$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32dfd0e8-c6f9-35d9-9052-a89d31fbe624.roa File: 32dfd0e8-c6f9-35d9-9052-a89d31fbe624.roa (raw, json) Hash identifier: lSRvg8CLaNXAkMbKyRZN5sLdkfkhiNfLr3oTkAaChpM= Subject key identifier: 38:42:16:72:7B:2E:D9:76:CE:E1:47:FA:2A:8E:DB:D5:99:79:BD:6A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9414EF006456DC413E580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32dfd0e8-c6f9-35d9-9052-a89d31fbe624.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2001:559:867c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:41:4e:f0:06:45:6d:c4:13:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=4425db26-eaca-40c1-9928-ade4e9cf21e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e3:cc:0f:cf:80:dc:97:79:20:9b:bf:ae:93: 47:f5:f8:b3:20:b9:ad:4c:d6:b2:17:a9:65:b9:57: 77:07:f0:27:54:25:24:db:b4:07:d1:3b:32:af:01: 51:5e:c3:e1:0a:4e:95:0c:87:00:16:37:02:f0:e7: 81:af:f6:ee:6e:e3:33:01:ff:2c:9b:e5:27:3b:ee: 2e:1c:01:42:10:c5:d2:0d:46:10:1b:94:5f:b0:6c: 96:1b:f0:b6:95:61:ab:ea:18:f1:b1:55:34:b7:7b: d0:46:cf:a7:b4:33:5a:51:cb:bd:e6:29:84:66:21: 9a:ef:16:a2:38:ec:f2:62:29:32:a0:33:12:7f:de: 55:72:24:40:4e:5e:bc:30:9c:02:6f:fe:16:a9:ee: 3b:0c:8f:e3:46:89:47:7f:14:a2:d5:76:76:66:ad: db:8c:20:74:7f:45:e8:25:50:db:03:e8:b8:0f:f9: ff:ef:37:56:29:c0:48:82:21:0e:e0:0b:47:44:c8: fc:d8:34:9b:6f:8f:85:bb:f0:2f:d4:ae:7a:08:b7: 69:dd:f4:c5:fd:12:50:7f:6d:d9:71:c9:95:8c:d6: b2:b4:5b:c5:95:7d:f0:58:b0:35:03:56:ae:0d:08: be:16:98:d4:37:d8:0c:63:3e:5d:f8:0b:bf:11:0b: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:42:16:72:7B:2E:D9:76:CE:E1:47:FA:2A:8E:DB:D5:99:79:BD:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/32dfd0e8-c6f9-35d9-9052-a89d31fbe624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:867c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:62:87:86:a8:04:48:09:36:91:88:05:80:7c:a5:83:80:23: 5b:50:2e:19:87:94:87:4a:d5:bd:bc:9b:6a:2a:48:a1:95:8b: 30:3d:2e:42:56:97:7b:5a:7e:2f:68:aa:07:23:c9:30:04:e2: c8:c6:33:94:ce:c6:fc:e6:15:05:7f:c8:42:af:0b:48:9a:30: 8a:5c:b2:8a:b0:eb:96:78:98:81:79:c1:51:52:fb:ad:3e:64: f3:7a:36:96:43:26:98:7e:02:37:da:8d:5c:fc:b7:92:e1:da: d1:81:cc:ec:e7:22:73:97:98:f4:5e:d0:b4:44:c9:dd:e5:a9: 8a:b6:99:76:9f:fd:9c:7d:c9:fc:1a:35:6b:7f:55:63:b9:7e: 8f:df:38:63:8e:e8:47:e3:a5:87:c3:2f:ca:69:31:10:8c:48: 27:9a:7a:45:5d:f8:16:92:fb:9d:f3:b0:65:17:1d:04:40:55: 1e:e9:66:3d:bb:fb:7b:37:f8:ad:0c:c0:b8:34:f7:3e:24:48: c4:3b:9a:59:a6:14:24:4d:92:26:06:6e:9a:cf:0a:8d:be:51: a4:af:c8:19:f2:43:0a:36:59:ef:50:e6:60:73:be:2e:a5:9e: 2c:55:a7:cd:1c:65:ae:33:45:e4:a5:c4:e5:0b:c6:12:5c:5f: 9b:e8:2b:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uUFO8AZFbcQT5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NDQyNWRiMjYtZWFjYS00MGMxLTk5MjgtYWRlNGU5Y2YyMWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluPMD8+A3Jd5IJu/rpNH9fizILmtTNayF6ll uVd3B/AnVCUk27QH0TsyrwFRXsPhCk6VDIcAFjcC8OeBr/bubuMzAf8sm+UnO+4u HAFCEMXSDUYQG5RfsGyWG/C2lWGr6hjxsVU0t3vQRs+ntDNaUcu95imEZiGa7xai OOzyYikyoDMSf95VciRATl68MJwCb/4Wqe47DI/jRolHfxSi1XZ2Zq3bjCB0f0Xo JVDbA+i4D/n/7zdWKcBIgiEO4AtHRMj82DSbb4+Fu/Av1K56CLdp3fTF/RJQf23Z ccmVjNaytFvFlX3wWLA1A1auDQi+FpjUN9gMYz5d+Au/EQszpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDhCFnJ7Ltl2zuFH+iqO29WZeb1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzJkZmQwZTgtYzZmOS0z NWQ5LTkwNTItYTg5ZDMxZmJlNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYZ8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKdih4aoBEgJNpGIBYB8pYOAI1tQLhmHlIdK1b28m2oqSKGVizA9 LkJWl3tafi9oqgcjyTAE4sjGM5TOxvzmFQV/yEKvC0iaMIpcsoqw65Z4mIF5wVFS +60+ZPN6NpZDJph+AjfajVz8t5Lh2tGBzOznInOXmPRe0LREyd3lqYq2mXaf/Zx9 yfwaNWt/VWO5fo/fOGOO6EfjpYfDL8ppMRCMSCeaekVd+BaS+53zsGUXHQRAVR7p Zj27+3s3+K0MwLg09z4kSMQ7mlmmFCRNkiYGbprPCo2+UaSvyBnyQwo2We9Q5mBz vi6lnixVp80cZa4zReSlxOULxhJcX5voK80= -----END CERTIFICATE-----Generated at Mon Oct 20 02:21:29 2025 by rpki-client