$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40566f82-9567-34fe-b553-3e5ca6aa2bf7.roa File: 40566f82-9567-34fe-b553-3e5ca6aa2bf7.roa (raw, json) Hash identifier: j2etArTpoWVWPiF9YIzNdEulJtw5y355FgQaWJO3BD8= Subject key identifier: 58:0D:05:C8:4A:6E:D5:60:F5:77:8C:4A:23:6F:DA:11:72:B9:56:57 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB91B049F93844FE8644F50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40566f82-9567-34fe-b553-3e5ca6aa2bf7.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22258 IP address blocks: 2001:559:80cd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:1b:04:9f:93:84:4f:e8:64:4f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=01943f93-b1a4-43e3-aa5f-2af3669dfc83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:96:11:11:13:d3:84:04:a7:d6:1b:06:8f:e9: 05:1d:8b:45:66:d5:a2:1e:77:d6:7d:aa:6d:e3:ee: 76:2a:b4:ba:f8:68:d5:34:78:67:1c:a3:00:c0:63: e9:ca:f1:28:03:c8:9f:78:04:31:89:e6:29:bb:8d: 25:f4:bf:eb:a7:e9:ea:95:eb:c9:a2:95:75:90:ec: 5f:f0:99:c1:52:57:4e:7f:f3:3e:0e:89:c1:2d:26: 65:e9:a4:65:e2:e7:df:75:15:3f:93:f4:a3:e3:f6: f4:b9:26:fb:bb:aa:a5:6a:1e:61:51:b5:79:17:2f: 6f:8b:d9:d8:30:fd:9e:05:ab:fe:0a:f4:75:ce:4b: e5:8f:48:ee:47:f4:fe:e8:09:79:c4:c8:60:97:bc: a6:b1:dc:62:49:1f:4d:59:8e:52:f6:64:86:ae:f4: dc:88:21:67:ba:72:92:e2:26:2c:d9:6c:91:3c:c9: 9e:37:23:6b:d4:ca:04:dd:2a:c6:b9:1c:88:1c:cc: 85:f1:b1:3f:18:01:6f:2f:49:66:a2:9f:ac:7d:c7: b6:04:d1:11:c3:e5:b5:6c:f0:f7:03:93:97:31:f8: 2c:61:c0:e9:a8:99:25:92:24:11:c6:9b:a6:24:c0: e5:7c:cb:45:d1:f1:dc:85:50:77:74:b2:4a:13:14: 89:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0D:05:C8:4A:6E:D5:60:F5:77:8C:4A:23:6F:DA:11:72:B9:56:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40566f82-9567-34fe-b553-3e5ca6aa2bf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:80cd::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:fd:62:53:b9:12:4b:5a:13:8c:52:c7:2f:05:63:a2:87:64: 0e:8c:2b:d6:eb:14:40:a2:06:0b:3c:ca:88:26:94:f5:f8:8a: 13:85:01:64:31:41:40:dd:d2:97:56:02:ce:1e:e1:5d:00:d6: b3:7f:25:6b:0a:44:99:9a:bb:01:5a:e7:db:24:44:79:c7:19: 42:d5:d1:5c:b6:32:9f:58:cd:5f:3d:b3:13:b3:f9:c3:63:1a: 6e:26:fd:bd:1e:c2:43:6f:30:a5:50:d0:34:3a:89:6a:14:fa: 32:e4:8b:52:6c:90:c6:a1:59:fb:b7:24:b8:8e:94:7c:ab:29: 14:09:18:f2:8b:91:45:65:2f:af:34:32:21:02:6a:d0:da:7c: 01:d4:6e:3d:b7:58:30:d4:29:4f:ab:af:46:12:81:ba:78:f9: bc:a4:b6:32:7c:a5:50:21:f4:5a:2b:22:f4:17:d0:39:35:3a: 02:92:84:41:c2:2f:6e:66:21:a7:52:f5:5e:fe:36:6c:92:e6: 96:56:31:2c:e5:88:46:80:50:13:39:94:89:2a:90:84:cc:e8: de:8d:b6:79:2f:30:e1:26:4c:b0:35:cc:21:8a:1c:3f:7c:83: ee:37:c9:96:bc:61:50:ea:84:31:9a:e8:ab:89:7c:08:e0:e6: 2f:da:fc:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uRsEn5OET+hkT1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MDE5NDNmOTMtYjFhNC00M2UzLWFhNWYtMmFmMzY2OWRmYzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJYRERPThASn1hsGj+kFHYtFZtWiHnfWfapt 4+52KrS6+GjVNHhnHKMAwGPpyvEoA8ifeAQxieYpu40l9L/rp+nqlevJopV1kOxf 8JnBUldOf/M+DonBLSZl6aRl4uffdRU/k/Sj4/b0uSb7u6qlah5hUbV5Fy9vi9nY MP2eBav+CvR1zkvlj0juR/T+6Al5xMhgl7ymsdxiSR9NWY5S9mSGrvTciCFnunKS 4iYs2WyRPMmeNyNr1MoE3SrGuRyIHMyF8bE/GAFvL0lmop+sfce2BNERw+W1bPD3 A5OXMfgsYcDpqJklkiQRxpumJMDlfMtF0fHchVB3dLJKExSJPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFgNBchKbtVg9XeMSiNv2hFyuVZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDA1NjZmODItOTU2Ny0z NGZlLWI1NTMtM2U1Y2E2YWEyYmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYDN MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIv9YlO5EktaE4xSxy8FY6KHZA6MK9brFECiBgs8yogmlPX4ihOF AWQxQUDd0pdWAs4e4V0A1rN/JWsKRJmauwFa59skRHnHGULV0Vy2Mp9YzV89sxOz +cNjGm4m/b0ewkNvMKVQ0DQ6iWoU+jLki1JskMahWfu3JLiOlHyrKRQJGPKLkUVl L680MiECatDafAHUbj23WDDUKU+rr0YSgbp4+byktjJ8pVAh9ForIvQX0Dk1OgKS hEHCL25mIadS9V7+NmyS5pZWMSzliEaAUBM5lIkqkITM6N6NtnkvMOEmTLA1zCGK HD98g+43yZa8YVDqhDGa6KuJfAjg5i/a/Bc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:16:43 2025 by rpki-client