$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a81f0c7-08a0-34bc-9413-d65abfddc989.roa File: 5a81f0c7-08a0-34bc-9413-d65abfddc989.roa (raw, json) Hash identifier: InlwGoe//3xhLnH7dSbrQzmFBD7/UehI18i/xc0mu7g= Subject key identifier: 92:14:44:9B:A2:4E:9F:8C:73:3E:A2:C6:67:2E:26:9A:DE:71:86:B7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA9C166AAF7311282D9200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a81f0c7-08a0-34bc-9413-d65abfddc989.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 2001:559:c1fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:9c:16:6a:af:73:11:28:2d:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=fcd54de8-a45d-4280-9f3d-48bd91a79942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1b:22:87:57:8f:d6:90:d9:53:b0:44:fd:df: 13:fa:72:9e:cc:ce:03:ba:c1:6b:d5:13:ba:df:df: 84:83:eb:ce:b8:0a:97:46:04:1d:5b:31:86:5a:63: d6:bd:04:50:43:d8:4a:d0:9f:34:c3:b6:52:f2:82: 7d:98:ba:fd:37:ed:3b:26:e5:28:97:01:9a:69:1b: 5b:7e:12:7b:55:e0:4f:bd:d5:63:94:02:12:6c:d6: ec:f7:be:d7:43:16:b6:bd:45:b2:a5:f9:57:3b:a4: db:0a:a3:65:0f:bb:4d:b4:fe:cc:21:02:06:5d:75: 25:84:db:96:bf:b4:3c:8a:66:6f:d9:a0:a2:0a:c0: 78:64:10:35:ca:10:a0:7a:78:8b:d4:24:ea:71:29: 0d:8f:a7:ac:d2:db:94:40:d5:5b:d7:75:e5:88:43: 2e:6f:cc:7b:39:9f:71:90:44:3e:4f:32:bd:51:87: fd:0a:dd:65:4c:d6:62:09:35:85:87:c5:29:45:e0: 65:f0:91:b4:01:9b:7a:ef:e3:a7:68:d2:7a:2f:b2: 76:17:80:d9:c9:48:82:6e:94:13:36:77:de:e8:2d: f0:0a:4a:33:fd:28:ff:01:8c:9b:03:ec:19:94:18: 5c:be:c7:91:5c:dc:aa:f3:73:3f:43:bd:cc:e6:81: 66:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:14:44:9B:A2:4E:9F:8C:73:3E:A2:C6:67:2E:26:9A:DE:71:86:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a81f0c7-08a0-34bc-9413-d65abfddc989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c1fe::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:59:58:05:a5:3f:8a:05:90:ac:5d:37:0c:5f:28:c2:46:e5: 94:9c:e8:6a:72:9d:a6:2a:55:c9:6b:f5:46:61:30:3d:0a:75: 02:04:ac:25:b0:c8:8e:ca:5c:ef:ce:25:28:b6:27:8c:75:9f: 62:66:5d:54:90:3f:27:54:fc:f7:3b:33:13:27:97:77:0d:9c: c0:65:ac:6c:8c:d7:e2:fd:01:f3:3e:b8:87:e0:5d:d9:82:32: 01:91:fd:a7:a9:bf:79:b7:06:fb:be:2c:c7:6c:07:a4:c5:c5: 85:fb:57:b5:26:b3:46:e5:ff:48:0d:a9:f4:bb:49:36:c1:28: 50:27:97:fc:1b:f4:62:0a:08:2b:77:4e:59:25:97:72:8d:a1: 9d:7d:22:eb:fd:24:30:40:cf:ce:e7:45:ff:1f:29:e3:c9:a5: d1:63:3c:c5:ce:0f:a6:5d:ad:c1:6b:25:76:50:db:0a:a1:e5: ac:a1:70:d4:6b:72:ed:02:77:3a:dc:20:c7:b0:0b:60:b4:a3: b8:70:f3:68:dc:9f:62:52:a7:36:5f:08:30:bb:ad:8e:80:d3: a5:60:16:e2:0e:bd:3a:66:29:9a:65:60:7a:31:66:f1:ea:40: 4f:fa:73:9f:24:fb:0c:28:a7:45:c1:a5:65:7c:78:b3:5f:6a: 0a:46:cc:b3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuVqpwWaq9zESgtkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZmNkNTRkZTgtYTQ1ZC00MjgwLTlmM2QtNDhiZDkxYTc5OTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxsih1eP1pDZU7BE/d8T+nKezM4DusFr1RO6 39+Eg+vOuAqXRgQdWzGGWmPWvQRQQ9hK0J80w7ZS8oJ9mLr9N+07JuUolwGaaRtb fhJ7VeBPvdVjlAISbNbs977XQxa2vUWypflXO6TbCqNlD7tNtP7MIQIGXXUlhNuW v7Q8imZv2aCiCsB4ZBA1yhCgeniL1CTqcSkNj6es0tuUQNVb13XliEMub8x7OZ9x kEQ+TzK9UYf9Ct1lTNZiCTWFh8UpReBl8JG0AZt67+OnaNJ6L7J2F4DZyUiCbpQT Nnfe6C3wCkoz/Sj/AYybA+wZlBhcvseRXNyq83M/Q73M5oFmYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJIURJuiTp+Mcz6ixmcuJprecYa3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWE4MWYwYzctMDhhMC0z NGJjLTk0MTMtZDY1YWJmZGRjOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcH+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABtZWAWlP4oFkKxdNwxfKMJG5ZSc6GpynaYqVclr9UZhMD0KdQIE rCWwyI7KXO/OJSi2J4x1n2JmXVSQPydU/Pc7MxMnl3cNnMBlrGyM1+L9AfM+uIfg XdmCMgGR/aepv3m3Bvu+LMdsB6TFxYX7V7Ums0bl/0gNqfS7STbBKFAnl/wb9GIK CCt3Tlkll3KNoZ19Iuv9JDBAz87nRf8fKePJpdFjPMXOD6ZdrcFrJXZQ2wqh5ayh cNRrcu0CdzrcIMewC2C0o7hw82jcn2JSpzZfCDC7rY6A06VgFuIOvTpmKZplYHox ZvHqQE/6c58k+wwop0XBpWV8eLNfagpGzLM= -----END CERTIFICATE-----Generated at Tue Oct 21 22:01:11 2025 by rpki-client