$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2d57d49-fb21-3b19-96fc-587a65edb8e0.roa File: a2d57d49-fb21-3b19-96fc-587a65edb8e0.roa (raw, json) Hash identifier: rYdZRA+LLhICKXs1S9Hrfnbn7qPYUjYLFBxrPphL3Es= Subject key identifier: 31:02:88:70:7F:43:2D:DC:44:60:A1:E9:98:E3:7D:A2:D5:CB:C5:F0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB937D13148D1AF253F65A4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2d57d49-fb21-3b19-96fc-587a65edb8e0.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33651 IP address blocks: 2001:559:9a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:37:d1:31:48:d1:af:25:3f:65:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1d994a3d-54c1-4a25-a357-df9470ef4e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:76:55:81:37:7c:03:3a:07:42:0b:50:11:d5: 40:35:de:de:3b:10:45:04:a2:8e:3f:80:fe:25:24: bf:59:7a:97:81:9e:3d:38:8e:b3:78:97:ec:78:df: 2f:9b:70:a6:4c:73:fe:dc:a9:a9:13:f7:6f:39:11: e5:c5:44:a0:6f:ea:b7:82:02:d8:4a:2d:65:89:e6: 66:df:ef:ae:cc:ba:a4:29:25:15:b1:c7:17:b5:31: 7c:8a:df:b1:cd:12:1c:97:59:1a:5b:8f:8a:54:2a: a1:16:6e:1e:ca:0e:3d:09:be:f7:d0:14:c2:1b:7c: bc:5c:33:06:6e:ec:8b:7b:5c:d6:27:1e:22:30:be: 95:06:53:7d:2c:10:35:5e:18:7b:b6:20:78:12:63: 39:eb:3e:dc:b2:db:e3:98:0f:ab:92:fa:ff:1c:3d: ed:f2:ab:4a:c4:e6:c4:e8:04:9b:44:d1:e6:e7:56: fe:ce:c2:aa:31:b2:2b:29:f1:9f:7d:41:b5:b2:a1: bd:d6:22:83:1c:13:68:98:c7:e2:68:50:2f:f6:15: 7f:fe:5c:ad:b6:97:72:90:88:a6:66:e1:ef:0e:57: 14:56:28:ed:2d:78:c6:34:1f:8b:98:1d:7d:6f:b3: 9c:fd:8e:f5:93:c7:e8:f5:01:1e:62:e9:1e:72:ce: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:02:88:70:7F:43:2D:DC:44:60:A1:E9:98:E3:7D:A2:D5:CB:C5:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2d57d49-fb21-3b19-96fc-587a65edb8e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:9a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:0b:80:0d:11:21:7e:e9:9d:65:38:39:3c:fa:30:ed:e8:19: 63:a2:5d:52:0c:1d:28:99:a3:f2:e9:9d:33:16:cf:cb:9e:3c: 77:59:6f:6f:fd:4d:b6:84:e7:42:2e:42:30:2b:75:d4:95:98: 8d:20:7b:8c:db:90:8f:be:0c:7e:15:38:43:e6:46:e5:2d:f4: 7a:29:35:55:80:2c:d7:11:5a:c3:3e:38:22:d8:96:6d:52:60: bb:2d:32:53:e3:19:96:07:c3:71:09:76:73:fa:67:74:a2:fc: ca:8c:01:66:65:9d:f4:39:16:bc:9b:28:ed:e5:f6:87:e2:21: 7e:b4:6b:62:38:a2:74:ab:3e:52:55:49:5a:61:33:67:86:2d: b3:4b:1e:70:74:eb:42:c1:67:96:85:23:7f:5e:dc:2f:37:d3: 59:c1:57:89:2d:02:7c:58:15:15:93:e5:4f:98:dd:8a:1f:cb: 04:33:1e:8a:df:37:e5:e4:d3:45:47:ef:3a:55:4b:c1:04:75: f2:c6:1f:be:67:f4:83:4a:90:23:43:41:aa:aa:ef:cb:7d:23: 42:06:7b:08:b1:8b:17:a7:90:35:af:11:0f:cb:53:45:29:78: 19:1e:79:30:be:0b:8d:a9:85:9f:49:c9:15:66:25:35:ca:0e: 7d:33:25:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uTfRMUjRryU/ZaQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MWQ5OTRhM2QtNTRjMS00YTI1LWEzNTctZGY5NDcwZWY0ZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3ZVgTd8AzoHQgtQEdVANd7eOxBFBKKOP4D+ JSS/WXqXgZ49OI6zeJfseN8vm3CmTHP+3KmpE/dvORHlxUSgb+q3ggLYSi1lieZm 3++uzLqkKSUVsccXtTF8it+xzRIcl1kaW4+KVCqhFm4eyg49Cb730BTCG3y8XDMG buyLe1zWJx4iML6VBlN9LBA1Xhh7tiB4EmM56z7cstvjmA+rkvr/HD3t8qtKxObE 6ASbRNHm51b+zsKqMbIrKfGffUG1sqG91iKDHBNomMfiaFAv9hV//lyttpdykIim ZuHvDlcUVijtLXjGNB+LmB19b7Oc/Y71k8fo9QEeYukecs5qAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDECiHB/Qy3cRGCh6ZjjfaLVy8XwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJkNTdkNDktZmIyMS0z YjE5LTk2ZmMtNTg3YTY1ZWRiOGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQCa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMcLgA0RIX7pnWU4OTz6MO3oGWOiXVIMHSiZo/LpnTMWz8uePHdZ b2/9TbaE50IuQjArddSVmI0ge4zbkI++DH4VOEPmRuUt9HopNVWALNcRWsM+OCLY lm1SYLstMlPjGZYHw3EJdnP6Z3Si/MqMAWZlnfQ5FrybKO3l9ofiIX60a2I4onSr PlJVSVphM2eGLbNLHnB060LBZ5aFI39e3C8301nBV4ktAnxYFRWT5U+Y3YofywQz HorfN+Xk00VH7zpVS8EEdfLGH75n9INKkCNDQaqq78t9I0IGewixixenkDWvEQ/L U0UpeBkeeTC+C42phZ9JyRVmJTXKDn0zJUE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:03:54 2025 by rpki-client