$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41560147-5b49-330c-acc9-448b2a6d0e24.roa File: 41560147-5b49-330c-acc9-448b2a6d0e24.roa (raw, json) Hash identifier: /0oEmzU9mP4aKUNHZ3oMfiEvLWVTBVkGfqtedCvqKSE= Subject key identifier: 7A:73:32:2D:1B:4C:F7:E7:06:9B:B7:49:81:70:1B:CB:0E:A5:D9:DA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7572CC2832D7B6686E000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41560147-5b49-330c-acc9-448b2a6d0e24.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7016 IP address blocks: 2001:559:14e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:57:2c:c2:83:2d:7b:66:86:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=e7221a0c-d727-4fd3-b8ec-58d3a27ca3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2f:5a:40:7a:7b:14:dd:b5:11:41:b5:a2:46: 34:bb:0e:8f:5a:d4:84:43:64:f2:1d:6b:b7:43:fa: 71:c8:e8:1e:9a:28:0e:d8:a6:ac:75:87:7f:3d:b2: a3:dd:33:de:c4:32:13:a4:15:52:f2:fa:87:79:bf: f1:21:3b:d1:c8:0b:81:8b:92:de:7a:07:04:88:44: b0:eb:73:5c:33:5f:66:9b:b7:e2:af:85:f1:fb:04: a0:6c:ac:3a:ba:64:d3:a5:1f:d6:e5:0d:f0:20:81: 26:68:01:54:b8:75:0c:72:95:42:81:3f:20:3c:b5: 69:17:24:47:bd:7d:46:98:08:98:5d:16:f9:f5:00: 32:55:e2:3e:e4:72:6c:5c:61:73:40:76:66:aa:52: 49:4d:de:6a:d0:c7:6a:3c:91:db:d2:79:c9:8a:e1: f3:a1:75:49:0d:95:b4:64:0f:46:d6:27:6b:c3:99: ff:e8:81:ab:4e:b7:5a:27:4e:4f:e9:de:49:5b:5d: 8e:95:b7:31:67:b8:1e:6e:4d:de:dc:78:55:8f:67: 00:48:1e:fd:1e:73:25:67:39:de:19:a6:3b:55:b5: 13:8c:97:fd:bd:eb:3a:56:54:db:54:63:43:7e:d4: 83:53:6a:14:8b:4e:a1:88:96:a8:16:10:f6:1f:13: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:73:32:2D:1B:4C:F7:E7:06:9B:B7:49:81:70:1B:CB:0E:A5:D9:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41560147-5b49-330c-acc9-448b2a6d0e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:14e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:48:9b:12:5a:0f:bf:07:48:09:3c:98:7c:5c:ff:36:42:67: 47:1e:e5:bf:4c:3e:cd:60:05:1b:d5:28:10:ad:61:10:c7:ea: 98:d1:03:94:6e:29:df:94:0c:ad:e2:31:67:9e:80:36:6e:99: 0b:5f:a0:ff:dc:f2:75:71:b0:9d:28:ee:39:3d:33:f9:f6:99: fa:7c:de:7d:a9:3f:fe:c3:51:4a:9c:16:9c:86:c4:cb:55:c9: 03:93:5a:82:cf:7d:bd:af:96:9f:b1:bb:78:7c:cf:94:3c:4a: ab:77:5d:9a:fd:d3:61:a0:c0:4f:c9:1a:13:11:87:e0:93:62: f6:18:eb:c1:9c:77:df:21:bb:b8:d5:cc:d1:05:ab:89:d5:85: c9:5e:0e:aa:64:0f:80:6a:7a:3a:3c:26:56:96:97:51:53:63: 63:d7:be:cd:00:33:9b:3c:89:b1:bf:1f:9d:ce:ca:3d:40:80: 6e:96:53:95:c7:03:45:55:89:cb:1c:ee:21:08:85:d3:70:ad: a2:ab:d9:79:72:dd:54:9d:a4:65:d6:b4:74:fb:c5:99:1e:f4: e6:fd:37:9a:4f:47:ed:82:15:2c:7f:6f:0d:2f:35:33:4b:95: 21:1c:95:35:7d:59:12:a4:d0:a3:4a:32:3a:49:2e:71:35:14: d5:e2:7e:37 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t1cswoMte2aG4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZTcyMjFhMGMtZDcyNy00ZmQzLWI4ZWMtNThkM2EyN2NhM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC9aQHp7FN21EUG1okY0uw6PWtSEQ2TyHWu3 Q/pxyOgemigO2KasdYd/PbKj3TPexDITpBVS8vqHeb/xITvRyAuBi5LeegcEiESw 63NcM19mm7fir4Xx+wSgbKw6umTTpR/W5Q3wIIEmaAFUuHUMcpVCgT8gPLVpFyRH vX1GmAiYXRb59QAyVeI+5HJsXGFzQHZmqlJJTd5q0MdqPJHb0nnJiuHzoXVJDZW0 ZA9G1idrw5n/6IGrTrdaJ05P6d5JW12OlbcxZ7gebk3e3HhVj2cASB79HnMlZzne GaY7VbUTjJf9ves6VlTbVGNDftSDU2oUi06hiJaoFhD2HxPPDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHpzMi0bTPfnBpu3SYFwG8sOpdnaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDE1NjAxNDctNWI0OS0z MzBjLWFjYzktNDQ4YjJhNmQwZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQFO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAChImxJaD78HSAk8mHxc/zZCZ0ce5b9MPs1gBRvVKBCtYRDH6pjR A5RuKd+UDK3iMWeegDZumQtfoP/c8nVxsJ0o7jk9M/n2mfp83n2pP/7DUUqcFpyG xMtVyQOTWoLPfb2vlp+xu3h8z5Q8Sqt3XZr902GgwE/JGhMRh+CTYvYY68Gcd98h u7jVzNEFq4nVhcleDqpkD4Bqejo8JlaWl1FTY2PXvs0AM5s8ibG/H53Oyj1AgG6W U5XHA0VVicsc7iEIhdNwraKr2Xly3VSdpGXWtHT7xZke9Ob9N5pPR+2CFSx/bw0v NTNLlSEclTV9WRKk0KNKMjpJLnE1FNXifjc= -----END CERTIFICATE-----Generated at Wed Nov 5 11:53:06 2025 by rpki-client