$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f952ca2d-e247-34f9-81c0-c38c4b3f0f77.roa File: f952ca2d-e247-34f9-81c0-c38c4b3f0f77.roa (raw, json) Hash identifier: 1bzed/YhY6OJIJxLalv3kF0d6ooVUSyaQdsNgXee7CA= Subject key identifier: 19:7E:30:86:EB:D6:8A:47:9B:C6:9E:2F:A7:8D:A2:0F:B1:21:93:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB743953C6415F25FF3F780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f952ca2d-e247-34f9-81c0-c38c4b3f0f77.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 2001:559:8787::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:43:95:3c:64:15:f2:5f:f3:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d8eb68ce-3e3b-49a1-a310-cbdaa07944e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:12:48:5f:4d:ef:cb:4a:48:43:2a:3d:25: 73:6e:c3:a1:0a:cb:30:cb:e4:4d:c9:45:4b:65:fd: b2:0d:f1:1f:3a:b7:e4:c2:a7:0e:d4:16:9e:51:25: 56:81:f9:31:ec:d0:57:af:97:16:ec:75:97:a1:f6: be:c5:86:36:e0:7c:e4:9a:ba:3d:0c:c1:4e:11:ac: 05:35:96:a2:ac:2f:d3:17:c5:37:78:2c:20:34:7b: d7:29:d1:f3:48:df:ac:07:59:97:21:a9:c2:21:e3: c6:c6:44:5c:18:35:c1:8d:61:3a:0a:52:9e:e9:91: 86:30:f7:0c:2c:d2:f8:e1:57:f1:31:b7:5e:1e:6f: 79:25:b7:c9:e0:e4:ae:6a:c8:96:5d:1a:3c:e7:41: fd:ff:d0:a3:98:b8:34:fd:fa:0c:c0:fc:47:29:c2: 21:c4:08:1c:60:6e:c8:36:77:64:05:16:39:de:63: db:0d:7e:87:1f:10:85:99:d4:6a:88:ae:d2:06:48: b7:1a:c6:ff:8e:9c:9e:02:94:ab:cf:f3:c1:44:47: 02:28:ea:0e:6d:94:f1:93:95:04:28:24:2d:7a:aa: d2:8a:b7:e3:02:fd:05:29:37:6e:c6:14:3e:31:37: f4:a3:9b:11:4e:cd:77:fb:9e:b0:df:32:7f:aa:9f: 78:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:7E:30:86:EB:D6:8A:47:9B:C6:9E:2F:A7:8D:A2:0F:B1:21:93:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f952ca2d-e247-34f9-81c0-c38c4b3f0f77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8787::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a4:57:d4:b2:ee:69:59:d8:b8:82:e1:f9:e6:fd:fb:88:ba: c5:1a:bd:84:b4:17:1c:f9:ad:94:45:8b:ba:d5:59:76:a0:d3: fb:50:88:29:61:ec:d8:a5:81:8a:79:71:ef:ca:b5:a3:40:5b: eb:f5:90:f2:ca:a8:76:a0:0a:98:3c:91:91:4a:b1:82:94:c1: 16:ea:71:b4:9b:b0:38:b9:bc:4e:de:4f:c8:c1:a5:9d:a9:34: c9:56:b0:30:2b:37:84:81:eb:b1:41:66:3a:4c:d1:22:17:1e: a3:85:8d:90:1e:66:87:b6:07:f2:f3:0d:4e:98:d5:7a:27:82: 65:40:4a:dc:d5:a6:5d:93:7d:6b:b1:5b:c2:be:bc:e0:ca:19: 4d:77:4e:20:33:79:c9:d8:a2:dd:56:f8:1a:8f:34:30:56:0c: b5:81:56:1a:57:a7:a8:53:e7:a1:3c:58:91:bf:bb:9a:59:24: 50:00:45:72:d2:84:b6:24:08:cb:b4:a1:b9:4c:8e:00:fc:80: d2:3c:cd:14:ec:c1:24:57:16:93:af:42:5f:ca:45:41:ea:20: 3d:17:aa:1d:aa:a2:2e:f6:fb:08:39:4b:5e:56:5a:1f:1a:7f: f5:e0:77:9f:5f:48:4d:c4:ec:59:f8:1e:c5:20:20:a4:3e:f5: 39:35:a1:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t0OVPGQV8l/z94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDhlYjY4Y2UtM2UzYi00OWExLWEzMTAtY2JkYWEwNzk0NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr88SSF9N78tKSEMqPSVzbsOhCsswy+RNyUVL Zf2yDfEfOrfkwqcO1BaeUSVWgfkx7NBXr5cW7HWXofa+xYY24Hzkmro9DMFOEawF NZairC/TF8U3eCwgNHvXKdHzSN+sB1mXIanCIePGxkRcGDXBjWE6ClKe6ZGGMPcM LNL44VfxMbdeHm95JbfJ4OSuasiWXRo850H9/9CjmLg0/foMwPxHKcIhxAgcYG7I NndkBRY53mPbDX6HHxCFmdRqiK7SBki3Gsb/jpyeApSrz/PBREcCKOoObZTxk5UE KCQteqrSirfjAv0FKTduxhQ+MTf0o5sRTs13+56w3zJ/qp94FwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBl+MIbr1opHm8aeL6eNog+xIZPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk1MmNhMmQtZTI0Ny0z NGY5LTgxYzAtYzM4YzRiM2YwZjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYeH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFekV9Sy7mlZ2LiC4fnm/fuIusUavYS0Fxz5rZRFi7rVWXag0/tQ iClh7NilgYp5ce/KtaNAW+v1kPLKqHagCpg8kZFKsYKUwRbqcbSbsDi5vE7eT8jB pZ2pNMlWsDArN4SB67FBZjpM0SIXHqOFjZAeZoe2B/LzDU6Y1XongmVAStzVpl2T fWuxW8K+vODKGU13TiAzecnYot1W+BqPNDBWDLWBVhpXp6hT56E8WJG/u5pZJFAA RXLShLYkCMu0oblMjgD8gNI8zRTswSRXFpOvQl/KRUHqID0Xqh2qoi72+wg5S15W Wh8af/Xgd59fSE3E7Fn4HsUgIKQ+9Tk1ob0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:08:25 2025 by rpki-client