$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57cabd2-da28-3b95-8a57-84d371f64e78.roa File: a57cabd2-da28-3b95-8a57-84d371f64e78.roa (raw, json) Hash identifier: AtsgAm9blgZdAXjBl80pBz86h202wIM4ml91Gax/GKU= Subject key identifier: 9C:5A:74:BC:F5:E8:AC:94:12:B8:1F:D7:C8:DD:D8:D7:2C:85:10:04 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7B6197EC44B0984EF1740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57cabd2-da28-3b95-8a57-84d371f64e78.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33662 IP address blocks: 2001:558:2c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:b6:19:7e:c4:4b:09:84:ef:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=1cd435d9-bd22-4cd6-bb4f-3eba5903ae91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d8:42:44:ce:e3:fd:9d:6f:60:3c:1a:71:a5: f2:43:1d:b6:16:67:da:3f:be:46:19:c6:e4:5d:72: 84:18:e9:f7:df:78:14:8e:6e:51:92:30:0d:25:10: ed:0d:ec:08:9d:00:bc:25:67:e2:6a:b8:6d:43:8d: 52:78:e9:2c:49:2d:0a:d1:37:66:71:53:90:17:9c: 92:1e:fa:f2:03:ed:cf:b0:66:bd:35:de:67:ba:ea: 46:26:ae:b3:5f:39:19:d6:07:44:31:9c:a1:1b:be: 2d:d6:e6:f6:ac:64:65:eb:bb:9b:70:2c:ec:8b:a6: 45:10:7d:ed:e9:2a:f2:ce:70:0b:62:53:98:15:22: 5c:5d:ea:68:7e:f0:9a:57:08:be:93:1c:9a:f7:07: df:64:53:cd:93:88:57:1e:b4:ad:f1:2a:5c:4d:49: 39:c6:11:92:51:c9:0b:99:73:be:99:33:a9:78:9d: b4:b3:d4:2b:8c:a8:e1:b6:b8:8a:8f:18:9d:2b:07: 78:14:e8:64:20:3a:a9:37:77:a1:e0:e5:c1:ca:c8: bf:de:2a:f8:6d:9f:72:32:7b:bf:d0:8b:02:6a:30: b5:16:0e:a9:03:b3:be:5a:08:35:7c:8c:6f:2e:ef: 42:5c:a6:09:b5:65:b0:f4:99:d0:89:d7:16:f0:58: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5A:74:BC:F5:E8:AC:94:12:B8:1F:D7:C8:DD:D8:D7:2C:85:10:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a57cabd2-da28-3b95-8a57-84d371f64e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:2c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:60:a5:0f:d7:c8:5b:6d:de:f1:01:75:b8:af:03:1e:87:3c: 30:56:6f:9c:28:74:ce:1c:61:33:af:9f:6b:02:a1:b7:e8:81: 81:6e:74:26:74:3a:c2:06:c0:0b:e7:06:71:26:e9:d2:45:ce: f0:3f:9d:87:11:04:bc:ad:69:6f:f9:46:bd:8c:ba:07:fd:d1: da:d4:d1:15:59:a6:fa:9b:2e:96:60:e1:2d:90:01:e6:d5:06: ef:2f:c9:9b:44:ea:e3:f7:d8:8c:72:03:11:fd:eb:8b:56:5f: 7b:c2:bf:39:25:53:5b:57:5c:b2:7c:20:17:cd:fa:e6:46:34: 59:36:5b:55:87:d3:24:33:bd:de:d3:66:94:71:48:07:bd:d9: c3:05:dc:29:89:d2:89:97:50:e1:0f:df:61:9d:10:0a:de:f6: 2b:7d:32:e3:f1:35:7b:ea:8d:59:1f:c3:de:8e:bd:fd:3e:e9: 04:e4:e0:af:45:06:6e:4f:dd:01:73:6e:df:8a:76:92:c1:0b: dd:b1:e5:ef:e2:d4:81:e7:13:db:d5:21:7d:19:af:49:ac:8b: ea:b8:60:b9:59:49:52:ff:0f:23:ee:3c:fb:97:34:92:14:15: 82:23:1f:0d:75:ab:e4:9a:24:91:bf:5e:47:66:4f:59:6a:ae: f3:5e:a3:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t7YZfsRLCYTvF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MWNkNDM1ZDktYmQyMi00Y2Q2LWJiNGYtM2ViYTU5MDNhZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9hCRM7j/Z1vYDwacaXyQx22FmfaP75GGcbk XXKEGOn333gUjm5RkjANJRDtDewInQC8JWfiarhtQ41SeOksSS0K0TdmcVOQF5yS HvryA+3PsGa9Nd5nuupGJq6zXzkZ1gdEMZyhG74t1ub2rGRl67ubcCzsi6ZFEH3t 6SryznALYlOYFSJcXepofvCaVwi+kxya9wffZFPNk4hXHrSt8SpcTUk5xhGSUckL mXO+mTOpeJ20s9QrjKjhtriKjxidKwd4FOhkIDqpN3eh4OXBysi/3ir4bZ9yMnu/ 0IsCajC1Fg6pA7O+Wgg1fIxvLu9CXKYJtWWw9JnQidcW8Fhs9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJxadLz16KyUErgf18jd2NcshRAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTU3Y2FiZDItZGEyOC0z Yjk1LThhNTctODRkMzcxZjY0ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFWALA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMRgpQ/XyFtt3vEBdbivAx6HPDBWb5wodM4cYTOvn2sCobfogYFu dCZ0OsIGwAvnBnEm6dJFzvA/nYcRBLytaW/5Rr2Mugf90drU0RVZpvqbLpZg4S2Q AebVBu8vyZtE6uP32IxyAxH964tWX3vCvzklU1tXXLJ8IBfN+uZGNFk2W1WH0yQz vd7TZpRxSAe92cMF3CmJ0omXUOEP32GdEAre9it9MuPxNXvqjVkfw96Ovf0+6QTk 4K9FBm5P3QFzbt+KdpLBC92x5e/i1IHnE9vVIX0Zr0msi+q4YLlZSVL/DyPuPPuX NJIUFYIjHw11q+SaJJG/XkdmT1lqrvNeo0o= -----END CERTIFICATE-----Generated at Mon Oct 20 03:32:04 2025 by rpki-client