$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e8770e-64fc-3d29-a1d4-5c539722c89a.roa File: 43e8770e-64fc-3d29-a1d4-5c539722c89a.roa (raw, json) Hash identifier: Q8xMzESLQ+ARgcbKY4sMs7/xIz1X5BZVYE4CytE98RM= Subject key identifier: 76:8A:03:4A:86:87:A2:51:E2:3F:48:09:A1:B8:23:43:DB:C8:09:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7DEB565646DAF6E33D600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e8770e-64fc-3d29-a1d4-5c539722c89a.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7015 IP address blocks: 2001:559:8313::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:de:b5:65:64:6d:af:6e:33:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=37653447-358b-4847-9cbf-afb6dcec106d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a7:86:70:d9:1e:14:1a:72:1f:ed:cc:f6:10: f9:13:3b:18:5a:69:56:9e:43:82:71:ad:b6:5f:b4: 7f:04:68:6c:f9:53:e2:69:9c:51:23:1b:32:60:5c: 5b:6f:a2:f9:4f:44:d7:0b:55:89:4e:40:b6:21:29: 49:db:3b:07:06:b2:31:3c:52:6f:81:13:b8:a8:4f: 01:db:9d:d6:5f:6d:ee:ed:8f:f9:4b:32:ae:26:f2: bc:15:5d:09:38:6a:36:fa:32:09:86:bf:7f:cb:7c: cb:66:91:84:5c:76:da:ca:da:e3:19:58:d5:02:14: 8b:8b:37:6e:18:0d:4e:f4:5c:4e:e6:23:9b:a2:6b: 53:cf:fa:15:2c:12:ee:cf:d5:09:13:47:42:98:9c: 86:e8:ac:34:dd:a9:de:ef:d5:5c:ec:e1:d5:93:d9: f3:3b:c0:1c:08:9c:09:96:5c:40:52:d6:6b:56:84: 81:c7:3a:d6:00:aa:92:23:13:10:ff:ec:2f:74:00: e2:e2:74:cf:2d:fc:50:52:a1:db:df:65:65:dd:b0: f5:1e:2f:02:3e:d6:83:13:6e:cf:8d:43:bb:83:91: 7a:a8:e4:54:a0:2b:a2:e5:7f:82:cf:d6:57:24:e6: 24:41:e7:ed:3d:93:8c:f1:01:fe:82:08:5f:b2:e8: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8A:03:4A:86:87:A2:51:E2:3F:48:09:A1:B8:23:43:DB:C8:09:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e8770e-64fc-3d29-a1d4-5c539722c89a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8313::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:af:cb:70:2d:13:4a:cd:2e:b7:3b:9a:99:24:9c:3a:3f:fc: e1:18:7f:37:1e:fc:d5:ec:ed:46:c6:3a:5b:a9:01:9a:da:30: b8:14:e9:42:8f:31:0a:0a:34:a2:1b:97:45:d8:5d:ba:80:e2: 88:2e:21:22:0d:b7:39:56:a4:ec:82:e2:eb:4b:1a:b8:c2:fa: b6:c0:58:86:99:3d:57:9e:11:5e:ec:26:11:31:ce:34:41:7f: e4:c6:ae:88:7e:e1:f8:76:0a:43:80:48:dc:57:f0:20:b9:a4: 67:6c:d7:1a:e1:15:04:ef:d4:de:76:23:94:13:f0:8f:3c:95: 3f:e5:02:ef:55:a4:1c:ed:22:a6:04:79:09:fb:58:a3:5b:51: 85:5f:b1:8e:60:d7:9b:05:02:02:b1:a8:77:9c:7a:cc:10:00: e4:62:16:34:b1:58:13:91:b5:49:4c:ff:f1:9a:4c:99:8f:8f: 03:10:65:f0:53:00:fa:48:3d:8d:fd:51:7c:ce:a1:94:61:56: 00:89:1e:1f:56:68:74:e3:49:d0:59:48:8a:6d:63:45:08:c1: 08:1a:80:f2:14:4b:d5:72:98:b5:83:a0:77:a3:d8:a1:70:1c: e4:42:1e:53:33:be:2c:fc:6d:c6:f0:7f:04:29:2d:1d:3b:a7: 24:bf:8e:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t961ZWRtr24z1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Mzc2NTM0NDctMzU4Yi00ODQ3LTljYmYtYWZiNmRjZWMxMDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqeGcNkeFBpyH+3M9hD5EzsYWmlWnkOCca22 X7R/BGhs+VPiaZxRIxsyYFxbb6L5T0TXC1WJTkC2ISlJ2zsHBrIxPFJvgRO4qE8B 253WX23u7Y/5SzKuJvK8FV0JOGo2+jIJhr9/y3zLZpGEXHbaytrjGVjVAhSLizdu GA1O9FxO5iObomtTz/oVLBLuz9UJE0dCmJyG6Kw03ane79Vc7OHVk9nzO8AcCJwJ llxAUtZrVoSBxzrWAKqSIxMQ/+wvdADi4nTPLfxQUqHb32Vl3bD1Hi8CPtaDE27P jUO7g5F6qORUoCui5X+Cz9ZXJOYkQeftPZOM8QH+gghfsughswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHaKA0qGh6JR4j9ICaG4I0PbyAkEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNlODc3MGUtNjRmYy0z ZDI5LWExZDQtNWM1Mzk3MjJjODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYMT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAECvy3AtE0rNLrc7mpkknDo//OEYfzce/NXs7UbGOlupAZraMLgU 6UKPMQoKNKIbl0XYXbqA4oguISINtzlWpOyC4utLGrjC+rbAWIaZPVeeEV7sJhEx zjRBf+TGroh+4fh2CkOASNxX8CC5pGds1xrhFQTv1N52I5QT8I88lT/lAu9VpBzt IqYEeQn7WKNbUYVfsY5g15sFAgKxqHeceswQAORiFjSxWBORtUlM//GaTJmPjwMQ ZfBTAPpIPY39UXzOoZRhVgCJHh9WaHTjSdBZSIptY0UIwQgagPIUS9VymLWDoHej 2KFwHORCHlMzviz8bcbwfwQpLR07pyS/jsk= -----END CERTIFICATE-----Generated at Mon Oct 20 22:40:48 2025 by rpki-client