$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d9c2cf5-9cef-3b70-8f80-84456759da7d.roa File: 4d9c2cf5-9cef-3b70-8f80-84456759da7d.roa (raw, json) Hash identifier: MgWt5wL6XNl9EfYh0MbyOeqRHSDw+15O+PirY7T6y60= Subject key identifier: 5F:83:4B:38:A6:89:1B:66:40:06:80:98:C7:EC:0F:46:CB:7B:2A:0A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DBA047E8CE9E4717BD46800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d9c2cf5-9cef-3b70-8f80-84456759da7d.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:559:473::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:04:7e:8c:e9:e4:71:7b:d4:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=40afd718-679b-45f9-a917-f42c9648bf0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:21:cb:d1:6d:ee:2a:cc:ea:a8:c9:f6:00: 47:a1:98:75:dd:e8:ff:c7:57:06:0c:e5:3a:f6:a8: c8:ab:e9:c1:83:20:32:c8:39:e2:12:91:a1:4e:93: 27:6d:2f:91:44:73:ba:b6:e5:75:81:aa:ba:a2:9a: 3d:94:ad:fc:ca:5f:89:67:54:b8:4a:1b:9e:23:be: 1b:ef:6f:9e:f8:75:98:76:c9:54:d9:09:03:63:b2: 71:77:b7:cd:d7:b2:2c:ac:07:f4:fb:ba:18:2f:97: f4:5d:ca:8f:34:ab:68:03:49:6f:05:40:55:98:dd: 59:82:12:57:a0:8a:c8:3c:40:13:d6:a4:81:e7:bb: 9c:98:9f:59:10:f0:c7:ff:5e:74:ac:01:59:db:f8: 7c:c3:24:92:50:fa:d0:0e:95:28:01:fc:6d:97:a9: ae:1d:37:be:df:41:45:29:30:69:b5:7b:d2:53:a2: 6d:75:02:7c:71:e1:89:af:10:97:45:08:73:c4:4d: 58:b8:4a:03:29:d8:80:87:74:23:76:29:18:4d:69: a9:eb:9d:75:df:bc:e0:be:a6:f3:20:28:f7:8a:c7: 97:f8:c4:0a:5d:1f:68:7b:27:f9:fb:3c:0d:2d:ec: 31:06:8a:95:7a:c5:3d:3c:32:b5:19:22:3a:ba:84: e6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:83:4B:38:A6:89:1B:66:40:06:80:98:C7:EC:0F:46:CB:7B:2A:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d9c2cf5-9cef-3b70-8f80-84456759da7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:473::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:d9:7b:1a:75:ec:76:f6:9f:43:89:bc:09:22:c7:cc:22:41: 87:18:d2:1e:d0:c2:3f:72:35:c8:75:74:b8:dd:a3:8f:53:8d: a4:0d:6c:7e:85:f4:e8:47:67:b0:3a:6c:00:f4:71:d3:95:17: 39:a1:ec:b6:b3:9d:21:e2:d6:99:a8:de:8d:97:97:c4:b3:e8: c6:fe:12:88:84:3d:42:a1:4d:34:6a:d4:a0:db:30:8e:12:c8: ea:42:ce:6d:49:6b:97:11:8c:1f:68:45:5c:59:26:a2:07:e0: 39:43:b7:49:a6:95:29:de:92:97:41:ae:73:b0:69:f2:2f:b4: 18:f8:bf:81:0f:4c:db:03:af:f8:d6:33:e3:3a:fb:7c:5e:22: 29:bc:0c:ea:db:cc:9c:31:2a:29:b1:b9:38:18:a2:f5:56:6b: 9b:dd:da:0b:30:db:0d:4b:1a:d4:cc:be:4d:c5:0d:20:9e:91: 3e:04:b6:b0:e5:3f:e9:fe:8c:cd:28:b0:14:22:80:4a:b6:3e: 2b:12:26:2e:2b:37:ab:58:81:78:36:76:38:4c:3f:51:35:9b: e0:d7:7c:96:96:28:7e:a2:ff:cc:47:9c:46:f8:1e:94:71:dc: 95:dc:e2:5a:e7:59:73:ab:5b:45:7c:b1:0a:32:e5:12:25:17: 37:ce:f2:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ugR+jOnkcXvUaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NDBhZmQ3MTgtNjc5Yi00NWY5LWE5MTctZjQyYzk2NDhiZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAAhy9Ft7irM6qjJ9gBHoZh13ej/x1cGDOU6 9qjIq+nBgyAyyDniEpGhTpMnbS+RRHO6tuV1gaq6opo9lK38yl+JZ1S4ShueI74b 72+e+HWYdslU2QkDY7Jxd7fN17IsrAf0+7oYL5f0XcqPNKtoA0lvBUBVmN1ZghJX oIrIPEAT1qSB57ucmJ9ZEPDH/150rAFZ2/h8wySSUPrQDpUoAfxtl6muHTe+30FF KTBptXvSU6JtdQJ8ceGJrxCXRQhzxE1YuEoDKdiAh3QjdikYTWmp651137zgvqbz ICj3iseX+MQKXR9oeyf5+zwNLewxBoqVesU9PDK1GSI6uoTmGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF+DSzimiRtmQAaAmMfsD0bLeyoKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGQ5YzJjZjUtOWNlZi0z YjcwLThmODAtODQ0NTY3NTlkYTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQRz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMPZexp17Hb2n0OJvAkix8wiQYcY0h7Qwj9yNch1dLjdo49TjaQN bH6F9OhHZ7A6bAD0cdOVFzmh7LaznSHi1pmo3o2Xl8Sz6Mb+EoiEPUKhTTRq1KDb MI4SyOpCzm1Ja5cRjB9oRVxZJqIH4DlDt0mmlSnekpdBrnOwafIvtBj4v4EPTNsD r/jWM+M6+3xeIim8DOrbzJwxKimxuTgYovVWa5vd2gsw2w1LGtTMvk3FDSCekT4E trDlP+n+jM0osBQigEq2PisSJi4rN6tYgXg2djhMP1E1m+DXfJaWKH6i/8xHnEb4 HpRx3JXc4lrnWXOrW0V8sQoy5RIlFzfO8ps= -----END CERTIFICATE-----Generated at Wed Nov 5 10:59:03 2025 by rpki-client