$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e985239-087b-3ae0-b461-7c7b51ef4dfa.roa File: 3e985239-087b-3ae0-b461-7c7b51ef4dfa.roa (raw, json) Hash identifier: lbfPbBDTnMvPUNuGCPaNFiMMVJ89Y8KDtVWdtKhRUV4= Subject key identifier: B4:35:74:82:37:E5:4B:83:79:A4:65:AE:E8:6F:48:D5:86:9B:BF:E7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB83DD9FF8786102D0AA500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e985239-087b-3ae0-b461-7c7b51ef4dfa.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:826d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:3d:d9:ff:87:86:10:2d:0a:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=913a23cc-7ac8-44a0-904e-cdc8bc718fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9e:8d:e2:4c:ba:9c:d4:d9:6b:2a:14:79:f9: a5:c5:e7:69:04:47:96:1a:a7:5b:8b:d6:95:71:6e: f9:33:39:c0:51:97:d9:4e:1d:55:a7:86:79:2f:6f: a6:74:38:62:72:1f:f8:63:0b:0a:e7:65:51:48:25: f9:6e:64:9b:db:9a:7d:a3:3a:bd:b4:34:e4:01:43: 49:b5:35:17:1a:fa:49:f6:60:53:9f:d0:63:cd:1a: 63:cd:cf:30:86:f1:56:cd:b4:78:5c:6c:c2:75:67: 0c:3e:a8:95:b0:7c:18:e1:e1:24:f8:6a:18:86:d9: cb:47:96:22:1a:40:7d:61:a3:de:49:43:18:ec:ad: 56:eb:50:da:a5:9b:74:18:30:58:96:47:b4:e5:e4: e4:50:fa:65:76:cb:8c:ce:08:cb:f9:54:4f:c0:b5: 0d:29:35:f1:2c:e5:66:88:18:f4:a8:be:84:fc:66: db:40:45:c8:dd:60:d9:84:08:b8:69:b5:3e:80:c1: aa:0d:74:98:a4:28:9e:30:c3:0d:2d:ee:67:8a:d8: 11:a6:66:5a:a8:65:ff:af:70:9d:d9:cf:15:3a:dc: 3e:7e:ea:45:10:c9:59:76:3d:b6:5b:77:40:d3:08: 5b:56:01:d4:60:ee:09:e1:86:2c:06:72:83:e7:42: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:35:74:82:37:E5:4B:83:79:A4:65:AE:E8:6F:48:D5:86:9B:BF:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e985239-087b-3ae0-b461-7c7b51ef4dfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:826d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b8:71:3a:dd:94:71:3f:77:3a:59:30:4d:42:b1:81:f5:80: cb:8a:4a:c2:b2:70:c3:a6:98:23:3b:19:9c:cd:ae:dc:95:67: 61:b7:97:df:7a:48:fd:fa:58:83:02:43:0a:33:c4:d9:94:51: ef:4e:34:3a:0a:4f:3c:05:3b:d3:5b:ab:94:6a:63:20:12:07: 45:16:23:c5:12:2f:15:59:48:0c:b9:0c:a6:7a:e3:48:f9:f7: e3:c2:64:51:40:6a:c1:15:ee:b7:58:ee:41:7b:d1:50:0c:a6: 65:26:70:95:0b:a8:3c:c4:33:72:c1:32:e9:3e:ea:96:fb:20: 40:57:8d:58:ec:d1:a7:1b:e6:63:7b:42:00:cd:40:93:c0:57: 05:b6:b3:a5:ed:55:68:bb:f5:82:5b:6c:da:b9:08:9d:ff:e6: dd:e5:e8:3c:32:a3:b6:2b:0e:04:65:46:b4:ee:ac:4a:83:4f: af:99:25:78:ae:ab:89:74:e7:f3:67:b0:27:38:cf:f2:b5:a1: 6e:7c:fe:08:71:68:59:dc:01:3a:7e:7d:de:08:4f:cb:15:44: 35:6a:e5:f9:00:c7:8a:d8:d2:dc:f5:2e:15:1f:82:bd:77:ef: aa:85:dc:1f:bd:54:83:89:1b:5a:35:86:41:04:79:3b:e8:ee: ca:ea:ac:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uD3Z/4eGEC0KpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OTEzYTIzY2MtN2FjOC00NGEwLTkwNGUtY2RjOGJjNzE4ZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZ6N4ky6nNTZayoUefmlxedpBEeWGqdbi9aV cW75MznAUZfZTh1Vp4Z5L2+mdDhich/4YwsK52VRSCX5bmSb25p9ozq9tDTkAUNJ tTUXGvpJ9mBTn9BjzRpjzc8whvFWzbR4XGzCdWcMPqiVsHwY4eEk+GoYhtnLR5Yi GkB9YaPeSUMY7K1W61DapZt0GDBYlke05eTkUPpldsuMzgjL+VRPwLUNKTXxLOVm iBj0qL6E/GbbQEXI3WDZhAi4abU+gMGqDXSYpCieMMMNLe5nitgRpmZaqGX/r3Cd 2c8VOtw+fupFEMlZdj22W3dA0whbVgHUYO4J4YYsBnKD50KEpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLQ1dII35UuDeaRlruhvSNWGm7/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2U5ODUyMzktMDg3Yi0z YWUwLWI0NjEtN2M3YjUxZWY0ZGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEy4cTrdlHE/dzpZME1CsYH1gMuKSsKycMOmmCM7GZzNrtyVZ2G3 l996SP36WIMCQwozxNmUUe9ONDoKTzwFO9Nbq5RqYyASB0UWI8USLxVZSAy5DKZ6 40j59+PCZFFAasEV7rdY7kF70VAMpmUmcJULqDzEM3LBMuk+6pb7IEBXjVjs0acb 5mN7QgDNQJPAVwW2s6XtVWi79YJbbNq5CJ3/5t3l6Dwyo7YrDgRlRrTurEqDT6+Z JXiuq4l05/NnsCc4z/K1oW58/ghxaFncATp+fd4IT8sVRDVq5fkAx4rY0tz1LhUf gr1376qF3B+9VIOJG1o1hkEEeTvo7srqrDY= -----END CERTIFICATE-----Generated at Mon Oct 20 06:30:46 2025 by rpki-client