$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa File: 35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa (raw, json) Hash identifier: XQ1VqKcaIOb6WCoHHj4u55YzTxsXYqcCwWPtVg1TDNs= Subject key identifier: 11:43:90:D3:64:82:C6:E3:F5:8D:DD:D2:87:6E:7F:71:C5:A5:E3:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9F8317FE7F89CB35D7880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:a003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:f8:31:7f:e7:f8:9c:b3:5d:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=9838b210-d9a5-4ad4-8721-4389de3de4f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0c:ea:97:59:5a:8a:18:a6:e5:76:fa:f4:96: b0:3f:16:4f:9b:f9:99:94:34:60:be:0d:cf:3b:81: 3f:5b:36:f9:a8:ce:33:ef:bc:55:a5:78:85:6a:82: a4:80:4a:0d:8e:b6:5d:4c:57:f6:5e:bd:02:69:cd: 46:c9:7d:15:ea:33:68:68:58:ea:5f:1c:c1:ac:ef: 8e:1f:48:dd:14:00:8d:c3:4c:fb:2c:f0:d3:2c:7c: 50:9b:73:5d:0f:e1:a9:3b:bf:bd:5a:13:42:2c:2c: 60:4b:98:ee:34:dd:03:9b:7d:67:3e:81:5f:0f:30: d3:82:c5:b2:86:66:c2:ec:07:7b:c0:8b:9f:cd:1d: d0:3c:e9:b4:65:c6:38:10:9f:c7:a8:ee:22:09:f5: 09:bf:55:33:4a:61:33:41:cf:a0:a7:9b:90:b3:a5: 2e:a1:bd:9a:ab:0b:7a:a8:fb:a8:6c:6b:5f:3d:0d: 81:d2:4a:93:f5:34:63:f2:49:c2:76:ee:6a:48:c5: 7e:cb:57:d6:2e:db:da:6f:4b:06:95:5d:6b:f9:30: 88:b3:2c:54:22:15:a4:d7:8a:e5:9c:ee:b5:4f:c8: 57:b5:99:b8:ba:ac:f4:b7:41:27:63:f1:71:0a:02: cc:84:16:97:e2:ed:3a:d2:7b:6f:95:9f:f4:da:0d: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:43:90:D3:64:82:C6:E3:F5:8D:DD:D2:87:6E:7F:71:C5:A5:E3:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35e84b6d-c6e8-3fd7-b102-2467e7966a3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a003::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:de:97:ae:8c:71:7d:89:28:04:6f:75:ef:a4:5f:92:48:af: 67:66:37:3b:8e:75:25:51:9f:e2:d2:da:37:1e:ed:25:4f:9f: 5a:58:13:f4:c6:0e:6e:8c:e3:8d:84:e9:8e:7d:76:6c:c4:72: 48:f6:ff:cb:a4:95:13:2e:16:2c:07:b5:27:86:2a:e3:ce:68: e9:e5:e8:80:39:79:70:86:7a:28:e1:e7:6c:df:ef:5b:91:15: 97:71:77:c8:1b:f6:56:9c:36:9c:4b:d5:a2:25:1d:66:c0:11: 41:b0:8c:bc:e1:97:27:c5:17:f6:b8:d9:60:76:f4:c5:6c:fe: 8b:14:a6:2d:6a:ed:94:ab:67:1f:f7:5e:9c:2c:10:38:b6:c3: 1e:1e:dd:bc:83:17:52:07:2a:da:3d:44:95:f3:a0:bd:16:50: 5f:22:11:62:05:fa:84:6d:6c:36:1b:4c:70:21:f7:78:79:a9: d5:30:22:ca:2b:9c:dd:6a:2c:f5:51:8d:60:b1:bc:79:3f:48: 83:1c:3f:bf:e6:17:51:1e:70:ac:c2:b3:0b:2e:03:b4:b2:ba: e3:4c:a6:8a:8a:1c:9c:59:85:88:08:ca:e5:e5:ac:d9:5c:71: 83:a2:5a:d7:46:b9:73:35:5d:6e:34:91:02:5f:d0:1c:fc:76: bb:f0:bb:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ufgxf+f4nLNdeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTgzOGIyMTAtZDlhNS00YWQ0LTg3MjEtNDM4OWRlM2RlNGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAzql1laihim5Xb69JawPxZPm/mZlDRgvg3P O4E/Wzb5qM4z77xVpXiFaoKkgEoNjrZdTFf2Xr0Cac1GyX0V6jNoaFjqXxzBrO+O H0jdFACNw0z7LPDTLHxQm3NdD+GpO7+9WhNCLCxgS5juNN0Dm31nPoFfDzDTgsWy hmbC7Ad7wIufzR3QPOm0ZcY4EJ/HqO4iCfUJv1UzSmEzQc+gp5uQs6Uuob2aqwt6 qPuobGtfPQ2B0kqT9TRj8knCdu5qSMV+y1fWLtvab0sGlV1r+TCIsyxUIhWk14rl nO61T8hXtZm4uqz0t0EnY/FxCgLMhBaX4u060ntvlZ/02g0iZQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBFDkNNkgsbj9Y3d0oduf3HFpeMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVlODRiNmQtYzZlOC0z ZmQ3LWIxMDItMjQ2N2U3OTY2YTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMvel66McX2JKARvde+kX5JIr2dmNzuOdSVRn+LS2jce7SVPn1pY E/TGDm6M442E6Y59dmzEckj2/8uklRMuFiwHtSeGKuPOaOnl6IA5eXCGeijh52zf 71uRFZdxd8gb9lacNpxL1aIlHWbAEUGwjLzhlyfFF/a42WB29MVs/osUpi1q7ZSr Zx/3XpwsEDi2wx4e3byDF1IHKto9RJXzoL0WUF8iEWIF+oRtbDYbTHAh93h5qdUw IsornN1qLPVRjWCxvHk/SIMcP7/mF1EecKzCswsuA7SyuuNMpoqKHJxZhYgIyuXl rNlccYOiWtdGuXM1XW40kQJf0Bz8drvwu6A= -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:45 2025 by rpki-client