$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79c84ba8-4ee0-38d5-8948-a3c30da99e9b.roa File: 79c84ba8-4ee0-38d5-8948-a3c30da99e9b.roa (raw, json) Hash identifier: vWA0X3T/wR91uSVRXg8n07kGaRL5A9kEEAc+tpvgA2o= Subject key identifier: AF:29:0A:D2:F9:BA:EF:B1:2C:AC:53:68:DD:D0:EA:EB:50:6E:B0:81 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9454B24B0A0CF230DFEC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79c84ba8-4ee0-38d5-8948-a3c30da99e9b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2001:559:c49f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:45:4b:24:b0:a0:cf:23:0d:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=e429ddf5-977e-4484-88f7-1b8aa9ca6862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:06:4f:a2:04:53:d8:3c:d5:7d:56:c2:4f:0a: 4b:12:ad:6b:1d:b2:4f:84:34:7e:e6:0f:f5:80:12: b9:f4:ce:b9:76:4f:40:d4:14:c5:99:61:df:44:88: 45:a4:06:8f:3d:d0:b8:6d:b1:da:55:74:17:00:b3: d1:f8:49:34:21:84:36:7c:2e:7b:c8:e3:bc:d8:66: 74:37:34:25:66:b7:d8:bd:cf:42:2e:f4:1b:b8:03: ad:4d:6d:d2:3e:45:a9:e0:3f:24:05:8c:c3:c2:ed: bf:0b:9f:14:10:39:a1:b8:72:52:32:d8:48:b9:0d: 1c:a5:b0:18:b6:85:df:58:57:20:65:5c:37:a0:ec: 4c:8f:fe:fd:e4:1f:e2:56:36:09:a2:f0:0b:82:da: c5:ef:43:a6:ed:64:ed:f6:75:8a:59:cc:6f:68:fc: 73:e7:19:d0:df:77:7b:66:2d:4e:84:11:48:48:ea: de:e7:44:9f:96:cc:42:34:fc:c5:6c:19:ab:ad:3e: c7:26:d0:76:55:d2:d2:da:5f:d4:e5:c8:11:db:c4: e5:64:c8:4b:c2:03:23:85:34:16:ca:4f:05:1f:a0: 1f:b4:2a:90:20:1b:41:30:f3:9f:8b:d4:18:cc:5a: f7:36:27:d8:e2:8c:9f:51:1c:ef:be:8b:70:6d:97: c9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:29:0A:D2:F9:BA:EF:B1:2C:AC:53:68:DD:D0:EA:EB:50:6E:B0:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/79c84ba8-4ee0-38d5-8948-a3c30da99e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c49f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:f3:74:89:0b:59:5d:7a:35:cf:76:00:1a:41:13:78:da:16: b7:ca:35:8c:20:37:ea:21:73:84:ef:a4:ca:a7:93:f4:cc:53: 08:4f:a5:85:18:36:5a:57:2c:f2:c5:83:84:54:a1:80:bb:bc: 86:e3:82:7a:4d:f5:19:d2:b3:4b:24:90:db:ac:53:8c:72:c3: 0f:7b:d7:37:0d:90:00:16:7a:83:34:bb:29:7d:27:de:ee:2d: bb:31:e5:0b:be:96:0a:2d:c2:8a:0f:0b:db:b1:2f:7c:1a:a0: e8:f4:0e:c7:36:2f:4d:80:c9:27:35:98:fa:01:61:bf:c6:66: 21:6a:1b:56:ff:9e:cf:23:47:d3:c9:dc:db:7e:a0:9d:a3:f6: cc:0a:1c:2c:28:5f:3b:b4:17:16:2f:b9:d0:8e:be:37:cb:2c: c4:cd:3f:dc:a9:7a:96:9a:8c:97:7e:83:17:26:fe:60:60:93: 91:e5:55:bd:e2:4a:63:b8:69:cd:92:56:e5:49:40:cb:76:a8: 03:04:b2:47:be:5e:01:e3:75:af:8e:03:e3:1c:47:81:79:92: 58:26:ef:ef:b8:93:9d:4f:8f:89:13:98:27:10:9b:9b:1f:21: db:42:fb:04:90:ec:82:f4:bd:cb:0e:a6:35:67:a0:fb:42:85: 42:66:11:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uUVLJLCgzyMN/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZTQyOWRkZjUtOTc3ZS00NDg0LTg4ZjctMWI4YWE5Y2E2ODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwZPogRT2DzVfVbCTwpLEq1rHbJPhDR+5g/1 gBK59M65dk9A1BTFmWHfRIhFpAaPPdC4bbHaVXQXALPR+Ek0IYQ2fC57yOO82GZ0 NzQlZrfYvc9CLvQbuAOtTW3SPkWp4D8kBYzDwu2/C58UEDmhuHJSMthIuQ0cpbAY toXfWFcgZVw3oOxMj/795B/iVjYJovALgtrF70Om7WTt9nWKWcxvaPxz5xnQ33d7 Zi1OhBFISOre50SflsxCNPzFbBmrrT7HJtB2VdLS2l/U5cgR28TlZMhLwgMjhTQW yk8FH6AftCqQIBtBMPOfi9QYzFr3NifY4oyfURzvvotwbZfJNwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK8pCtL5uu+xLKxTaN3Q6utQbrCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzljODRiYTgtNGVlMC0z OGQ1LTg5NDgtYTNjMzBkYTk5ZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcSf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFHzdIkLWV16Nc92ABpBE3jaFrfKNYwgN+ohc4TvpMqnk/TMUwhP pYUYNlpXLPLFg4RUoYC7vIbjgnpN9RnSs0skkNusU4xyww971zcNkAAWeoM0uyl9 J97uLbsx5Qu+lgotwooPC9uxL3waoOj0Dsc2L02AySc1mPoBYb/GZiFqG1b/ns8j R9PJ3Nt+oJ2j9swKHCwoXzu0FxYvudCOvjfLLMTNP9ypepaajJd+gxcm/mBgk5Hl Vb3iSmO4ac2SVuVJQMt2qAMEske+XgHjda+OA+McR4F5klgm7++4k51Pj4kTmCcQ m5sfIdtC+wSQ7IL0vcsOpjVnoPtChUJmES4= -----END CERTIFICATE-----Generated at Wed Nov 5 13:10:25 2025 by rpki-client