$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c8ede40-44f8-3f53-b749-17de1a7dba98.roa File: 3c8ede40-44f8-3f53-b749-17de1a7dba98.roa (raw, json) Hash identifier: 2gCSzFNYeOd7/kXDDRS1VNkqccjpO9RayczYkP43vsg= Subject key identifier: DC:67:04:ED:06:B0:1C:EB:02:EB:94:EE:B0:4A:C8:69:EB:54:FD:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB91AF2BEC1021DD4200D40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c8ede40-44f8-3f53-b749-17de1a7dba98.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22258 IP address blocks: 2001:559:7fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:1a:f2:be:c1:02:1d:d4:20:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=01e9e04f-b88e-4b10-903b-2187425ca05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:08:20:f1:58:22:9b:4c:b2:13:17:b3:1a:b3: 55:dd:bc:1e:53:df:1f:23:21:95:b1:49:d7:33:67: 7f:b8:0c:3b:39:a5:ba:7a:46:17:96:45:44:d5:0d: 3f:cd:46:bd:a0:9a:fd:6f:03:19:01:72:32:6b:d1: fe:97:de:eb:8e:cb:f4:29:34:cc:64:7c:f3:79:0a: df:24:a8:c5:1d:63:bc:ca:5d:7a:9f:07:a2:9e:8d: ae:ef:58:c4:45:e7:4a:cb:4c:02:94:53:70:8c:8e: 3d:43:ac:5e:72:84:bf:5a:7c:2a:ec:4c:f9:26:20: 97:76:ef:d8:aa:82:08:74:ff:bd:f9:34:a7:0d:93: 6c:ba:6b:b3:4c:f8:96:12:aa:a9:58:34:c8:75:06: b4:c4:41:f9:a0:85:b7:04:c4:7c:37:58:f0:59:91: 2e:40:b1:73:5c:3f:16:43:54:93:fd:a8:ce:d9:4f: 54:18:e2:f1:46:6e:0c:35:e8:d2:b8:23:b4:12:f7: 57:2b:5f:be:2b:0b:14:c4:fd:7c:2a:b3:bc:ed:f5: 90:ae:bf:62:91:e5:da:84:2b:09:d7:23:04:b6:55: 01:a0:0a:c5:9a:74:6a:40:dc:a2:b0:78:0f:14:4b: db:67:ef:e9:4f:83:78:5f:8c:0d:af:d2:7a:ae:4d: 7b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:67:04:ED:06:B0:1C:EB:02:EB:94:EE:B0:4A:C8:69:EB:54:FD:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3c8ede40-44f8-3f53-b749-17de1a7dba98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:7fb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b4:d1:1c:85:30:fd:3f:13:41:cb:af:44:d9:29:76:df:a9: c9:2f:a0:28:05:9e:5e:8e:cf:c1:1c:01:03:98:c4:45:34:c7: 63:2d:d2:60:ff:77:f4:d9:5b:96:ee:4f:6c:17:fb:ca:df:e8: 46:ce:a2:94:26:e8:2b:b2:ce:e3:34:15:ec:19:e1:e6:2b:5f: ed:1b:83:6a:c6:94:e2:9f:d1:f5:68:77:74:e3:9a:93:28:db: e9:d9:04:2c:f5:19:a7:5d:0d:a8:fe:14:c4:58:8c:9b:ab:eb: da:30:f6:19:9a:76:4e:64:d8:27:21:92:10:28:b4:e0:53:68: e9:b5:1c:ab:f6:13:8e:77:a1:cf:31:27:f8:48:6e:0e:28:1a: 8e:8e:3e:ae:97:ac:80:df:96:90:a9:67:10:92:d6:5d:15:0c: f8:37:88:8b:40:52:af:ec:38:1e:18:82:f0:37:2b:a5:72:f7: 61:3a:9f:4a:99:bb:a5:3e:d4:49:ed:88:f7:ed:81:67:b9:5f: 8e:37:d5:e6:09:bf:ab:bc:9c:1b:4f:72:37:61:34:d9:af:59: 76:ed:8d:95:4b:d9:40:6d:5f:b1:c8:d0:57:3e:cf:71:c7:75: 25:8b:8c:2e:f2:a1:f2:13:a5:87:3c:78:b3:1b:a9:4a:df:d0: b1:65:45:ce -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uRryvsECHdQgDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MDFlOWUwNGYtYjg4ZS00YjEwLTkwM2ItMjE4NzQyNWNhMDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAgg8Vgim0yyExezGrNV3bweU98fIyGVsUnX M2d/uAw7OaW6ekYXlkVE1Q0/zUa9oJr9bwMZAXIya9H+l97rjsv0KTTMZHzzeQrf JKjFHWO8yl16nweino2u71jERedKy0wClFNwjI49Q6xecoS/Wnwq7Ez5JiCXdu/Y qoIIdP+9+TSnDZNsumuzTPiWEqqpWDTIdQa0xEH5oIW3BMR8N1jwWZEuQLFzXD8W Q1ST/ajO2U9UGOLxRm4MNejSuCO0EvdXK1++KwsUxP18KrO87fWQrr9ikeXahCsJ 1yMEtlUBoArFmnRqQNyisHgPFEvbZ+/pT4N4X4wNr9J6rk173wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNxnBO0GsBzrAuuU7rBKyGnrVP3xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2M4ZWRlNDAtNDRmOC0z ZjUzLWI3NDktMTdkZTFhN2RiYTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQf7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIi00RyFMP0/E0HLr0TZKXbfqckvoCgFnl6Oz8EcAQOYxEU0x2Mt 0mD/d/TZW5buT2wX+8rf6EbOopQm6CuyzuM0FewZ4eYrX+0bg2rGlOKf0fVod3Tj mpMo2+nZBCz1GaddDaj+FMRYjJur69ow9hmadk5k2CchkhAotOBTaOm1HKv2E453 oc8xJ/hIbg4oGo6OPq6XrIDflpCpZxCS1l0VDPg3iItAUq/sOB4YgvA3K6Vy92E6 n0qZu6U+1EntiPftgWe5X4431eYJv6u8nBtPcjdhNNmvWXbtjZVL2UBtX7HI0Fc+ z3HHdSWLjC7yofITpYc8eLMbqUrf0LFlRc4= -----END CERTIFICATE-----Generated at Wed Nov 5 09:10:15 2025 by rpki-client