$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a7e5476-3ea3-3849-a633-48cb0e6e7af0.roa File: 5a7e5476-3ea3-3849-a633-48cb0e6e7af0.roa (raw, json) Hash identifier: C3QPORt6LhEEpbVqSRFctTzPwME38BUAM4Gvry9S1i0= Subject key identifier: E1:F0:BE:3B:9E:D9:1E:7D:D3:7F:FB:E5:E4:38:F7:85:24:54:B0:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DBA091DF8ED9CF7C0AFD080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a7e5476-3ea3-3849-a633-48cb0e6e7af0.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:559:82dd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:09:1d:f8:ed:9c:f7:c0:af:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8a3eac9a-3565-4dc0-a234-dd1eed4334f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:45:28:01:55:b8:18:a6:63:a6:e3:04:c6: fb:0d:c3:05:5f:99:29:37:11:12:87:bc:c3:cb:bb: 3e:f8:4b:db:42:4a:fa:87:7a:4d:27:7b:08:78:a1: be:96:45:fc:91:65:3c:07:15:ce:35:ff:dd:40:34: d7:50:cf:3f:2d:b4:49:5a:5e:a5:81:8b:9b:e9:f5: a0:e2:b5:4b:de:04:41:41:ff:b4:1a:c2:67:c3:6a: 5f:5d:fe:c7:68:4a:ce:c3:24:78:31:05:89:91:4f: 0b:96:e7:76:3d:dd:7d:9c:5b:ee:44:90:48:2c:cb: 11:a8:e3:9b:da:c4:6d:85:77:5d:6f:2b:51:05:5d: 5a:6f:c5:e2:3e:ae:1c:a0:83:f6:35:24:24:8e:3a: 74:39:fd:a5:ca:2e:93:27:30:53:62:b3:35:a0:ca: 76:32:d3:a8:60:b4:8a:dd:76:67:83:eb:57:82:bf: 51:8d:72:ff:05:1b:dc:b7:2e:27:18:f9:1f:71:1e: 90:03:a6:9f:72:11:ab:69:ae:47:f5:11:5f:74:42: 40:35:5f:15:b9:b7:0d:97:8c:a9:3f:be:21:5a:29: 70:3a:e0:e0:60:63:c6:54:95:e1:4d:a5:7b:5a:62: c6:f8:4e:53:b4:6e:72:7b:10:49:81:de:a2:9e:44: 21:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F0:BE:3B:9E:D9:1E:7D:D3:7F:FB:E5:E4:38:F7:85:24:54:B0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a7e5476-3ea3-3849-a633-48cb0e6e7af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:82dd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:42:2b:57:5a:a4:cb:23:14:58:1e:6e:b8:e4:b1:05:55:e1: b4:fa:ca:dc:03:9f:0c:91:aa:bf:f3:03:35:36:93:6b:38:32: f4:65:92:c9:a5:ac:e6:26:d4:1f:c8:7a:01:c7:7f:d3:d0:1a: 24:23:88:a9:73:dc:b6:74:ef:71:96:30:88:52:d7:e8:f3:52: c4:fe:82:9a:bc:25:43:ea:e9:6c:f7:ea:59:45:e2:79:ab:01: c9:d0:50:0a:78:9d:66:13:7e:b9:71:5d:9d:9b:a8:0f:9d:66: 47:12:c8:c4:e6:04:5e:92:e2:ec:be:16:3a:c3:e2:22:f5:77: dc:5e:12:d0:8b:cb:7a:c8:da:96:67:b7:d1:cd:a5:e3:4b:aa: ae:f2:af:8a:01:f9:15:97:53:26:ba:22:19:3b:c3:53:ee:cd: a6:ed:24:e7:4e:82:d0:a8:12:85:64:06:f1:45:18:c2:17:e1: 7b:22:9d:22:42:5e:cc:c9:bd:14:d3:b1:e9:0f:37:77:fb:23: 53:19:a2:23:33:73:3a:93:c5:0a:fc:39:43:15:57:8b:df:86: fb:ab:ab:37:cd:ff:33:c8:06:f7:d8:a2:c0:60:36:5e:16:6f: 2a:d6:ad:cd:84:94:8c:72:ae:22:c8:0c:1e:9b:7d:45:5e:10: 4d:92:af:43 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ugkd+O2c98Cv0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OGEzZWFjOWEtMzU2NS00ZGMwLWEyMzQtZGQxZWVkNDMzNGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi11FKAFVuBimY6bjBMb7DcMFX5kpNxESh7zD y7s++EvbQkr6h3pNJ3sIeKG+lkX8kWU8BxXONf/dQDTXUM8/LbRJWl6lgYub6fWg 4rVL3gRBQf+0GsJnw2pfXf7HaErOwyR4MQWJkU8Llud2Pd19nFvuRJBILMsRqOOb 2sRthXddbytRBV1ab8XiPq4coIP2NSQkjjp0Of2lyi6TJzBTYrM1oMp2MtOoYLSK 3XZng+tXgr9RjXL/BRvcty4nGPkfcR6QA6afchGraa5H9RFfdEJANV8VubcNl4yp P74hWilwOuDgYGPGVJXhTaV7WmLG+E5TtG5yexBJgd6inkQhTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOHwvjue2R5903/75eQ494UkVLD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWE3ZTU0NzYtM2VhMy0z ODQ5LWE2MzMtNDhjYjBlNmU3YWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYLd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAN1CK1dapMsjFFgebrjksQVV4bT6ytwDnwyRqr/zAzU2k2s4MvRl ksmlrOYm1B/IegHHf9PQGiQjiKlz3LZ073GWMIhS1+jzUsT+gpq8JUPq6Wz36llF 4nmrAcnQUAp4nWYTfrlxXZ2bqA+dZkcSyMTmBF6S4uy+FjrD4iL1d9xeEtCLy3rI 2pZnt9HNpeNLqq7yr4oB+RWXUya6Ihk7w1PuzabtJOdOgtCoEoVkBvFFGMIX4Xsi nSJCXszJvRTTsekPN3f7I1MZoiMzczqTxQr8OUMVV4vfhvurqzfN/zPIBvfYosBg Nl4WbyrWrc2ElIxyriLIDB6bfUVeEE2Sr0M= -----END CERTIFICATE-----Generated at Tue Oct 21 19:30:18 2025 by rpki-client