$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a727e310-143a-37ad-99ed-f48d1393320b.roa File: a727e310-143a-37ad-99ed-f48d1393320b.roa (raw, json) Hash identifier: nrDZQ2anKtvsxFgraebs8demHM8hVvw9f5jEpxbV17U= Subject key identifier: 0F:0C:00:16:0F:1A:6C:1B:8A:60:A5:3C:2B:61:3F:18:65:31:B3:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B56D7350DC1EEBA3CAF5AA0E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a727e310-143a-37ad-99ed-f48d1393320b.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:a031::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:35:0d:c1:ee:ba:3c:af:5a:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=87eba32a-fd2c-4312-afc8-17f965cdb455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:37:04:cf:ad:e0:2a:23:2d:1f:b1:b8:68:48: 0b:fe:b3:77:78:9d:b9:b2:fc:88:78:4f:16:e1:93: 15:0a:57:b3:d1:28:2e:6b:82:02:7e:13:b6:e4:05: 75:a5:b9:d7:95:f5:fe:b2:d5:37:d8:24:0c:a1:33: 9d:fe:0e:78:da:c5:71:37:be:70:bb:c5:a0:ac:8c: da:ff:77:cd:38:73:24:e8:7a:ba:3e:20:e9:25:34: dd:bb:e1:48:ca:55:b7:6e:b8:ba:4a:d4:57:b7:b3: cf:e0:d6:97:11:d4:47:97:22:82:78:b1:e9:f1:31: 79:89:02:4b:82:17:7b:df:96:a2:29:66:f1:7a:e2: 30:da:54:1c:57:f5:e9:4e:48:6c:17:c4:29:bf:c2: 2d:09:a9:45:77:11:d7:01:57:e8:ba:43:aa:2e:2d: 40:f4:e3:d3:77:08:5d:5c:9e:04:7a:39:5f:88:95: 69:9c:d7:74:38:79:71:60:47:fd:a0:8a:b3:cc:a1: ea:b8:41:1f:21:e9:6f:fe:5a:1f:f2:f0:56:7c:11: ce:cc:64:01:b5:60:a7:cf:0b:a5:bd:10:49:02:8d: 34:39:3f:5d:d1:44:ef:5b:f5:83:62:0c:27:43:1c: 2d:a7:64:0b:cb:49:c2:d3:80:f8:fd:92:06:4c:61: a9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0C:00:16:0F:1A:6C:1B:8A:60:A5:3C:2B:61:3F:18:65:31:B3:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a727e310-143a-37ad-99ed-f48d1393320b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a031::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e1:7d:25:fa:67:72:fb:38:f9:59:91:45:a3:72:08:32:12: 28:1b:c9:b2:a1:73:c3:6f:98:b9:e9:5f:d1:37:88:e4:24:a5: d2:13:18:a8:f2:55:09:5b:26:6e:38:25:25:4f:2a:07:65:93: c0:64:64:f4:4a:79:8a:71:b3:8d:12:40:fc:cd:e6:7a:88:b9: 88:27:02:d2:4a:7d:ab:40:b4:e8:01:1a:18:d3:9e:4c:fa:a1: 52:b8:d9:31:bc:3f:67:de:e1:0c:c6:8b:30:75:de:e7:86:6b: 08:be:1a:67:84:0b:b4:e1:e1:8f:1d:69:f4:7d:27:b7:c4:7e: 3a:10:2c:91:ff:2e:eb:1c:01:54:b1:da:08:77:69:9e:e1:fe: 62:fb:99:62:54:21:f0:62:c7:c5:d4:3e:66:1e:d5:ad:6d:e3: 05:13:87:d5:cf:3d:1d:9d:e2:6c:a2:c0:27:5e:7d:77:ec:2a: 6f:0f:45:4f:95:db:27:38:10:3a:02:48:d6:f8:fb:5c:74:37: 2d:96:3d:e9:2d:5a:38:eb:98:86:b5:a7:81:54:03:67:fc:3c: e9:9b:35:21:84:a7:12:e3:c9:8d:ea:8b:ed:89:6b:b8:a8:88: bf:49:94:16:ec:e7:c7:d8:7a:71:e7:2a:f3:8a:c9:44:e8:f6: a5:36:ba:e2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtW1zUNwe66PK9aoOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ODdlYmEzMmEtZmQyYy00MzEyLWFmYzgtMTdmOTY1Y2RiNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTcEz63gKiMtH7G4aEgL/rN3eJ25svyIeE8W 4ZMVClez0Sgua4ICfhO25AV1pbnXlfX+stU32CQMoTOd/g542sVxN75wu8WgrIza /3fNOHMk6Hq6PiDpJTTdu+FIylW3bri6StRXt7PP4NaXEdRHlyKCeLHp8TF5iQJL ghd735aiKWbxeuIw2lQcV/XpTkhsF8Qpv8ItCalFdxHXAVfoukOqLi1A9OPTdwhd XJ4EejlfiJVpnNd0OHlxYEf9oIqzzKHquEEfIelv/lof8vBWfBHOzGQBtWCnzwul vRBJAo00OT9d0UTvW/WDYgwnQxwtp2QLy0nC04D4/ZIGTGGpHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA8MABYPGmwbimClPCthPxhlMbORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTcyN2UzMTAtMTQzYS0z N2FkLTk5ZWQtZjQ4ZDEzOTMzMjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACnhfSX6Z3L7OPlZkUWjcggyEigbybKhc8NvmLnpX9E3iOQkpdIT GKjyVQlbJm44JSVPKgdlk8BkZPRKeYpxs40SQPzN5nqIuYgnAtJKfatAtOgBGhjT nkz6oVK42TG8P2fe4QzGizB13ueGawi+GmeEC7Th4Y8dafR9J7fEfjoQLJH/Lusc AVSx2gh3aZ7h/mL7mWJUIfBix8XUPmYe1a1t4wUTh9XPPR2d4myiwCdefXfsKm8P RU+V2yc4EDoCSNb4+1x0Ny2WPektWjjrmIa1p4FUA2f8POmbNSGEpxLjyY3qi+2J a7ioiL9JlBbs58fYenHnKvOKyUTo9qU2uuI= -----END CERTIFICATE-----Generated at Mon Oct 20 07:55:02 2025 by rpki-client