$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2d97500-0bc7-39a5-bd73-41375e0389a2.roa File: a2d97500-0bc7-39a5-bd73-41375e0389a2.roa (raw, json) Hash identifier: +TPEUILq6j3yk56g+OYG05L3znXbfaSbc5NAgUb6FxA= Subject key identifier: AF:94:EE:91:22:82:FE:1A:1C:7D:74:26:1E:9A:C5:41:C4:99:72:B6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB772BEE1D1EDF049A91320 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2d97500-0bc7-39a5-bd73-41375e0389a2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 7725 IP address blocks: 2001:558:170::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:72:be:e1:d1:ed:f0:49:a9:13:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=df65181c-925e-40b9-80cd-1dce9f93bd12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:8a:e7:6c:7a:96:97:67:51:29:64:a7:a9: ec:a0:04:0f:54:03:19:aa:51:f2:84:3c:57:9a:83: 9a:2a:90:62:a2:cc:be:61:f4:f6:a2:4a:b4:6a:b9: 62:fa:b2:d2:63:31:9a:d9:52:10:09:9c:e3:04:ce: a7:2f:af:69:96:93:61:88:e2:b4:40:72:36:80:fe: 2f:02:72:fd:98:12:e8:9a:0c:22:62:28:93:ee:29: a6:af:9c:f7:b6:32:19:d6:0a:f3:32:35:a8:b9:e1: f5:cd:7a:2b:32:88:be:d9:04:73:32:94:f6:d9:9f: 2e:06:56:6d:80:af:a2:b2:0b:85:bd:c8:d5:da:a8: 19:8f:39:92:1d:5f:bc:79:68:ec:83:68:98:67:5e: ca:31:f4:ad:08:97:7d:55:fe:7a:7c:c2:28:2e:66: 62:91:ad:28:0e:15:f3:48:37:ff:af:0d:d9:41:fc: 0a:3a:4d:b7:fa:77:91:4b:37:19:66:1b:60:d8:3d: 24:dd:c9:a3:c2:20:60:ab:ba:10:62:d6:ac:cb:da: 5d:f5:68:03:1c:57:30:d1:e0:01:b0:2e:5c:12:33: de:ea:b8:0d:25:ba:1b:25:91:d3:91:bf:4f:b7:c1: 6e:bc:e2:f4:af:c1:02:30:44:95:b9:c5:3d:c4:7c: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:94:EE:91:22:82:FE:1A:1C:7D:74:26:1E:9A:C5:41:C4:99:72:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a2d97500-0bc7-39a5-bd73-41375e0389a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:170::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3e:b3:69:24:b7:32:e5:e9:4f:c0:0b:98:65:b1:93:54:35: d1:f7:c0:a9:85:e9:f6:9b:b2:8d:71:b3:3a:e7:16:2e:cf:d5: 1d:18:52:25:9f:81:87:7f:c3:38:87:59:d9:d6:4f:ae:69:2a: b6:8f:ff:9a:b1:01:0a:f0:4f:2f:e0:12:7b:c8:6e:99:47:aa: 26:41:dd:fa:17:d3:de:4f:6f:56:ee:fa:6c:01:b2:c8:44:46: de:46:ee:f4:63:b0:58:d7:29:19:11:8c:d4:ce:e1:bf:51:9a: 51:f7:a4:84:d5:68:8c:d6:1a:62:f3:ee:97:fe:18:95:59:bc: 27:92:8c:00:28:d1:07:18:9e:c2:3a:80:c2:74:9e:fc:08:79: 42:23:83:4e:5c:48:cb:e8:ad:11:ed:52:3d:9d:e3:da:fc:39: a2:5f:a7:a3:0b:e8:d2:37:fb:39:fb:f5:d5:84:42:2f:a7:27: 28:7c:e1:d7:e6:2f:f1:fd:5d:8c:ba:e7:7b:f7:bd:cb:31:8c: 3a:cb:56:0a:c3:0f:e9:83:e8:4c:d9:2e:7b:e5:65:a7:3e:e0: ad:db:32:54:ca:8a:fb:05:08:2a:47:3b:22:04:ff:4c:bc:2e: 70:04:17:ce:1c:58:81:b0:38:e0:5d:53:b5:f3:47:34:3e:e6: d4:ae:d2:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t3K+4dHt8EmpEyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZGY2NTE4MWMtOTI1ZS00MGI5LTgwY2QtMWRjZTlmOTNiZDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEWK52x6lpdnUSlkp6nsoAQPVAMZqlHyhDxX moOaKpBiosy+YfT2okq0arli+rLSYzGa2VIQCZzjBM6nL69plpNhiOK0QHI2gP4v AnL9mBLomgwiYiiT7immr5z3tjIZ1grzMjWoueH1zXorMoi+2QRzMpT22Z8uBlZt gK+isguFvcjV2qgZjzmSHV+8eWjsg2iYZ17KMfStCJd9Vf56fMIoLmZika0oDhXz SDf/rw3ZQfwKOk23+neRSzcZZhtg2D0k3cmjwiBgq7oQYtasy9pd9WgDHFcw0eAB sC5cEjPe6rgNJbobJZHTkb9Pt8FuvOL0r8ECMESVucU9xHzSoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK+U7pEigv4aHH10Jh6axUHEmXK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTJkOTc1MDAtMGJjNy0z OWE1LWJkNzMtNDEzNzVlMDM4OWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFWAFw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEU+s2kktzLl6U/AC5hlsZNUNdH3wKmF6fabso1xszrnFi7P1R0Y UiWfgYd/wziHWdnWT65pKraP/5qxAQrwTy/gEnvIbplHqiZB3foX095Pb1bu+mwB sshERt5G7vRjsFjXKRkRjNTO4b9RmlH3pITVaIzWGmLz7pf+GJVZvCeSjAAo0QcY nsI6gMJ0nvwIeUIjg05cSMvorRHtUj2d49r8OaJfp6ML6NI3+zn79dWEQi+nJyh8 4dfmL/H9XYy653v3vcsxjDrLVgrDD+mD6EzZLnvlZac+4K3bMlTKivsFCCpHOyIE /0y8LnAEF84cWIGwOOBdU7XzRzQ+5tSu0ro= -----END CERTIFICATE-----Generated at Mon Oct 20 07:09:01 2025 by rpki-client