$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11ea575b-9027-310e-96ea-a698d0a6027c.roa File: 11ea575b-9027-310e-96ea-a698d0a6027c.roa (raw, json) Hash identifier: QGLsALZys+oY5XHXlMLXoa5h/yVYGqKhc1GWGwjcAFc= Subject key identifier: B4:6D:BD:0C:AF:2E:BA:E0:3E:97:88:4B:02:14:B5:D9:6C:41:C8:A1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB78037BBB234996415F1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11ea575b-9027-310e-96ea-a698d0a6027c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 21508 IP address blocks: 2001:559:3b9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:80:37:bb:b2:34:99:64:15:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=597c4995-c0e8-4132-92aa-5b28d2beca45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:03:c7:1a:72:0e:55:57:0c:fa:11:a2:26:17: f0:ae:01:c4:b5:95:ec:13:aa:25:70:b6:f8:39:9f: 11:da:20:d8:00:32:e7:c2:d9:b9:3e:94:79:a9:05: 0a:8f:6a:9d:bd:f9:90:00:4a:2b:13:1f:1a:14:f2: bf:9f:a8:dc:40:68:06:a8:04:53:16:b2:ab:9b:8e: e5:90:ef:38:44:88:aa:26:d1:88:74:09:08:b1:79: 34:16:a4:40:9d:63:ff:c6:96:f3:81:20:5c:e9:d1: c6:ee:ca:b5:3a:e0:ca:78:11:f9:e9:b9:aa:14:b0: 4d:88:aa:55:75:a6:f3:4f:02:e2:a7:01:b5:f9:7b: 07:2f:10:d1:8e:b1:74:0e:b2:45:7c:aa:3d:b6:fb: c5:67:31:c1:25:34:65:0c:96:fa:c6:10:71:5a:35: 1a:af:db:fa:3a:cb:5c:f0:f4:82:59:da:db:41:70: 7e:aa:71:53:95:3c:75:ec:1e:18:76:27:dc:c1:31: 72:63:8e:6b:2d:5e:b2:8f:fd:6e:a5:15:17:f4:4d: 79:30:91:66:e9:90:1c:12:39:24:63:b9:d4:05:9b: 22:23:f0:be:be:d3:a7:ce:97:57:db:62:4c:2e:24: f0:17:42:6f:28:e1:f0:60:8e:ec:30:cc:bc:1b:1b: 87:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:6D:BD:0C:AF:2E:BA:E0:3E:97:88:4B:02:14:B5:D9:6C:41:C8:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11ea575b-9027-310e-96ea-a698d0a6027c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:3b9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:43:45:15:45:48:ab:d3:7f:dc:53:33:70:91:02:6d:3f:8c: 4f:47:61:af:8b:03:7b:7a:70:28:7a:d5:0c:39:63:8b:ca:ed: b3:a1:f1:6c:f1:01:21:3d:45:0c:ab:bc:d1:47:02:fc:ee:00: 01:33:d8:c5:07:1b:22:98:f7:e8:8a:9e:69:f9:47:5e:9f:3c: 3c:3c:33:60:b7:8b:4f:a4:88:63:e6:e9:68:d6:29:ed:8e:4e: 7c:05:72:c7:ab:19:24:45:7b:68:84:2a:99:e7:99:f0:86:a0: 2a:9f:32:fe:30:08:48:05:2d:50:47:42:8f:67:e6:dc:7c:c3: 5f:4a:8e:58:03:95:62:85:d1:3f:c9:84:6d:66:c1:8a:b4:e4: da:fd:e3:1b:a2:0b:ee:a8:ed:be:89:13:6c:25:18:21:48:de: 32:91:aa:a3:32:e4:35:23:ae:9a:f1:01:cc:1d:c6:bd:33:54: db:b0:53:76:0a:67:79:11:89:8f:5a:93:0b:46:2b:45:f0:1e: da:d1:3c:09:c5:83:c9:cc:66:f6:82:66:86:89:24:b8:b8:d6: fb:69:0d:6c:0d:47:57:9a:53:29:72:b0:0f:35:0e:01:22:98: 3a:cc:7d:99:45:08:da:6a:98:01:9d:78:92:66:84:e3:1e:53: ea:f2:ce:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t4A3u7I0mWQV8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NTk3YzQ5OTUtYzBlOC00MTMyLTkyYWEtNWIyOGQyYmVjYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowPHGnIOVVcM+hGiJhfwrgHEtZXsE6olcLb4 OZ8R2iDYADLnwtm5PpR5qQUKj2qdvfmQAEorEx8aFPK/n6jcQGgGqARTFrKrm47l kO84RIiqJtGIdAkIsXk0FqRAnWP/xpbzgSBc6dHG7sq1OuDKeBH56bmqFLBNiKpV dabzTwLipwG1+XsHLxDRjrF0DrJFfKo9tvvFZzHBJTRlDJb6xhBxWjUar9v6Ostc 8PSCWdrbQXB+qnFTlTx17B4YdifcwTFyY45rLV6yj/1upRUX9E15MJFm6ZAcEjkk Y7nUBZsiI/C+vtOnzpdX22JMLiTwF0JvKOHwYI7sMMy8GxuH/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLRtvQyvLrrgPpeISwIUtdlsQcihMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTFlYTU3NWItOTAyNy0z MTBlLTk2ZWEtYTY5OGQwYTYwMjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQO5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKlDRRVFSKvTf9xTM3CRAm0/jE9HYa+LA3t6cCh61Qw5Y4vK7bOh 8WzxASE9RQyrvNFHAvzuAAEz2MUHGyKY9+iKnmn5R16fPDw8M2C3i0+kiGPm6WjW Ke2OTnwFcserGSRFe2iEKpnnmfCGoCqfMv4wCEgFLVBHQo9n5tx8w19KjlgDlWKF 0T/JhG1mwYq05Nr94xuiC+6o7b6JE2wlGCFI3jKRqqMy5DUjrprxAcwdxr0zVNuw U3YKZ3kRiY9akwtGK0XwHtrRPAnFg8nMZvaCZoaJJLi41vtpDWwNR1eaUylysA81 DgEimDrMfZlFCNpqmAGdeJJmhOMeU+ryznY= -----END CERTIFICATE-----Generated at Tue Oct 21 03:57:01 2025 by rpki-client