$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31e10ec2-d90e-33a7-926e-e4192ae821db.roa File: 31e10ec2-d90e-33a7-926e-e4192ae821db.roa (raw, json) Hash identifier: mgkJH2YLC999gThvI1mir4GAsE9DVZrUcouCp/oxGt4= Subject key identifier: 55:F1:A7:BB:BF:0F:F3:5B:69:87:31:9A:14:26:12:49:53:6A:A2:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB85DB4CE51FC9CDFDD40C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31e10ec2-d90e-33a7-926e-e4192ae821db.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:574::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:5d:b4:ce:51:fc:9c:df:dd:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1ce878f1-12f2-49b4-a319-eb98c8381fa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:24:21:4b:2f:5e:2b:e2:25:3a:e2:db:5a:e5: 0a:65:51:c3:17:c6:21:cd:2c:14:91:97:4c:7f:fb: b3:bc:c4:f0:4d:41:d9:aa:a1:a1:f4:2d:c7:0d:74: 51:19:55:b0:57:d9:24:a0:97:f8:34:f3:7f:25:dd: 7c:b8:0a:7d:8b:7a:17:23:77:ab:96:56:3c:c0:22: 9d:00:aa:cb:f7:8a:5c:05:99:8d:c6:71:6a:d9:e7: 68:a7:73:4f:ef:3c:36:5f:18:a0:41:78:3d:1a:c0: 99:f9:cc:0b:9d:d6:1f:08:d1:f4:b3:d4:b1:e4:8d: 7b:78:6f:71:54:3a:1b:c5:2e:e2:47:25:c4:14:cd: 95:42:5a:b5:b1:84:79:6a:f7:85:83:6b:a8:af:9d: cc:5f:66:86:26:5f:b1:07:f5:86:07:a7:51:2e:cd: aa:95:45:d4:27:2e:2a:97:38:ed:09:85:3b:10:68: 65:ef:29:42:3a:25:a5:dd:61:b4:18:b8:cc:3c:51: 44:f0:0d:0e:86:3b:8a:5c:52:75:e9:d9:3a:dd:7b: e1:2f:d1:7f:89:f5:1a:d1:16:22:3f:0b:3d:6a:c1: 44:a4:0c:f5:f2:91:36:6f:2c:81:b4:84:93:21:e7: 0c:bc:17:c3:ef:77:1d:19:4b:a3:ef:7b:34:bb:9f: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F1:A7:BB:BF:0F:F3:5B:69:87:31:9A:14:26:12:49:53:6A:A2:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/31e10ec2-d90e-33a7-926e-e4192ae821db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:574::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:3c:09:fb:fa:5b:f1:a0:22:da:7d:87:32:da:3b:63:b2:48: cf:bd:ff:16:c4:29:3e:d0:5e:c3:3d:5a:68:06:1a:51:3d:33: 34:5f:2f:45:8f:62:71:f4:83:3b:a5:7b:98:9c:15:b1:0b:63: 2b:2d:a7:0f:ce:24:07:f2:95:89:27:52:b1:4e:99:95:a4:f6: e4:52:44:2c:a2:4e:0a:65:db:a8:c3:a1:e0:05:2c:d1:b4:81: a9:6f:e6:c8:85:ca:23:ad:6b:f9:0c:74:45:41:15:41:6f:03: 57:a8:1e:bf:1d:6b:de:aa:98:5f:df:96:8e:d2:87:c0:46:22: 55:c9:5a:c0:3c:02:c3:30:7c:8e:a3:c6:85:31:a4:e7:70:d8: f9:4c:e4:5d:71:d6:1c:b7:7f:bd:32:7d:6b:b5:fe:b4:66:20: d2:40:f6:bb:c7:c5:4a:0f:92:2c:ba:8f:01:3d:81:37:6e:f2: 2b:e1:aa:08:e7:bd:44:ff:98:02:33:02:c7:60:98:4d:e3:e6: 8c:01:aa:7f:41:66:6d:32:b8:90:af:36:d5:d4:24:fd:97:68: db:79:34:18:7e:f1:22:d5:a4:1a:66:c4:7d:9c:9c:88:82:6a: 1b:2a:cb:92:76:f3:82:5d:0a:68:ad:5f:24:22:bd:2c:0c:71: e1:22:5e:2e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uF20zlH8nN/dQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MWNlODc4ZjEtMTJmMi00OWI0LWEzMTktZWI5OGM4MzgxZmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyQhSy9eK+IlOuLbWuUKZVHDF8YhzSwUkZdM f/uzvMTwTUHZqqGh9C3HDXRRGVWwV9kkoJf4NPN/Jd18uAp9i3oXI3erllY8wCKd AKrL94pcBZmNxnFq2edop3NP7zw2XxigQXg9GsCZ+cwLndYfCNH0s9Sx5I17eG9x VDobxS7iRyXEFM2VQlq1sYR5aveFg2uor53MX2aGJl+xB/WGB6dRLs2qlUXUJy4q lzjtCYU7EGhl7ylCOiWl3WG0GLjMPFFE8A0OhjuKXFJ16dk63XvhL9F/ifUa0RYi Pws9asFEpAz18pE2byyBtISTIecMvBfD73cdGUuj73s0u5/C/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFXxp7u/D/NbaYcxmhQmEklTaqJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzFlMTBlYzItZDkwZS0z M2E3LTkyNmUtZTQxOTJhZTgyMWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQV0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANQ8Cfv6W/GgItp9hzLaO2OySM+9/xbEKT7QXsM9WmgGGlE9MzRf L0WPYnH0gzule5icFbELYystpw/OJAfylYknUrFOmZWk9uRSRCyiTgpl26jDoeAF LNG0galv5siFyiOta/kMdEVBFUFvA1eoHr8da96qmF/flo7Sh8BGIlXJWsA8AsMw fI6jxoUxpOdw2PlM5F1x1hy3f70yfWu1/rRmINJA9rvHxUoPkiy6jwE9gTdu8ivh qgjnvUT/mAIzAsdgmE3j5owBqn9BZm0yuJCvNtXUJP2XaNt5NBh+8SLVpBpmxH2c nIiCahsqy5J284JdCmitXyQivSwMceEiXi4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:32:28 2025 by rpki-client