$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1337f17c-a4d0-3e4f-962c-f5f3796f60b8.roa File: 1337f17c-a4d0-3e4f-962c-f5f3796f60b8.roa (raw, json) Hash identifier: V/IZtprIkl8KoLvBV8Vzrm4ZdFFqf35wuFLe7wBbdHA= Subject key identifier: 94:4F:EB:6E:46:18:62:5D:CA:2C:62:5E:41:95:2B:FA:D1:CD:EC:E6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB97A456DEC2C9188B9B880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1337f17c-a4d0-3e4f-962c-f5f3796f60b8.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:782::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:7a:45:6d:ec:2c:91:88:b9:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=ca1f1737-15eb-4781-b1c8-49c6910844fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:3c:86:bd:6f:c8:ff:fb:37:78:a1:ce:2b: 5a:c7:84:2e:01:44:fd:41:78:ab:3f:22:81:e0:2c: 93:9d:43:c2:9a:f8:7c:e2:0d:07:60:2f:b8:2b:29: e2:d0:49:0c:18:c7:92:89:17:49:31:9a:74:f4:9d: e4:7a:cf:4c:95:d9:3b:2e:e0:ea:77:7a:ee:21:41: b3:7e:91:ea:74:f2:03:b6:9d:89:8b:ca:0e:b9:c8: 4d:f3:d3:20:41:b8:8c:7c:40:f4:ba:5e:18:93:d9: 2b:12:6e:ec:92:13:c6:90:57:da:2f:35:6f:56:45: 37:6a:ba:ea:5e:02:54:12:c3:37:86:80:55:93:97: 8e:96:19:d2:c1:6e:a2:79:47:83:d2:84:4a:92:1a: f1:10:39:68:a9:e2:02:7c:7f:1d:f4:a7:f9:e4:b1: 7d:12:9c:36:02:3a:ab:4a:e4:54:f5:a2:86:d7:25: 65:16:5b:05:eb:7f:5d:e1:05:e1:a1:cd:c6:45:c8: 20:f7:36:c5:57:f3:26:74:a6:e9:7e:59:2d:b4:6a: 78:5d:b1:e0:35:00:b0:14:39:8f:89:d1:0f:a0:a6: c5:13:8a:c4:c3:1f:b0:49:e2:07:90:2f:b7:92:f2: f0:49:b9:47:a9:d3:ec:80:37:d5:05:45:1c:67:92: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4F:EB:6E:46:18:62:5D:CA:2C:62:5E:41:95:2B:FA:D1:CD:EC:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1337f17c-a4d0-3e4f-962c-f5f3796f60b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:782::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:81:44:90:80:81:00:87:8f:39:c8:0b:e5:ee:e6:0c:14:32: 74:fb:ac:2e:55:44:11:9e:fe:1d:68:b5:c8:44:3c:aa:f0:21: 72:36:42:f7:52:27:bd:7b:ab:7e:35:86:59:e8:a4:c0:f9:42: 90:d0:5d:eb:18:cf:ab:72:a3:12:e3:7d:45:e1:a7:48:e3:40: b0:a9:dc:d3:f3:2f:25:9e:6e:fc:3e:f0:74:97:9d:83:50:84: 6e:c3:5c:f2:34:fb:12:93:a7:90:2b:43:31:d0:d7:e4:3e:8f: cc:6e:81:5e:82:d3:82:b2:1f:a6:ec:0b:fb:62:96:d5:61:70: 78:62:d1:e2:45:05:7c:09:40:02:97:39:9c:7a:54:ac:f8:1d: 66:de:fd:5a:ea:e3:29:95:c3:9b:cd:d3:69:8f:8a:5c:07:87: df:51:32:86:c6:c7:11:a0:84:06:89:e8:b2:7d:b0:4c:f2:2d: 0d:2b:90:41:9b:05:77:e8:29:19:50:22:19:68:db:a6:c6:17: 6e:cc:58:b7:ff:29:be:b1:b1:ed:aa:ba:5a:83:62:34:b1:79: af:ca:7e:8f:38:35:48:ef:14:f0:fe:c1:ed:8d:cc:60:02:0d: df:47:64:07:31:34:2b:54:c5:a3:27:b1:67:b4:91:79:df:77: d0:d5:e0:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uXpFbewskYi5uIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Y2ExZjE3MzctMTVlYi00NzgxLWIxYzgtNDljNjkxMDg0NGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN08hr1vyP/7N3ihzitax4QuAUT9QXirPyKB 4CyTnUPCmvh84g0HYC+4Kyni0EkMGMeSiRdJMZp09J3kes9Mldk7LuDqd3ruIUGz fpHqdPIDtp2Ji8oOuchN89MgQbiMfED0ul4Yk9krEm7skhPGkFfaLzVvVkU3arrq XgJUEsM3hoBVk5eOlhnSwW6ieUeD0oRKkhrxEDloqeICfH8d9Kf55LF9Epw2Ajqr SuRU9aKG1yVlFlsF639d4QXhoc3GRcgg9zbFV/MmdKbpflkttGp4XbHgNQCwFDmP idEPoKbFE4rEwx+wSeIHkC+3kvLwSblHqdPsgDfVBUUcZ5K4uQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJRP625GGGJdyixiXkGVK/rRzezmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTMzN2YxN2MtYTRkMC0z ZTRmLTk2MmMtZjVmMzc5NmY2MGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQeC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeBRJCAgQCHjznIC+Xu5gwUMnT7rC5VRBGe/h1otchEPKrwIXI2 QvdSJ717q341hlnopMD5QpDQXesYz6tyoxLjfUXhp0jjQLCp3NPzLyWebvw+8HSX nYNQhG7DXPI0+xKTp5ArQzHQ1+Q+j8xugV6C04KyH6bsC/tiltVhcHhi0eJFBXwJ QAKXOZx6VKz4HWbe/Vrq4ymVw5vN02mPilwHh99RMobGxxGghAaJ6LJ9sEzyLQ0r kEGbBXfoKRlQIhlo26bGF27MWLf/Kb6xse2qulqDYjSxea/Kfo84NUjvFPD+we2N zGACDd9HZAcxNCtUxaMnsWe0kXnfd9DV4II= -----END CERTIFICATE-----Generated at Mon Oct 20 09:55:36 2025 by rpki-client