:f9:04: 81:73:60:44:28:9d:57:c3:64:96:18:60:fe:8e:5b:fd:96:c7: 2c:ba:8b:87:98:09:ea:a2:de:1c:c8:5d:69:f7:06:6e:cb:62: 49:9d:cb:89:5f:08:09:49:4f:1f:34:0f:90:c6:b3:35:82:9f: 3b:61:61:78:91:16:f5:62:3c:84:1c:3f:52:b4:7e:fa:57:37: e3:d0:04:fb:c3:e9:82:5b:31:fa:ad:06:e5:be:88:20:cc:48: 36:a0:b6:f2 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEuZ17Wkce4uHCvGVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk MjJiMzRkZDYtZjBjYy00OGJiLTg0M2MtZTY2MzY0NzE4YTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zCzVQzOpyxdInC72H0obE6S2/m4pMrHaO6v ehRbOo0t1JRDpdEfXTldxvajloCPxX2HGchucJI63wqjW3xT2BHgmbAmxYEQ/mev WKpeiaI5cnfpjdxuizl6BBFE2PjLVhkBeqInZi0JirODVy5HSoWZNCN7UvSdhrEi WL+QWG3Bl0Hx4te44+AdP89oBlJJ3pJ2zhimQAQLAsceveYEa6cKK7ExBp+8uAxS EEM6v0kX77O9Jvpij4rudZS0Fg0k9NUNfzsEDYf5qxk/yGRkAsKvYtBrL/FbSmgZ czfzHUmuBF+WTs6upa3sHDqMcI6eSK4Af3OptkF/yQxIxrhi7QIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFL44ORWXtg4S7ZqWnvwP2OyObzOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhiYzJmMzUtNTRjZi0z MWVmLTg0MzItNDhkNTIzMjJhNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA AHQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAIqGlRNP3MgN9KgLcMMnsl6TFF/mliIPij8dBkjdLMmDuHR+r OZWUG7PWSsOlTaCP9DfIwul3IuYt79dlOf0cmhbSvvtYN298NSrNPHaE/GycKl1I QI99H3w7s6L0VRgAbbnyY2d+1vQq3DcnAK8uHkGlz7YsaoblMXxSdtKzX5zU1BSI w5MyPK1BVVb3Dpbg4dX+dHL3wJ+VYNK7735RaPkEgXNgRCidV8Nklhhg/o5b/ZbH LLqLh5gJ6qLeHMhdafcGbstiSZ3LiV8ICUlPHzQPkMazNYKfO2FheJEW9WI8hBw/ UrR++lc349AE+8Ppglsx+q0G5b6IIMxINqC28g== -----END CERTIFICATE-----Generated at Wed Nov 5 11:15:48 2025 by rpki-client