$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1a879f4-2036-3648-ae99-3bb289cf8051.roa File: c1a879f4-2036-3648-ae99-3bb289cf8051.roa (raw, json) Hash identifier: lLAtqzvVitljQEFlshtcDD37YhamUgXMakTEdqO2NqM= Subject key identifier: 56:D0:81:5F:F4:F0:4C:04:67:84:AE:3D:53:B3:A0:04:32:9B:DB:E0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB873B283BAED9E1F38D360 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1a879f4-2036-3648-ae99-3bb289cf8051.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:559:25e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:73:b2:83:ba:ed:9e:1f:38:d3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=5abc117c-88c7-4e57-8616-6a4a8cf5f86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:34:be:2d:2e:0b:ae:d1:69:69:e4:f9:01:73: dd:1c:74:d6:7a:82:d9:02:a2:83:2d:b2:ca:fb:bc: 99:f8:b2:b5:35:51:1e:90:ac:c9:aa:7a:72:34:15: c1:d4:8a:38:37:69:d0:8a:66:64:ae:c1:d7:82:2e: 66:b2:c1:93:92:72:28:a6:3d:8f:f4:3d:fa:9e:40: 13:72:35:3e:1d:5c:b2:01:ef:56:0c:35:93:76:2f: 7e:ea:42:91:08:8d:f8:4e:29:03:81:73:d8:11:a7: 37:04:71:cd:90:27:10:42:a8:16:f6:19:ea:44:4d: 2a:b2:89:4e:82:c2:eb:22:cf:15:dd:85:8f:74:ad: de:4a:96:9a:57:d9:c4:a9:57:5e:87:87:1b:03:55: 5d:0f:8c:28:c0:a6:02:17:eb:c6:e6:38:da:b8:9d: 47:48:2d:0d:2b:61:47:f4:8a:02:d6:ae:23:57:bc: 51:2e:28:44:30:30:e8:90:a2:e9:70:a1:a3:e5:e9: c8:ed:89:7c:f8:73:07:5d:57:e7:63:20:fe:82:f0: 7a:95:3a:9d:1a:36:6f:df:ea:52:58:1a:8b:5f:d4: 29:ce:08:a4:cf:0d:93:1e:c3:94:8f:53:bd:32:53: 70:20:12:b4:18:7a:4d:8a:89:91:b4:f7:51:49:22: 6e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:D0:81:5F:F4:F0:4C:04:67:84:AE:3D:53:B3:A0:04:32:9B:DB:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1a879f4-2036-3648-ae99-3bb289cf8051.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:25e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9d:cf:93:f6:ed:8d:53:b7:6f:5f:24:1a:6f:f6:e9:b2:be: 48:c1:2b:78:1c:69:b5:ac:3b:95:e2:17:94:ac:0c:90:75:2a: a0:e8:be:17:98:16:90:9f:0a:ee:98:74:dc:f6:0e:55:6d:96: 39:6b:aa:e7:b0:70:eb:56:94:68:53:fd:fa:48:9d:e6:40:dd: 0c:51:b3:1a:b4:43:44:47:dd:54:a9:9e:b1:68:1d:7f:15:74: 85:9d:c1:fc:60:29:16:9f:b3:37:8d:21:13:95:59:4a:a8:aa: 03:39:da:d8:e0:e5:43:8f:29:23:92:46:ac:79:2f:26:d7:33: ef:c0:1e:e1:7a:18:c3:2f:8f:a3:ae:80:10:ec:3d:8e:ac:e8: 12:8e:8a:81:c4:73:99:0a:b6:08:a9:c3:4d:a6:03:b0:fa:29: 05:4a:04:bd:46:2d:58:b8:d8:d3:e2:8d:28:fe:85:a6:24:75: 27:b8:0f:1a:65:8e:fb:33:98:34:91:96:2d:c7:c1:85:e8:11: a2:c9:22:08:b5:0b:22:64:71:c0:37:8b:97:df:cd:d5:8e:88: ef:a6:a6:c2:48:a4:96:6a:66:54:9d:57:9b:91:4d:5e:b4:42: 7c:64:c3:18:f6:6a:3e:6a:9a:0e:2d:6c:f5:dc:23:15:9a:2f: f4:22:01:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uHOyg7rtnh8402AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NWFiYzExN2MtODhjNy00ZTU3LTg2MTYtNmE0YThjZjVmODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijS+LS4LrtFpaeT5AXPdHHTWeoLZAqKDLbLK +7yZ+LK1NVEekKzJqnpyNBXB1Io4N2nQimZkrsHXgi5mssGTknIopj2P9D36nkAT cjU+HVyyAe9WDDWTdi9+6kKRCI34TikDgXPYEac3BHHNkCcQQqgW9hnqRE0qsolO gsLrIs8V3YWPdK3eSpaaV9nEqVdeh4cbA1VdD4wowKYCF+vG5jjauJ1HSC0NK2FH 9IoC1q4jV7xRLihEMDDokKLpcKGj5enI7Yl8+HMHXVfnYyD+gvB6lTqdGjZv3+pS WBqLX9Qpzgikzw2THsOUj1O9MlNwIBK0GHpNiomRtPdRSSJuLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFbQgV/08EwEZ4SuPVOzoAQym9vgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzFhODc5ZjQtMjAzNi0z NjQ4LWFlOTktM2JiMjg5Y2Y4MDUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQJe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD+dz5P27Y1Tt29fJBpv9umyvkjBK3gcabWsO5XiF5SsDJB1KqDo vheYFpCfCu6YdNz2DlVtljlrquewcOtWlGhT/fpIneZA3QxRsxq0Q0RH3VSpnrFo HX8VdIWdwfxgKRafszeNIROVWUqoqgM52tjg5UOPKSOSRqx5LybXM+/AHuF6GMMv j6OugBDsPY6s6BKOioHEc5kKtgipw02mA7D6KQVKBL1GLVi42NPijSj+haYkdSe4 DxpljvszmDSRli3HwYXoEaLJIgi1CyJkccA3i5ffzdWOiO+mpsJIpJZqZlSdV5uR TV60Qnxkwxj2aj5qmg4tbPXcIxWaL/QiAR0= -----END CERTIFICATE-----Generated at Tue Oct 21 19:28:05 2025 by rpki-client