$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce510ce8-8976-3ca1-bfc7-ad015032cacc.roa File: ce510ce8-8976-3ca1-bfc7-ad015032cacc.roa (raw, json) Hash identifier: 0qjvd/dJG3uo965Yb7lriD/uhii0CXg88ecbqtFViao= Subject key identifier: 08:2D:CA:C6:55:FB:C5:3B:7F:5D:F8:F2:57:5A:B3:07:EC:DE:C0:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB87AAFF9B4F5CDB1BDE64E Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce510ce8-8976-3ca1-bfc7-ad015032cacc.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:559:85b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:7a:af:f9:b4:f5:cd:b1:bd:e6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=4c627176-ad5c-4ca9-b57d-cf24756bb141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7e:38:8c:f9:fb:5f:a4:c6:4f:36:b2:0e:d2: b7:cf:7b:9f:47:26:cd:31:7e:31:e7:6d:0a:06:0b: 8d:62:6c:e7:8d:3a:9c:8d:4a:0b:ef:e6:e7:85:95: ef:59:c6:4a:e6:c0:85:c8:4a:af:bf:1a:b3:d8:d2: 7a:40:41:d7:05:78:2c:49:e7:03:99:35:93:8d:88: 3a:e4:c2:7d:6c:fd:e2:0b:ee:43:f3:ba:77:d8:13: f4:19:51:c9:ed:4c:8d:46:47:0d:9c:56:ea:ce:2c: 56:f5:b5:2f:79:d7:0b:c5:54:1c:14:78:e3:f8:52: 99:32:fd:93:26:40:68:07:78:d5:a4:6a:ee:8a:0b: 02:61:78:88:18:ee:57:81:f3:42:f1:88:05:d5:6f: 1b:62:6d:1c:1a:65:7c:b9:93:93:f0:5d:f0:c4:a3: 10:5b:25:fe:f2:2d:5f:94:74:d8:75:eb:c2:8a:8b: 9e:fb:a3:1a:21:ac:d4:8e:ff:84:dd:ac:35:41:ce: 20:51:73:53:db:38:20:d4:a6:00:52:45:67:36:9d: f1:0c:c3:cc:fa:7c:9a:95:b1:f7:1d:3f:86:31:9b: 0e:bc:ea:7c:3d:0b:92:c7:a2:d4:d3:c8:8a:72:6b: ff:a9:89:66:bf:70:9a:d0:96:68:0b:2f:b4:b3:b5: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:2D:CA:C6:55:FB:C5:3B:7F:5D:F8:F2:57:5A:B3:07:EC:DE:C0:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ce510ce8-8976-3ca1-bfc7-ad015032cacc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:85b2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:6a:1a:24:43:58:ce:10:72:6f:09:08:3d:da:62:d1:bb:75: 9f:71:60:4f:2f:ac:5d:61:c7:cf:90:be:d5:85:2e:83:dd:40: d2:5b:28:8f:df:ca:3d:5d:37:3e:08:fe:ac:9e:25:11:96:db: 0f:cc:38:94:d1:b5:49:fe:af:3e:45:5c:d3:96:15:3f:23:01: fc:86:04:a6:5d:8c:37:dd:59:54:2d:12:3c:b3:10:cf:b9:88: bd:73:08:e8:eb:61:fa:3f:3d:df:8e:41:51:d0:3d:9c:0d:27: a6:a4:43:a3:b1:f6:66:97:87:98:a2:49:1a:aa:41:31:07:6e: 67:1f:1d:88:a7:36:28:5d:65:09:d8:df:ac:dc:e6:00:79:69: 24:ee:74:f5:68:ff:3c:a1:02:ff:f5:2f:11:58:39:3a:0b:e7: 9a:5f:b2:10:68:90:42:bd:b8:aa:bd:04:ed:f9:51:5f:78:43: c3:90:23:b2:11:8b:35:7a:fd:54:bd:f2:d1:b6:37:ab:f0:7b: 61:94:87:3c:20:10:de:83:4b:9c:d3:2f:a8:ce:34:94:5f:3d: 0e:34:b3:c0:0a:ef:1f:4d:03:d8:cf:0c:77:c7:17:e3:6c:6f: 5d:09:aa:66:f2:f7:39:6c:87:1f:99:81:e5:27:d4:20:cf:22: 7c:3c:46:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uHqv+bT1zbG95k4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NGM2MjcxNzYtYWQ1Yy00Y2E5LWI1N2QtY2YyNDc1NmJiMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon44jPn7X6TGTzayDtK3z3ufRybNMX4x520K BguNYmznjTqcjUoL7+bnhZXvWcZK5sCFyEqvvxqz2NJ6QEHXBXgsSecDmTWTjYg6 5MJ9bP3iC+5D87p32BP0GVHJ7UyNRkcNnFbqzixW9bUvedcLxVQcFHjj+FKZMv2T JkBoB3jVpGruigsCYXiIGO5XgfNC8YgF1W8bYm0cGmV8uZOT8F3wxKMQWyX+8i1f lHTYdevCioue+6MaIazUjv+E3aw1Qc4gUXNT2zgg1KYAUkVnNp3xDMPM+nyalbH3 HT+GMZsOvOp8PQuSx6LU08iKcmv/qYlmv3Ca0JZoCy+0s7XVywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAgtysZV+8U7f1348ldaswfs3sCPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2U1MTBjZTgtODk3Ni0z Y2ExLWJmYzctYWQwMTUwMzJjYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYWy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ5qGiRDWM4Qcm8JCD3aYtG7dZ9xYE8vrF1hx8+QvtWFLoPdQNJb KI/fyj1dNz4I/qyeJRGW2w/MOJTRtUn+rz5FXNOWFT8jAfyGBKZdjDfdWVQtEjyz EM+5iL1zCOjrYfo/Pd+OQVHQPZwNJ6akQ6Ox9maXh5iiSRqqQTEHbmcfHYinNihd ZQnY36zc5gB5aSTudPVo/zyhAv/1LxFYOToL55pfshBokEK9uKq9BO35UV94Q8OQ I7IRizV6/VS98tG2N6vwe2GUhzwgEN6DS5zTL6jONJRfPQ40s8AK7x9NA9jPDHfH F+Nsb10Jqmby9zlshx+ZgeUn1CDPInw8RoU= -----END CERTIFICATE-----Generated at Tue Oct 21 19:29:18 2025 by rpki-client