$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d251498f-c2f8-3ab8-8106-1a4524759748.roa File: d251498f-c2f8-3ab8-8106-1a4524759748.roa (raw, json) Hash identifier: CoUL+zl+4giPgHVK1WCJaRAtD9zYWslhlh6ihxL7zok= Subject key identifier: 8B:F2:4B:B3:22:02:CE:51:CA:75:EF:BE:92:18:80:8D:25:B3:84:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7E73C6AB65981C421F3C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d251498f-c2f8-3ab8-8106-1a4524759748.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:87e9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:e7:3c:6a:b6:59:81:c4:21:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=b9de925d-aa96-4755-8ec1-7307b636b184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c5:0e:ab:00:ad:65:a4:26:06:29:c0:a0:79: cb:59:68:c9:a7:7f:29:03:15:3a:ff:df:89:0e:6d: 6f:8e:27:c6:76:68:21:7f:4f:88:86:ee:e0:95:77: b6:46:e7:8e:35:1f:1d:66:d5:1d:58:93:1f:a8:8e: 6b:ab:be:24:59:01:9d:5d:b5:a0:ce:38:32:a1:a5: c9:46:7a:2a:b6:39:9a:9d:08:99:70:0b:5b:be:2c: 24:34:5d:d6:9c:24:d8:05:a6:59:8d:21:7e:ac:b1: 0e:77:aa:5a:af:25:59:d7:7e:d5:92:14:60:82:ff: 6b:ec:a5:dd:22:0b:4e:08:8e:42:39:a3:30:c1:26: c2:ce:3e:b0:db:42:82:12:8e:5e:dd:2f:33:63:89: 48:7d:97:69:9f:ea:69:67:a9:b3:45:3d:0c:5d:63: e8:70:f5:80:96:37:9a:53:29:96:3b:c4:e4:aa:44: 53:c5:61:c2:4a:3c:21:0b:67:19:dc:14:1b:59:db: c2:eb:85:0f:7a:fd:32:21:11:b7:b1:6b:d5:5e:a3: a3:3d:37:e2:b8:39:42:6b:8c:db:ed:fe:b4:26:c3: b6:e8:4b:e1:58:c7:91:17:a9:ed:c5:98:85:7f:8c: 97:63:63:f9:62:47:a6:b2:25:d4:56:6c:c7:e6:47: 9b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F2:4B:B3:22:02:CE:51:CA:75:EF:BE:92:18:80:8D:25:B3:84:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d251498f-c2f8-3ab8-8106-1a4524759748.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87e9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:6e:b1:eb:04:92:92:6b:14:71:97:6f:66:3c:df:c3:10:b6: 1a:3c:e6:67:11:81:94:e9:b2:cc:73:ac:3e:ac:2c:87:1f:ea: d5:9d:d7:7b:aa:e9:9f:5d:c7:a5:de:07:b3:50:26:77:d9:42: 49:91:0a:0a:29:11:59:2b:25:7c:70:48:3b:cc:d6:af:8e:06: 20:e9:41:64:6e:d6:b5:43:41:ee:9b:09:99:92:b7:8d:a6:f4: 0f:ef:8d:e6:21:67:76:ff:5d:3e:23:01:30:f2:47:6d:4b:6a: 58:b9:a3:c2:09:23:62:aa:41:39:d2:34:85:d5:f6:b4:99:54: e2:f5:fb:dd:a6:1c:23:8f:a6:64:6e:4f:da:30:94:05:68:66: 82:35:95:ad:b9:32:3f:30:43:a4:7a:0f:05:ab:ba:12:f5:6d: 64:4f:f1:79:28:36:b1:24:95:d4:04:20:a6:6b:82:d9:b3:0e: 67:0c:f7:20:41:d9:9d:30:61:49:3d:f4:ce:b3:74:20:ed:f8: 96:4b:bb:e2:b5:e6:85:2d:75:9c:11:e0:fc:5b:7b:65:23:d4: 23:d2:2b:55:37:1c:4b:3f:5b:8b:8a:c2:7f:e6:c1:dd:e5:e5: de:38:da:16:06:66:37:a8:87:9c:81:ad:6b:2f:50:2c:b2:8b: 8b:0f:f8:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t+c8arZZgcQh88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YjlkZTkyNWQtYWE5Ni00NzU1LThlYzEtNzMwN2I2MzZiMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisUOqwCtZaQmBinAoHnLWWjJp38pAxU6/9+J Dm1vjifGdmghf0+Ihu7glXe2RueONR8dZtUdWJMfqI5rq74kWQGdXbWgzjgyoaXJ RnoqtjmanQiZcAtbviwkNF3WnCTYBaZZjSF+rLEOd6paryVZ137VkhRggv9r7KXd IgtOCI5COaMwwSbCzj6w20KCEo5e3S8zY4lIfZdpn+ppZ6mzRT0MXWPocPWAljea UymWO8TkqkRTxWHCSjwhC2cZ3BQbWdvC64UPev0yIRG3sWvVXqOjPTfiuDlCa4zb 7f60JsO26EvhWMeRF6ntxZiFf4yXY2P5YkemsiXUVmzH5keb9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIvyS7MiAs5RynXvvpIYgI0ls4SzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDI1MTQ5OGYtYzJmOC0z YWI4LTgxMDYtMWE0NTI0NzU5NzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYfp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZusesEkpJrFHGXb2Y838MQtho85mcRgZTpssxzrD6sLIcf6tWd 13uq6Z9dx6XeB7NQJnfZQkmRCgopEVkrJXxwSDvM1q+OBiDpQWRu1rVDQe6bCZmS t42m9A/vjeYhZ3b/XT4jATDyR21Lali5o8IJI2KqQTnSNIXV9rSZVOL1+92mHCOP pmRuT9owlAVoZoI1la25Mj8wQ6R6DwWruhL1bWRP8XkoNrEkldQEIKZrgtmzDmcM 9yBB2Z0wYUk99M6zdCDt+JZLu+K15oUtdZwR4Pxbe2Uj1CPSK1U3HEs/W4uKwn/m wd3l5d442hYGZjeoh5yBrWsvUCyyi4sP+N0= -----END CERTIFICATE-----Generated at Tue Oct 21 21:45:40 2025 by rpki-client