$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c4522bd-9c6d-34c7-aa63-dcee4128516a.roa File: 5c4522bd-9c6d-34c7-aa63-dcee4128516a.roa (raw, json) Hash identifier: 3tuJI3Si0Oo2ZH/V68DduEktOwTbiDl6aNXYl7jDCo8= Subject key identifier: 2A:31:EE:F7:F6:E3:65:60:3A:D1:13:3A:43:4F:F4:BE:E6:09:8C:5C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B8BE23715F0BEC8C89FBEC280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c4522bd-9c6d-34c7-aa63-dcee4128516a.roa Signing time: Fri 17 Oct 2025 01:00:30 +0000 ROA not before: Fri 17 Oct 2025 01:00:30 +0000 ROA not after: Thu 15 Jan 2026 02:00:30 +0000 asID: 35040 IP address blocks: 2001:559:0:72::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:e2:37:15:f0:be:c8:c8:9f:be:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 17 01:00:30 2025 GMT Not After : Jan 15 02:00:30 2026 GMT Subject: CN=d7ca1e87-fb78-460c-b0aa-e4bc05aa1ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:8c:43:6d:81:c3:47:55:db:bd:a0:5f:ce: ff:9f:8b:e2:2a:e9:9f:71:ab:cc:ce:0c:c6:e9:2d: dd:65:c2:e0:a1:4a:96:62:86:0c:1b:e1:f7:ed:b1: 87:80:50:e3:4a:77:19:48:5a:40:54:d7:e0:e3:af: 9b:48:58:9d:f2:77:9b:56:80:9b:07:79:d1:87:cb: 04:24:7a:c0:b9:b0:53:64:58:1b:c1:57:55:d0:2e: 65:65:1e:0f:1c:5e:a9:78:63:bb:7e:34:71:cc:f6: a5:e1:35:d2:3b:4a:0d:5a:91:a2:d1:8e:75:06:32: fa:53:5c:00:76:c1:cb:60:e1:21:09:4a:8c:63:b8: 56:15:16:3f:6c:87:2c:42:72:aa:69:de:f6:ac:2e: 29:a1:59:32:37:46:cb:0c:e6:db:e0:0d:26:f7:7f: b2:6b:d1:74:cf:59:0c:e7:41:37:21:0c:f7:bb:55: c4:e1:a1:34:03:6d:0b:59:47:ba:2b:46:bc:f6:56: 5c:21:eb:a1:d1:68:f0:37:4b:8f:43:e1:95:33:9d: 3b:e0:27:a2:78:ce:47:fb:f3:04:6e:a3:d3:91:97: 5f:3f:d1:ab:db:a5:e3:96:01:0a:06:bd:22:29:a8: c4:ec:c6:8d:bc:29:84:68:91:c2:80:da:62:36:f1: 16:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:31:EE:F7:F6:E3:65:60:3A:D1:13:3A:43:4F:F4:BE:E6:09:8C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c4522bd-9c6d-34c7-aa63-dcee4128516a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:0:72::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:3f:dc:64:09:e6:d4:07:fc:fa:9f:0c:70:43:fb:5e:3d:e7: e5:8b:a3:ee:cc:50:df:75:02:c6:45:cb:82:38:04:52:20:e5: cc:00:6c:ab:04:e5:38:db:7b:12:98:e9:53:d3:53:ed:60:4c: 34:6c:25:5d:64:2f:2c:5d:c0:04:94:e6:fb:27:11:69:6a:d0: e7:63:d9:f9:82:83:8b:62:46:7c:89:23:d8:8f:51:03:0c:d9: c2:a9:56:9c:9e:6c:2f:3f:14:99:5c:7e:ea:fc:7a:00:0d:c6: 27:c5:6d:2a:fb:ec:87:51:97:a8:13:03:e6:0c:cc:84:f1:a0: ba:a2:ec:1d:48:b6:29:98:41:62:e1:89:66:b7:99:27:5e:3d: 80:a6:df:ce:85:e9:d9:4e:6d:10:42:55:02:23:d9:6d:8a:dd: 8b:c1:39:d4:20:3f:50:ca:b6:67:03:55:59:5a:8b:be:dc:e8: 07:92:30:21:52:7d:8b:fc:9c:ce:25:2d:73:53:5f:83:2c:84: bd:a1:cc:aa:b3:be:c7:97:e1:0a:8f:10:fa:e4:c6:89:5e:ae: 87:31:14:c2:74:2c:3b:08:bf:ac:3d:4b:10:b6:df:13:e1:45: 3d:eb:6a:be:c8:18:43:05:51:97:39:9e:47:64:4f:37:df:67: ff:57:ec:37 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEuL4jcV8L7IyJ++woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAxNzAxMDAzMFoXDTI2MDExNTAyMDAzMFowLzEtMCsGA1UEAxMk ZDdjYTFlODctZmI3OC00NjBjLWIwYWEtZTRiYzA1YWExZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCuMQ22Bw0dV272gX87/n4viKumfcavMzgzG 6S3dZcLgoUqWYoYMG+H37bGHgFDjSncZSFpAVNfg46+bSFid8nebVoCbB3nRh8sE JHrAubBTZFgbwVdV0C5lZR4PHF6peGO7fjRxzPal4TXSO0oNWpGi0Y51BjL6U1wA dsHLYOEhCUqMY7hWFRY/bIcsQnKqad72rC4poVkyN0bLDObb4A0m93+ya9F0z1kM 50E3IQz3u1XE4aE0A20LWUe6K0a89lZcIeuh0WjwN0uPQ+GVM5074CeieM5H+/ME bqPTkZdfP9Gr26XjlgEKBr0iKajE7MaNvCmEaJHCgNpiNvEWcQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFCox7vf242VgOtETOkNP9L7mCYxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM0NTIyYmQtOWM2ZC0z NGM3LWFhNjMtZGNlZTQxMjg1MTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA AHIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAxD/cZAnm1Af8+p8McEP7Xj3n5Yuj7sxQ33UCxkXLgjgEUiDl zABsqwTlONt7EpjpU9NT7WBMNGwlXWQvLF3ABJTm+ycRaWrQ52PZ+YKDi2JGfIkj 2I9RAwzZwqlWnJ5sLz8UmVx+6vx6AA3GJ8VtKvvsh1GXqBMD5gzMhPGguqLsHUi2 KZhBYuGJZreZJ149gKbfzoXp2U5tEEJVAiPZbYrdi8E51CA/UMq2ZwNVWVqLvtzo B5IwIVJ9i/ycziUtc1NfgyyEvaHMqrO+x5fhCo8Q+uTGiV6uhzEUwnQsOwi/rD1L ELbfE+FFPetqvsgYQwVRlzmeR2RPN99n/1fsNw== -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:26 2025 by rpki-client