$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/433177ab-f033-3b06-9e9c-7d7e645f013b.roa File: 433177ab-f033-3b06-9e9c-7d7e645f013b.roa (raw, json) Hash identifier: AMPLGCfN3P9H5xtH0MdGjlRXIfR6ls9Ym01gqiV9W1g= Subject key identifier: 03:1D:90:E5:9D:76:5A:C7:ED:E7:61:DE:A4:EE:54:76:EC:B8:B3:B3 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB966BE2B3C4339E9827840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/433177ab-f033-3b06-9e9c-7d7e645f013b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33668 IP address blocks: 2001:559:33d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:66:be:2b:3c:43:39:e9:82:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a4c71ff4-d7de-4c4c-a46a-319a2231d07f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ef:44:f3:11:3d:ce:c0:2d:38:36:27:bb:40: b4:56:4d:db:7a:9f:bc:5c:07:28:06:6a:1c:44:cc: b0:73:d9:75:ef:1c:07:ab:8e:6d:9e:c5:e7:01:06: ed:c7:54:a6:ab:88:ed:6a:b9:c1:19:e9:42:27:7a: fd:cd:d5:67:62:44:97:af:7d:52:46:42:51:7b:70: 7a:09:b1:5a:04:6a:df:05:c7:d7:26:1e:47:da:43: c5:e4:95:19:15:24:ac:f8:b8:06:fc:b9:1f:d9:c3: b6:9e:19:37:be:3f:95:91:f7:16:59:0e:7c:2c:dd: 88:e3:e1:61:4c:43:18:b3:77:4b:13:00:e2:bc:f1: b0:49:72:d2:da:9c:bf:7e:23:87:17:01:ec:32:b8: d5:7d:4b:b5:07:fb:91:38:8c:4d:5c:09:41:cb:9a: 56:d0:dd:c9:2e:9c:b0:70:e4:30:7c:f1:02:9c:cb: 34:0e:fa:15:dd:27:14:8c:29:a8:7b:9f:27:ff:e5: db:88:a4:b2:1f:f9:69:3f:b5:83:e8:de:fc:2b:8b: f3:49:03:ea:30:f1:27:2f:e0:48:36:14:e1:f0:ff: 48:81:15:35:be:08:67:59:83:a7:73:bc:b1:28:ba: 23:7f:4c:5d:c4:bf:44:56:b6:81:51:d4:45:87:11: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1D:90:E5:9D:76:5A:C7:ED:E7:61:DE:A4:EE:54:76:EC:B8:B3:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/433177ab-f033-3b06-9e9c-7d7e645f013b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:33d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:5f:65:66:11:5f:1b:7e:24:4e:ac:e0:5b:dc:48:b4:39:4b: b9:90:47:8d:86:54:fc:41:7d:43:10:f1:10:63:c5:fe:13:9f: 72:16:0c:7b:06:ae:64:33:02:d1:e7:5e:2c:03:62:6b:bf:b6: 3e:0c:c6:2a:74:a5:18:91:b0:38:cf:4a:15:ec:8e:16:2d:ae: 60:04:ba:61:d1:68:4f:11:8a:a8:41:da:1b:84:d4:94:3f:79: ad:e3:ea:d7:f1:ed:d3:3f:28:51:fd:26:0c:4d:02:0a:24:d0: 57:e3:38:46:6f:be:13:a2:7e:e2:a4:0a:3e:cd:80:95:82:ce: 64:7c:94:f5:06:db:a1:86:bc:6b:79:b0:28:cd:49:eb:dc:51: 16:fc:8b:a7:05:90:99:3d:f1:d9:1a:d8:0e:fc:3a:26:c3:d8: c3:08:e1:e1:84:11:2d:4f:92:70:f8:53:23:20:8b:11:03:9d: 2b:55:11:f1:f2:28:02:4e:0b:f9:68:ee:0d:1f:2d:7f:44:bc: 34:b8:e9:9f:34:f9:74:b7:e3:34:ae:b7:70:23:6d:72:1b:49: 6d:62:26:f4:91:43:52:60:4f:49:d5:9d:2b:b2:8e:4e:c9:a8: fb:1d:cf:eb:a3:ae:77:aa:c9:e2:72:75:d5:d8:13:9b:a3:40: a5:84:56:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uWa+KzxDOemCeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTRjNzFmZjQtZDdkZS00YzRjLWE0NmEtMzE5YTIyMzFkMDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+9E8xE9zsAtODYnu0C0Vk3bep+8XAcoBmoc RMywc9l17xwHq45tnsXnAQbtx1Smq4jtarnBGelCJ3r9zdVnYkSXr31SRkJRe3B6 CbFaBGrfBcfXJh5H2kPF5JUZFSSs+LgG/Lkf2cO2nhk3vj+VkfcWWQ58LN2I4+Fh TEMYs3dLEwDivPGwSXLS2py/fiOHFwHsMrjVfUu1B/uROIxNXAlBy5pW0N3JLpyw cOQwfPECnMs0DvoV3ScUjCmoe58n/+XbiKSyH/lpP7WD6N78K4vzSQPqMPEnL+BI NhTh8P9IgRU1vghnWYOnc7yxKLojf0xdxL9EVraBUdRFhxGi3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAMdkOWddlrH7edh3qTuVHbsuLOzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDMzMTc3YWItZjAzMy0z YjA2LTllOWMtN2Q3ZTY0NWYwMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQM9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANdfZWYRXxt+JE6s4FvcSLQ5S7mQR42GVPxBfUMQ8RBjxf4Tn3IW DHsGrmQzAtHnXiwDYmu/tj4Mxip0pRiRsDjPShXsjhYtrmAEumHRaE8RiqhB2huE 1JQ/ea3j6tfx7dM/KFH9JgxNAgok0FfjOEZvvhOifuKkCj7NgJWCzmR8lPUG26GG vGt5sCjNSevcURb8i6cFkJk98dka2A78OibD2MMI4eGEES1PknD4UyMgixEDnStV EfHyKAJOC/lo7g0fLX9EvDS46Z80+XS34zSut3AjbXIbSW1iJvSRQ1JgT0nVnSuy jk7JqPsdz+ujrneqyeJyddXYE5ujQKWEVgc= -----END CERTIFICATE-----Generated at Mon Oct 20 03:35:49 2025 by rpki-client