$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d7ad2ec-c3f6-3f52-a602-f1e525c1efd5.roa File: 0d7ad2ec-c3f6-3f52-a602-f1e525c1efd5.roa (raw, json) Hash identifier: 4dViOVhMgL1Oe4SVIC5yjKcu74rGGRxyZSp7iacfkIM= Subject key identifier: 2A:AC:7F:E0:E0:56:BD:D2:D6:8B:2A:9B:2E:3C:A3:EE:91:E7:4D:F1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AECC1C5EB6B860E503220BC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d7ad2ec-c3f6-3f52-a602-f1e525c1efd5.roa Signing time: Thu 21 Aug 2025 01:00:33 +0000 ROA not before: Thu 21 Aug 2025 01:00:33 +0000 ROA not after: Wed 19 Nov 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:55d:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:c1:c5:eb:6b:86:0e:50:32:20:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 21 01:00:33 2025 GMT Not After : Nov 19 02:00:33 2025 GMT Subject: CN=3d3bbd07-dae3-47a8-ad46-91e34eec97d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:be:6e:9a:27:e9:6d:a0:23:cc:1a:2c:5d:72: f7:c1:15:65:a3:95:7f:49:4e:bf:9f:44:49:b6:b2: 70:66:1a:3a:d9:74:97:06:0c:02:d9:98:57:bd:cf: cc:57:25:5d:d2:b1:91:65:cd:d5:28:c7:bd:4d:bc: 3c:c9:7b:d2:95:c3:4d:65:5d:0d:a5:5c:45:97:1a: 0b:c7:a6:68:47:2c:14:ad:89:b5:dc:e5:00:97:90: 97:6c:75:7b:31:43:4a:91:7b:4a:ee:ba:54:7c:97: 29:51:4d:29:9f:df:11:e3:4e:03:d0:ce:26:68:3e: 1f:6f:50:ae:08:7d:28:65:9f:5b:bd:27:b6:b0:c1: da:70:e0:ad:eb:e0:21:a0:bb:1c:bc:06:02:7d:0c: 42:d8:99:c8:60:b2:60:ef:a7:9b:8e:f2:7e:9d:83: 3b:7d:83:74:71:7f:0c:55:58:12:a3:2e:3a:b6:dc: 34:df:dc:71:7c:b5:f8:4d:ef:5a:c3:3a:58:c7:ae: ba:09:64:b0:82:3c:6e:3a:fb:5e:27:8e:56:b0:0d: 0f:b8:1e:33:97:a6:d7:b2:38:13:87:36:4c:c5:66: 14:ae:69:88:5b:12:8e:26:0d:b7:ad:1d:b1:2c:1f: 84:f9:01:a9:bd:be:11:88:ea:0b:c8:3a:69:32:04: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AC:7F:E0:E0:56:BD:D2:D6:8B:2A:9B:2E:3C:A3:EE:91:E7:4D:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d7ad2ec-c3f6-3f52-a602-f1e525c1efd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:55d:d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a0:d4:e3:93:dc:d3:a2:a9:d3:9c:ff:44:f3:f2:3a:1f:71: a7:6d:6c:7e:a9:b4:f4:3b:e8:70:f5:1f:30:a8:69:d8:70:45: 39:c0:3a:99:24:9d:3d:f0:93:bd:00:1b:70:c8:ec:69:91:23: 9e:d2:f4:e4:e6:34:5a:d2:89:d6:43:e4:3c:7a:2d:06:c2:75: 89:60:cb:5b:da:dc:66:82:79:9d:02:70:82:83:9d:99:41:35: 5c:66:c0:ef:1f:29:3c:03:ff:ae:41:ac:d6:53:0a:c1:43:e8: c1:65:ee:52:9d:32:c7:0f:0a:99:36:a2:d0:9d:c4:84:1c:f3: 97:b1:80:41:20:55:30:13:84:97:df:e7:d9:09:09:6d:19:97: 88:a7:35:90:5c:e7:01:03:7d:c0:c6:7b:f1:8c:36:1a:1c:92: 0b:46:89:10:82:1b:71:d9:93:10:7b:57:9e:72:94:14:73:cd: d6:4c:51:ad:cf:a9:c5:a6:1a:3c:20:2f:84:d2:cd:be:b1:d6: 82:ae:a8:16:14:15:ef:18:17:5b:6b:c5:68:05:2c:44:77:52: 04:d2:b2:7c:9b:c6:0f:31:c4:a8:85:0f:7b:34:ab:dd:36:64: fa:63:28:23:bf:4f:8d:04:4a:c1:2e:f6:d2:76:7e:36:ed:29: 74:6e:c7:7e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErswcXra4YOUDIgvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk M2QzYmJkMDctZGFlMy00N2E4LWFkNDYtOTFlMzRlZWM5N2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL5umifpbaAjzBosXXL3wRVlo5V/SU6/n0RJ trJwZho62XSXBgwC2ZhXvc/MVyVd0rGRZc3VKMe9Tbw8yXvSlcNNZV0NpVxFlxoL x6ZoRywUrYm13OUAl5CXbHV7MUNKkXtK7rpUfJcpUU0pn98R404D0M4maD4fb1Cu CH0oZZ9bvSe2sMHacOCt6+AhoLscvAYCfQxC2JnIYLJg76ebjvJ+nYM7fYN0cX8M VVgSoy46ttw039xxfLX4Te9awzpYx666CWSwgjxuOvteJ45WsA0PuB4zl6bXsjgT hzZMxWYUrmmIWxKOJg23rR2xLB+E+QGpvb4RiOoLyDppMgQCswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCqsf+DgVr3S1osqmy48o+6R503xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGQ3YWQyZWMtYzNmNi0z ZjUyLWE2MDItZjFlNTI1YzFlZmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFXQAN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKig1OOT3NOiqdOc/0Tz8jofcadtbH6ptPQ76HD1HzCoadhwRTnA OpkknT3wk70AG3DI7GmRI57S9OTmNFrSidZD5Dx6LQbCdYlgy1va3GaCeZ0CcIKD nZlBNVxmwO8fKTwD/65BrNZTCsFD6MFl7lKdMscPCpk2otCdxIQc85exgEEgVTAT hJff59kJCW0Zl4inNZBc5wEDfcDGe/GMNhockgtGiRCCG3HZkxB7V55ylBRzzdZM Ua3PqcWmGjwgL4TSzb6x1oKuqBYUFe8YF1trxWgFLER3UgTSsnybxg8xxKiFD3s0 q902ZPpjKCO/T40ESsEu9tJ2fjbtKXRux34= -----END CERTIFICATE-----Generated at Sun Aug 24 09:45:46 2025 by rpki-client