$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409b5d06-558b-3909-baeb-0ab41dead8ea.roa File: 409b5d06-558b-3909-baeb-0ab41dead8ea.roa (raw, json) Hash identifier: DTKl8jeFOu/DN48cINbAlDf+RMulAb8vSmXGsFnZtq4= Subject key identifier: 34:A8:E3:EA:8C:76:F1:50:8E:28:CC:70:8F:3F:20:C0:F1:63:9C:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7EDAACE92184B3A5BBC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409b5d06-558b-3909-baeb-0ab41dead8ea.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:e007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:ed:aa:ce:92:18:4b:3a:5b:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=347b68e5-95ea-4c47-8339-54af809b317c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:06:c4:33:1d:6e:6a:61:2c:d7:2e:6b:7c: 96:de:67:41:04:c4:d6:d0:49:73:76:4a:31:d5:5c: 0e:d1:da:dd:56:dc:66:eb:c4:52:f3:55:63:77:60: e0:9d:8c:b0:ec:97:6e:95:a2:9c:04:ea:18:45:aa: 0b:7b:38:63:6f:94:0c:00:3d:ba:b3:14:3e:a7:97: e8:94:3b:9a:e0:e8:89:c1:4f:11:6e:99:a5:92:7d: 56:40:98:11:92:6c:04:a2:e8:49:27:da:02:5b:02: b8:e7:2a:19:f7:4e:c4:9d:e6:e3:e8:c8:85:0f:31: 1d:e1:bc:d5:30:6d:71:57:f6:48:99:22:b6:38:d1: 6e:c8:73:00:4a:60:75:e0:74:18:7d:57:22:05:2c: 13:20:ce:9f:41:1d:b4:13:e1:60:5c:fd:43:d2:b5: e3:26:27:93:d6:f7:bf:96:34:7c:2a:38:48:41:50: 67:b2:70:45:d8:f4:52:26:9f:96:90:66:c0:6a:8a: 0a:67:08:43:2d:01:34:e3:9f:14:87:c7:4c:44:42: 45:91:65:c9:af:68:00:94:64:0d:85:fc:26:7c:82: 8a:c6:9c:35:25:66:6a:8e:18:1f:b3:c9:10:2c:aa: 2c:47:b5:72:67:57:7d:68:80:1b:19:f6:95:15:ac: 83:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A8:E3:EA:8C:76:F1:50:8E:28:CC:70:8F:3F:20:C0:F1:63:9C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/409b5d06-558b-3909-baeb-0ab41dead8ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:e007::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:c3:d1:03:fe:a6:43:40:97:24:aa:1a:01:b2:ab:c5:b9:d9: cd:dd:40:27:c2:aa:0f:49:64:92:48:4e:59:b4:14:83:ac:5e: aa:06:07:27:8f:51:06:71:e1:7f:bd:a4:87:26:da:5b:80:84: 64:f0:e4:64:77:a7:72:14:42:59:a4:d5:42:30:67:38:71:8e: 6c:10:43:05:a2:75:41:ae:5b:f1:84:1a:25:8c:04:09:08:4f: 3b:b7:e5:df:bd:20:e8:8b:7f:00:12:63:97:6f:e0:ab:1b:54: c0:f6:ac:86:05:52:9f:76:c7:3b:97:6d:f6:6d:a3:2f:e5:b3: 53:fa:16:96:35:88:27:9f:df:20:6f:59:85:da:7a:4a:6a:63: 98:72:0f:94:f1:65:93:4c:5e:0a:5f:8e:0e:2a:fc:a1:f0:ad: 76:f4:a9:44:7d:eb:c0:12:d4:fb:16:94:6a:ec:49:b3:04:da: 88:73:63:b4:9f:c4:b2:9d:74:22:94:1c:f6:99:c1:65:df:5f: 73:50:ae:78:b7:f0:aa:a5:0e:cf:f0:a8:d1:b0:47:59:49:a4: f4:75:d4:7e:2d:d4:65:a6:b5:65:24:26:a1:a0:a1:a2:c6:d1: 6e:de:5c:10:2d:03:e6:30:55:e2:09:95:c2:26:6a:21:37:6c: 6c:cb:5a:57 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t+2qzpIYSzpbvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MzQ3YjY4ZTUtOTVlYS00YzQ3LTgzMzktNTRhZjgwOWIzMTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgscGxDMdbmphLNcua3yW3mdBBMTW0Elzdkox 1VwO0drdVtxm68RS81Vjd2DgnYyw7JdulaKcBOoYRaoLezhjb5QMAD26sxQ+p5fo lDua4OiJwU8Rbpmlkn1WQJgRkmwEouhJJ9oCWwK45yoZ907Enebj6MiFDzEd4bzV MG1xV/ZImSK2ONFuyHMASmB14HQYfVciBSwTIM6fQR20E+FgXP1D0rXjJieT1ve/ ljR8KjhIQVBnsnBF2PRSJp+WkGbAaooKZwhDLQE0458Uh8dMREJFkWXJr2gAlGQN hfwmfIKKxpw1JWZqjhgfs8kQLKosR7VyZ1d9aIAbGfaVFayDbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDSo4+qMdvFQjijMcI8/IMDxY5xkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA5YjVkMDYtNTU4Yi0z OTA5LWJhZWItMGFiNDFkZWFkOGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeAH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEHD0QP+pkNAlySqGgGyq8W52c3dQCfCqg9JZJJITlm0FIOsXqoG ByePUQZx4X+9pIcm2luAhGTw5GR3p3IUQlmk1UIwZzhxjmwQQwWidUGuW/GEGiWM BAkITzu35d+9IOiLfwASY5dv4KsbVMD2rIYFUp92xzuXbfZtoy/ls1P6FpY1iCef 3yBvWYXaekpqY5hyD5TxZZNMXgpfjg4q/KHwrXb0qUR968AS1PsWlGrsSbME2ohz Y7SfxLKddCKUHPaZwWXfX3NQrni38KqlDs/wqNGwR1lJpPR11H4t1GWmtWUkJqGg oaLG0W7eXBAtA+YwVeIJlcImaiE3bGzLWlc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:07 2025 by rpki-client