$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d20fa2-b406-32e1-96fb-d905b3e707a1.roa File: 23d20fa2-b406-32e1-96fb-d905b3e707a1.roa (raw, json) Hash identifier: aoOSKT2YnW1lwxxIkibciucqP5iDGrXcmSctxG1kxbQ= Subject key identifier: EC:56:1E:84:B3:F0:EB:9E:84:B0:77:C5:44:35:75:1A:91:61:D9:AD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7EDBB9291D9B587D8B500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d20fa2-b406-32e1-96fb-d905b3e707a1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:e008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:ed:bb:92:91:d9:b5:87:d8:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=89b0fdeb-a9d0-4218-a220-a014f7b08c78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:94:f4:5e:38:2f:3a:38:8e:39:77:1a:63: ec:9c:36:e6:7d:ec:fe:fe:f5:b4:26:6e:ef:a5:10: 88:14:0d:75:18:de:4f:19:8e:87:3d:9f:4c:a8:54: df:11:64:41:b9:9d:e5:48:54:59:86:31:2f:70:d4: ad:4b:4d:f9:f7:89:1a:2c:ba:2e:d7:72:81:78:eb: 25:af:b8:90:7c:02:9e:03:d0:f9:9a:f1:fa:44:06: 35:45:e2:96:be:90:0d:39:9d:9c:6d:7d:69:89:cb: 93:8b:37:a4:4d:5f:9e:90:f4:e6:50:26:77:65:c8: 06:db:a1:ac:15:d4:94:90:03:5f:25:bc:8b:08:c0: d5:1b:c7:66:8f:3b:d9:fb:bf:2f:9b:ea:78:b2:58: 86:40:74:06:9e:d4:99:97:75:a3:d4:f9:71:ff:47: 57:d0:5b:c8:57:99:25:ee:ad:ea:4e:a9:62:27:ac: a7:cc:0e:cf:e5:40:f5:98:e3:59:95:dc:29:4f:f9: 80:29:8d:96:84:1f:b4:02:df:95:96:c3:96:88:cc: b2:60:d8:15:4f:c5:a5:29:5a:aa:ea:90:6c:40:43: 72:99:bc:6b:85:b4:c1:93:d3:65:92:5f:9f:13:4d: d9:30:95:fa:01:03:d7:bd:b1:d3:e0:15:0c:7b:47: 4c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:56:1E:84:B3:F0:EB:9E:84:B0:77:C5:44:35:75:1A:91:61:D9:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23d20fa2-b406-32e1-96fb-d905b3e707a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:e008::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1f:e9:1d:8c:72:73:90:92:4c:3c:cd:a8:61:a3:08:b9:de: a5:3a:72:1d:e7:1b:d1:91:41:52:ff:90:41:49:9f:43:c6:09: e5:88:1b:7c:d1:87:dc:91:09:8b:b2:de:e3:73:90:20:c3:c4: 69:a6:fb:33:10:bd:8c:a3:cb:08:42:70:97:05:79:4a:01:e6: e5:d8:10:47:87:5c:70:93:d1:41:c1:12:50:b1:c3:0a:88:77: 5c:9d:44:1f:e2:5a:77:93:6b:14:6c:95:31:d8:f5:97:e3:68: a7:e2:fd:7b:0b:05:dc:4f:8e:03:4a:c5:e2:ce:4a:87:d0:1f: 0f:a7:37:c6:e7:bb:a9:c2:34:79:bb:12:69:af:5d:c8:2d:34: 92:70:7b:be:ee:01:a7:50:d5:3a:c0:89:96:8f:fd:e5:b7:a5: e2:86:36:8a:ee:02:f5:2a:97:9e:80:56:04:b1:71:ac:ef:37: c4:c5:f0:5b:ea:52:cb:6e:2a:5e:db:17:97:8c:6c:c2:c8:e4: ea:41:48:45:0b:6d:f0:0e:57:15:85:04:a5:28:88:b3:de:c6: 83:32:c5:ff:57:18:4b:f3:b3:20:e1:8a:dd:cf:93:66:76:23: ea:6b:af:1f:b3:c5:32:32:5f:a6:a1:7a:d4:63:51:c6:26:09: e4:4f:a8:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t+27kpHZtYfYtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODliMGZkZWItYTlkMC00MjE4LWEyMjAtYTAxNGY3YjA4Yzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOSU9F44Lzo4jjl3GmPsnDbmfez+/vW0Jm7v pRCIFA11GN5PGY6HPZ9MqFTfEWRBuZ3lSFRZhjEvcNStS03594kaLLou13KBeOsl r7iQfAKeA9D5mvH6RAY1ReKWvpANOZ2cbX1picuTizekTV+ekPTmUCZ3ZcgG26Gs FdSUkANfJbyLCMDVG8dmjzvZ+78vm+p4sliGQHQGntSZl3Wj1Plx/0dX0FvIV5kl 7q3qTqliJ6ynzA7P5UD1mONZldwpT/mAKY2WhB+0At+VlsOWiMyyYNgVT8WlKVqq 6pBsQENymbxrhbTBk9Nlkl+fE03ZMJX6AQPXvbHT4BUMe0dMgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOxWHoSz8OuehLB3xUQ1dRqRYdmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjNkMjBmYTItYjQwNi0z MmUxLTk2ZmItZDkwNWIzZTcwN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeAI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABkf6R2McnOQkkw8zahhowi53qU6ch3nG9GRQVL/kEFJn0PGCeWI G3zRh9yRCYuy3uNzkCDDxGmm+zMQvYyjywhCcJcFeUoB5uXYEEeHXHCT0UHBElCx wwqId1ydRB/iWneTaxRslTHY9ZfjaKfi/XsLBdxPjgNKxeLOSofQHw+nN8bnu6nC NHm7EmmvXcgtNJJwe77uAadQ1TrAiZaP/eW3peKGNoruAvUql56AVgSxcazvN8TF 8FvqUstuKl7bF5eMbMLI5OpBSEULbfAOVxWFBKUoiLPexoMyxf9XGEvzsyDhit3P k2Z2I+prrx+zxTIyX6ahetRjUcYmCeRPqHo= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:11 2025 by rpki-client