$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321558a5-ab90-3335-bdf7-9335e4583296.roa File: 321558a5-ab90-3335-bdf7-9335e4583296.roa (raw, json) Hash identifier: UKJbmVxHZFAz2RMHUByB+MQJzMrDxrNeQLV1iXOjr0M= Subject key identifier: CB:79:32:E3:20:D3:25:BE:90:72:06:64:4D:A7:0A:09:8D:AD:4A:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8686A327D3E748B4AC440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321558a5-ab90-3335-bdf7-9335e4583296.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:c44d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:68:6a:32:7d:3e:74:8b:4a:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=d5a45f6f-eaff-4753-b56d-dbbf1c09f1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:53:db:fb:ec:e9:ba:bf:2c:b5:ff:6e:04:db: e5:60:38:94:0b:11:3b:ff:97:49:42:a5:bb:d9:a6: 18:2d:9e:4f:46:33:ad:54:28:4d:60:34:e6:95:c0: 60:22:55:e1:4e:d1:a1:e3:49:88:e1:09:5e:09:74: 63:b2:0a:0a:34:e9:c9:bb:ba:71:66:87:a6:8f:c1: 5d:e8:1e:20:fb:b5:c7:9f:4c:af:3b:7e:eb:89:a6: dc:57:88:fb:a2:d0:e9:b9:e8:0f:6a:57:38:c5:e3: 54:e0:85:44:f3:3b:4e:42:1f:54:84:a4:ad:42:e3: 16:bd:7d:81:63:8f:bd:c6:de:fb:65:97:8f:f1:79: d8:c7:c4:ed:5b:41:26:72:dc:f8:ce:80:bb:aa:05: 33:3e:b9:80:9e:b0:db:c3:8b:75:c0:72:67:b7:18: 31:d3:89:6a:3c:7b:77:d9:72:c8:a6:64:d6:92:ac: 7a:67:87:b8:5e:ae:3e:d4:23:a0:7a:04:78:d3:08: 6f:0e:6b:98:31:c7:a9:0a:6d:88:df:c6:33:c3:08: 6d:ad:f5:ae:47:05:4c:ae:9b:16:af:19:f5:00:83: 20:49:35:a9:d7:c0:22:ed:2e:52:c1:8a:cd:df:58: 67:0a:99:b5:e6:74:01:04:1f:b1:4f:d9:0e:e1:f1: ac:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:79:32:E3:20:D3:25:BE:90:72:06:64:4D:A7:0A:09:8D:AD:4A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/321558a5-ab90-3335-bdf7-9335e4583296.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c44d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:39:2b:24:b2:b2:ae:82:c5:e0:1d:f1:4e:79:28:c7:ef:aa: 4a:ed:b7:8c:20:b2:cb:92:7a:01:5a:5d:f3:dd:e8:d1:55:1b: 6f:12:ee:3f:32:82:ad:e7:16:1a:ec:52:11:a3:17:eb:46:24: 29:e3:5c:bb:a9:43:31:49:6c:3f:3c:1c:c8:ec:40:12:0d:cf: 28:b2:cd:6c:42:36:a1:35:4d:c1:e6:b0:32:ad:4d:92:cc:c9: 4b:35:84:72:4f:93:24:3a:c1:eb:1f:59:89:bd:c8:9c:78:69: e9:46:6b:99:19:15:42:cd:83:f6:e3:c7:93:64:fc:f8:2b:50: dd:29:af:c1:b8:1c:d2:ea:08:1a:4d:50:11:6c:fe:c5:5c:80: da:5f:54:ca:05:94:6c:9a:6f:5e:f9:33:47:e3:96:32:28:51: fe:b4:db:8b:0c:2c:5f:1e:05:24:a0:03:ed:4b:21:38:1f:7f: d7:1f:de:84:df:76:ff:61:f0:81:a2:ef:be:73:00:82:84:7f: e2:a3:30:0c:14:f0:51:2f:bb:fe:78:28:21:16:ef:e7:3f:b6: ea:01:ac:e1:22:a5:8f:07:c4:e3:cc:47:ae:4e:d4:14:73:b5: 35:91:a5:ab:77:a0:fe:3b:fe:70:7d:36:d8:de:65:b3:dd:26: 28:95:78:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uGhqMn0+dItKxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZDVhNDVmNmYtZWFmZi00NzUzLWI1NmQtZGJiZjFjMDlmMWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVPb++zpur8stf9uBNvlYDiUCxE7/5dJQqW7 2aYYLZ5PRjOtVChNYDTmlcBgIlXhTtGh40mI4QleCXRjsgoKNOnJu7pxZoemj8Fd 6B4g+7XHn0yvO37riabcV4j7otDpuegPalc4xeNU4IVE8ztOQh9UhKStQuMWvX2B Y4+9xt77ZZeP8XnYx8TtW0Emctz4zoC7qgUzPrmAnrDbw4t1wHJntxgx04lqPHt3 2XLIpmTWkqx6Z4e4Xq4+1COgegR40whvDmuYMcepCm2I38YzwwhtrfWuRwVMrpsW rxn1AIMgSTWp18Ai7S5SwYrN31hnCpm15nQBBB+xT9kO4fGsbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMt5MuMg0yW+kHIGZE2nCgmNrUqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzIxNTU4YTUtYWI5MC0z MzM1LWJkZjctOTMzNWU0NTgzMjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcRN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAA5KySysq6CxeAd8U55KMfvqkrtt4wgssuSegFaXfPd6NFVG28S 7j8ygq3nFhrsUhGjF+tGJCnjXLupQzFJbD88HMjsQBINzyiyzWxCNqE1TcHmsDKt TZLMyUs1hHJPkyQ6wesfWYm9yJx4aelGa5kZFULNg/bjx5Nk/PgrUN0pr8G4HNLq CBpNUBFs/sVcgNpfVMoFlGyab175M0fjljIoUf6024sMLF8eBSSgA+1LITgff9cf 3oTfdv9h8IGi775zAIKEf+KjMAwU8FEvu/54KCEW7+c/tuoBrOEipY8HxOPMR65O 1BRztTWRpat3oP47/nB9NtjeZbPdJiiVeC8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:51:40 2025 by rpki-client