$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e8ed76-e1a9-31f1-8406-6838edb6b921.roa File: a5e8ed76-e1a9-31f1-8406-6838edb6b921.roa (raw, json) Hash identifier: 6fTQbkQfvcMfhT/uIwDNI/tnWLTQbaASPUtes9Do+gE= Subject key identifier: 28:6D:89:02:C6:7E:A7:0A:E6:6C:21:54:A0:73:D3:F9:CF:40:FD:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9CE17F6A5ED9B3FA0EB40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e8ed76-e1a9-31f1-8406-6838edb6b921.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:8118::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:ce:17:f6:a5:ed:9b:3f:a0:eb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=c4da963e-7dcf-42b4-9cfd-eec8c3e85cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:79:59:2b:43:18:c0:0e:79:ee:40:a3:cb:bf: 16:11:63:fe:96:a5:10:db:9d:b9:d9:e7:f9:03:27: 84:c2:70:9c:4a:52:49:7f:c9:dd:1a:38:65:06:85: 63:c6:fd:6b:49:49:27:6c:c9:06:d8:75:d3:a9:dc: bc:9e:bf:9e:2c:3a:57:f7:93:03:20:75:f7:33:71: b3:87:be:bd:ba:73:ef:e9:2b:74:79:18:33:c8:e7: c8:e0:dc:e8:5c:34:da:45:c1:fe:79:f8:4c:be:1e: 02:cb:17:d5:ed:d5:ed:3d:51:80:8c:99:77:d8:ec: a9:53:e4:f3:14:07:57:7e:a2:9e:50:ff:4f:b5:fb: 7c:39:43:bc:59:c0:f5:a8:9b:ae:6f:ab:dd:b9:4c: de:5b:49:b1:8a:b6:06:9d:bc:e4:bb:90:78:04:12: 5a:e5:88:a6:64:17:86:28:4f:8e:03:91:a6:74:5e: f6:88:b2:8f:d6:e9:4d:2c:94:aa:ab:54:24:4c:e2: b7:66:7b:e5:46:00:a0:a2:40:52:8c:4f:5c:bc:95: cb:23:41:20:73:17:98:43:12:2b:1c:bc:68:29:fc: c3:e3:8f:2e:12:1a:f2:a9:db:4a:bd:73:56:7f:3e: 6a:03:97:18:26:55:d3:e2:1b:43:28:fe:5f:4d:1b: 0d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6D:89:02:C6:7E:A7:0A:E6:6C:21:54:A0:73:D3:F9:CF:40:FD:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e8ed76-e1a9-31f1-8406-6838edb6b921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8118::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:0b:e1:06:d6:d5:8f:ab:85:c3:04:92:f6:6b:19:38:55:30: c0:eb:8e:a7:63:63:24:a6:d0:c7:7d:e1:2a:47:c1:7e:95:dd: 34:37:97:90:11:26:bb:8c:e8:b1:f6:ee:69:c7:e1:10:8e:a7: 7d:77:84:3e:55:ad:cd:36:cc:2b:fa:6f:e3:b8:5a:f1:9c:b4: e0:4d:46:b4:e8:50:d0:f5:8c:61:15:1d:1a:1a:7c:ab:94:c1: bc:1e:45:3f:de:ef:c7:21:70:38:19:e8:5f:c4:05:7a:20:1a: a4:81:ff:be:0a:a7:48:d5:d9:25:1b:78:60:02:ba:6b:85:fd: 3e:78:b0:5c:8a:1b:2e:02:b9:e7:f1:25:5a:91:58:77:45:1d: ab:a6:d0:fb:e9:30:5c:3e:d5:ca:8c:0b:e0:4c:0b:f7:80:75: be:a1:49:64:dd:b0:5d:d3:4d:0f:72:8d:55:e8:32:4e:d5:15: ef:92:fb:15:bd:cc:89:99:cd:94:35:d0:31:60:a9:1e:c4:a1: 14:2a:2d:47:8e:c5:7b:27:de:cc:d8:90:1f:b3:d5:ca:8d:fa: 11:45:fa:ee:2f:32:2c:2b:a9:dc:ff:83:da:90:2c:55:85:59: 50:a2:cf:a5:b1:8a:20:ee:c5:24:c6:3a:14:8b:8c:1e:fb:d2: 7b:84:62:fd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uc4X9qXtmz+g60AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YzRkYTk2M2UtN2RjZi00MmI0LTljZmQtZWVjOGMzZTg1Y2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHlZK0MYwA557kCjy78WEWP+lqUQ25252ef5 AyeEwnCcSlJJf8ndGjhlBoVjxv1rSUknbMkG2HXTqdy8nr+eLDpX95MDIHX3M3Gz h769unPv6St0eRgzyOfI4NzoXDTaRcH+efhMvh4CyxfV7dXtPVGAjJl32OypU+Tz FAdXfqKeUP9Ptft8OUO8WcD1qJuub6vduUzeW0mxirYGnbzku5B4BBJa5YimZBeG KE+OA5GmdF72iLKP1ulNLJSqq1QkTOK3ZnvlRgCgokBSjE9cvJXLI0EgcxeYQxIr HLxoKfzD448uEhryqdtKvXNWfz5qA5cYJlXT4htDKP5fTRsNyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFChtiQLGfqcK5mwhVKBz0/nPQP22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVlOGVkNzYtZTFhOS0z MWYxLTg0MDYtNjgzOGVkYjZiOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYEY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL4L4QbW1Y+rhcMEkvZrGThVMMDrjqdjYySm0Md94SpHwX6V3TQ3 l5ARJruM6LH27mnH4RCOp313hD5Vrc02zCv6b+O4WvGctOBNRrToUND1jGEVHRoa fKuUwbweRT/e78chcDgZ6F/EBXogGqSB/74Kp0jV2SUbeGACumuF/T54sFyKGy4C uefxJVqRWHdFHaum0PvpMFw+1cqMC+BMC/eAdb6hSWTdsF3TTQ9yjVXoMk7VFe+S +xW9zImZzZQ10DFgqR7EoRQqLUeOxXsn3szYkB+z1cqN+hFF+u4vMiwrqdz/g9qQ LFWFWVCiz6WxiiDuxSTGOhSLjB770nuEYv0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:15:29 2025 by rpki-client