$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3684b226-4814-305b-9026-b69da8f4b16a.roa File: 3684b226-4814-305b-9026-b69da8f4b16a.roa (raw, json) Hash identifier: cbqXdLKsxr9ykE+7lwEKHYQVu5fqj/RzRqA+XNu3wBE= Subject key identifier: C4:81:7C:7B:7F:F3:87:C7:C6:10:26:83:1C:91:C6:DF:55:A0:FE:CD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB87F6C20C53803CAF2DEA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3684b226-4814-305b-9026-b69da8f4b16a.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:559:c3f1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:7f:6c:20:c5:38:03:ca:f2:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6379b770-9420-4ecc-b9dc-65e025a04817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:b3:7b:11:e4:09:30:c5:37:e3:ee:30:70: 00:6a:44:68:b2:2e:ed:74:37:ab:86:24:f0:eb:7a: 65:b0:50:bf:ae:de:3a:83:7b:b1:38:3a:9a:bf:f7: 3c:f4:3e:78:af:21:8a:30:02:f6:a8:0d:b9:f1:05: ac:cf:ff:9a:5b:71:7a:7b:93:f1:4c:b6:ce:25:16: be:58:87:9b:cc:67:99:75:9c:3c:86:b4:e5:ce:96: b3:4f:7e:53:17:1f:10:4c:cc:fc:d4:c5:7f:0f:22: 65:d9:b8:ab:98:01:66:b7:06:e9:0f:4c:04:e1:5d: f5:30:fe:b0:07:20:f1:36:78:89:66:fc:6a:ce:25: 36:20:37:a2:09:2b:c3:d1:f7:48:56:f2:0a:e3:a4: 61:fc:e8:1b:29:6a:d1:4e:22:75:80:97:34:7a:27: ba:65:8b:14:2a:7b:8a:4e:fb:fc:11:59:0f:c7:da: a8:b9:60:3c:80:a0:23:70:04:9e:47:57:e2:73:71: 41:bb:d2:b9:39:ce:7e:a6:64:22:3f:d5:cb:bb:09: fe:48:5f:be:7e:7c:16:bd:c6:41:d9:ae:d9:67:37: 3a:7c:ff:e5:71:10:d9:d9:68:3e:c0:57:80:5a:16: 71:b0:0d:9b:96:ec:32:64:6e:fc:14:63:9f:ac:64: d1:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:81:7C:7B:7F:F3:87:C7:C6:10:26:83:1C:91:C6:DF:55:A0:FE:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3684b226-4814-305b-9026-b69da8f4b16a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3f1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:82:24:bd:72:eb:c5:16:b9:0e:6b:77:5a:4a:73:89:2b:05: 94:e6:df:96:27:08:66:ac:8e:93:65:74:10:6b:53:76:a7:e1: 44:2e:a2:70:ff:2f:8d:20:2d:f4:96:35:01:88:d2:2b:2d:5c: 9c:df:cd:3d:5a:92:00:93:0d:c5:95:4a:57:90:97:1e:ae:ef: 6d:6f:c6:a6:34:70:8b:f2:71:fa:61:0e:c5:1e:6e:24:90:2a: 8b:e0:62:f2:61:e5:40:12:23:32:a6:dc:f7:bb:39:cc:ac:6a: 0d:2d:52:c8:93:73:ca:d1:ac:e7:20:5f:ad:bc:9e:9b:25:90: 7e:2a:a0:47:ef:a7:b7:1c:0a:7a:c3:b8:19:e6:40:ee:84:ba: 74:84:c0:e0:9b:07:10:34:1b:49:4b:33:db:35:69:3f:e2:e7: 13:af:9a:d2:ec:19:ce:55:ca:04:e7:d7:d4:46:66:c9:b4:ba: ec:7a:ff:47:a8:83:9f:7d:ee:63:ab:3c:5f:05:a3:a5:d1:c1: 87:8a:71:c8:55:85:0e:44:bf:75:f7:50:ae:d7:7a:01:0e:25: 64:77:4c:81:fa:d8:1a:93:90:1f:67:dd:44:55:19:53:89:1c: 03:15:a6:be:73:4b:21:c7:ff:79:34:a7:bd:1c:9a:33:49:02: ac:5a:c7:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uH9sIMU4A8ry3qAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NjM3OWI3NzAtOTQyMC00ZWNjLWI5ZGMtNjVlMDI1YTA0ODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZazexHkCTDFN+PuMHAAakRosi7tdDerhiTw 63plsFC/rt46g3uxODqav/c89D54ryGKMAL2qA258QWsz/+aW3F6e5PxTLbOJRa+ WIebzGeZdZw8hrTlzpazT35TFx8QTMz81MV/DyJl2birmAFmtwbpD0wE4V31MP6w ByDxNniJZvxqziU2IDeiCSvD0fdIVvIK46Rh/OgbKWrRTiJ1gJc0eie6ZYsUKnuK Tvv8EVkPx9qouWA8gKAjcASeR1fic3FBu9K5Oc5+pmQiP9XLuwn+SF++fnwWvcZB 2a7ZZzc6fP/lcRDZ2Wg+wFeAWhZxsA2bluwyZG78FGOfrGTRaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMSBfHt/84fHxhAmgxyRxt9VoP7NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzY4NGIyMjYtNDgxNC0z MDViLTkwMjYtYjY5ZGE4ZjRiMTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEeCJL1y68UWuQ5rd1pKc4krBZTm35YnCGasjpNldBBrU3an4UQu onD/L40gLfSWNQGI0istXJzfzT1akgCTDcWVSleQlx6u721vxqY0cIvycfphDsUe biSQKovgYvJh5UASIzKm3Pe7Ocysag0tUsiTc8rRrOcgX628npslkH4qoEfvp7cc CnrDuBnmQO6EunSEwOCbBxA0G0lLM9s1aT/i5xOvmtLsGc5VygTn19RGZsm0uux6 /0eog5997mOrPF8Fo6XRwYeKcchVhQ5Ev3X3UK7XegEOJWR3TIH62BqTkB9n3URV GVOJHAMVpr5zSyHH/3k0p70cmjNJAqxaxxA= -----END CERTIFICATE-----Generated at Mon Oct 20 00:12:14 2025 by rpki-client