
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40434e47-10c6-36fa-8978-f24a2be2a3e0.roa
File: 40434e47-10c6-36fa-8978-f24a2be2a3e0.roa (raw, json)
Hash identifier: z888XDuYNPsHC/tBTP/+ukAtol1vOt6qTIweKFusD+s=
Subject key identifier: 57:B9:5E:B4:7A:B3:09:C6:7D:C9:9E:BD:72:E6:B2:21:9D:8B:F5:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584B3DB7A75F2A90BB4989B285EC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40434e47-10c6-36fa-8978-f24a2be2a3e0.roa
Signing time: Fri 19 Sep 2025 01:00:33 +0000
ROA not before: Fri 19 Sep 2025 01:00:33 +0000
ROA not after: Thu 18 Dec 2025 02:00:33 +0000
asID: 33651
IP address blocks: 2001:559:c4a8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:3d:b7:a7:5f:2a:90:bb:49:89:b2:85:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 19 01:00:33 2025 GMT
Not After : Dec 18 02:00:33 2025 GMT
Subject: CN=35eb712d-8a6b-48de-ba22-edf8f2ff4b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:08:93:36:34:b5:2a:27:8f:b0:58:f7:13:
f0:81:de:be:3d:0a:b8:31:40:18:f0:57:d5:24:3f:
1c:f0:31:7e:98:cb:1d:e6:d5:16:25:91:50:14:cc:
b2:5b:41:04:2d:52:43:f3:e3:96:9e:d5:69:00:a3:
71:26:82:5e:45:ba:34:68:fe:a9:0c:98:d1:da:ba:
1a:6e:26:e4:22:af:48:00:4e:53:73:a9:4b:72:d6:
75:b3:db:b6:0f:20:41:0f:63:cd:dc:5a:25:4c:83:
76:a3:b9:17:27:e3:9e:0a:fb:c6:9b:50:87:e2:73:
2f:ec:34:0e:24:3b:30:22:41:8f:83:72:bd:6e:b9:
c4:9d:a0:77:8b:1e:df:50:ae:bf:48:1f:96:c6:df:
c9:4d:19:fa:44:11:0c:e2:5c:da:38:f6:c8:d2:97:
74:e2:0e:a9:4a:8a:4f:e6:25:7c:1f:bb:02:0d:5a:
26:24:2a:34:44:ab:3e:cb:77:85:ac:34:0b:40:5e:
a8:fa:50:9b:90:34:ea:24:24:c4:23:79:60:16:c9:
23:62:97:b4:24:04:e8:2b:5e:c1:68:e7:74:4f:55:
70:0a:6e:26:2b:27:bc:04:0f:4d:df:73:90:97:68:
0f:1a:f7:a0:60:35:92:a0:d0:c5:02:03:84:ee:20:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B9:5E:B4:7A:B3:09:C6:7D:C9:9E:BD:72:E6:B2:21:9D:8B:F5:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40434e47-10c6-36fa-8978-f24a2be2a3e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:559:c4a8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:b8:c1:a7:bb:ea:32:c3:af:20:1c:8f:28:af:9c:26:b3:74:
3a:4e:62:c0:f3:90:6c:3b:c0:03:ee:d3:f5:fc:91:6d:b3:a5:
5f:bc:4a:3a:a4:b3:49:c8:52:c5:7e:a4:3b:bf:8a:95:e6:b3:
7b:59:70:c9:15:a4:91:a4:2e:71:f9:18:09:04:1b:9f:94:2a:
77:29:f3:c5:88:14:68:b7:01:ed:41:16:51:e4:02:46:80:68:
f8:5a:bb:be:23:d8:76:4d:82:1a:07:6f:09:0a:e3:3f:19:05:
e4:7b:6f:8f:6f:23:79:dc:3f:56:3d:a3:0d:6b:c2:59:92:1e:
48:49:61:55:a9:01:5f:e0:f8:59:c4:61:df:cc:6c:39:90:3e:
65:4d:c5:64:ed:b0:44:fe:2d:1c:c4:b1:51:d2:59:3b:4b:41:
32:49:8a:13:e0:15:f4:69:dc:05:38:df:11:a7:dc:27:bb:f0:
d2:04:78:56:71:33:bd:ec:18:ba:36:34:51:72:45:b1:51:ad:
8d:83:5f:1b:24:96:1b:67:4a:70:b3:65:f9:52:b9:91:01:2e:
a6:b3:f8:99:10:55:da:ca:1c:93:d1:75:47:dc:2a:30:32:b8:
0c:23:80:58:93:c8:cd:60:09:b7:ca:4e:5c:51:27:f8:22:da:
4a:e6:39:ba
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t6dfKpC7SYmyhewwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk
MzVlYjcxMmQtOGE2Yi00OGRlLWJhMjItZWRmOGYyZmY0YjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD0IkzY0tSonj7BY9xPwgd6+PQq4MUAY8FfV
JD8c8DF+mMsd5tUWJZFQFMyyW0EELVJD8+OWntVpAKNxJoJeRbo0aP6pDJjR2roa
bibkIq9IAE5Tc6lLctZ1s9u2DyBBD2PN3FolTIN2o7kXJ+OeCvvGm1CH4nMv7DQO
JDswIkGPg3K9brnEnaB3ix7fUK6/SB+Wxt/JTRn6RBEM4lzaOPbI0pd04g6pSopP
5iV8H7sCDVomJCo0RKs+y3eFrDQLQF6o+lCbkDTqJCTEI3lgFskjYpe0JAToK17B
aOd0T1VwCm4mKye8BA9N33OQl2gPGvegYDWSoNDFAgOE7iCdvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFe5XrR6swnGfcmevXLmsiGdi/UUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA0MzRlNDctMTBjNi0z
NmZhLTg5NzgtZjI0YTJiZTJhM2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcSo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGK4wae76jLDryAcjyivnCazdDpOYsDzkGw7wAPu0/X8kW2zpV+8
Sjqks0nIUsV+pDu/ipXms3tZcMkVpJGkLnH5GAkEG5+UKncp88WIFGi3Ae1BFlHk
AkaAaPhau74j2HZNghoHbwkK4z8ZBeR7b49vI3ncP1Y9ow1rwlmSHkhJYVWpAV/g
+FnEYd/MbDmQPmVNxWTtsET+LRzEsVHSWTtLQTJJihPgFfRp3AU43xGn3Ce78NIE
eFZxM73sGLo2NFFyRbFRrY2DXxsklhtnSnCzZflSuZEBLqaz+JkQVdrKHJPRdUfc
KjAyuAwjgFiTyM1gCbfKTlxRJ/gi2krmObo=
-----END CERTIFICATE-----
Generated at Wed Nov 5 00:54:23 2025 by rpki-client