$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a751cd9a-e3d9-3411-a213-a340742c64e2.roa File: a751cd9a-e3d9-3411-a213-a340742c64e2.roa (raw, json) Hash identifier: wzy6vGJUqbCEisK/KTILMdHWJBTYtx3O+po4Egc+ZGE= Subject key identifier: C3:F6:20:03:44:78:A9:8E:F0:0A:17:49:23:97:8A:48:37:90:51:C4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9BEE20C13BFB25B675F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a751cd9a-e3d9-3411-a213-a340742c64e2.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 13367 IP address blocks: 2001:559:823c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:be:e2:0c:13:bf:b2:5b:67:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=c6218885-f9ac-49cb-89b3-6d5ebf36eccd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:fb:f6:c8:ae:ef:43:ab:7c:ad:3e:05:c7: d6:7b:7a:89:ac:ee:fd:ce:70:30:dd:d1:32:57:35: e2:24:e0:71:87:ca:2f:bb:c7:ae:5e:ac:0d:a2:2b: 18:ee:54:7d:40:c2:bf:b0:af:4d:1b:1c:03:bc:85: 9b:d8:f9:d0:83:fd:f3:4b:c3:97:08:0f:30:8c:6d: a9:db:83:de:c1:21:21:22:1e:35:97:60:d5:e8:d0: 1e:fc:72:03:f1:80:97:3b:bb:e2:06:20:63:ec:6f: b7:2b:1b:07:55:8f:de:e9:7b:06:97:11:60:20:28: 84:b6:d2:9a:38:56:47:ea:2d:45:6a:ad:90:de:14: ee:e7:86:77:0e:01:5b:7f:34:87:e7:a8:c9:4a:f3: e2:a8:f8:c4:34:8e:f7:68:69:48:f7:1b:e7:3f:34: 6b:03:63:3c:86:ec:d3:95:77:5a:5a:0d:2d:18:cb: 8d:75:2b:9f:74:8d:d5:f9:dd:14:44:ff:e5:9a:44: d3:65:fb:69:bd:26:30:97:24:e6:c7:15:59:83:24: b1:21:73:17:c5:85:7c:67:cb:d0:98:e4:d2:3a:b3: 76:2f:9c:8e:96:6c:1a:66:b0:b1:de:15:7a:13:fb: 72:79:aa:cc:32:54:41:40:af:1f:c0:2d:5d:0d:a0: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F6:20:03:44:78:A9:8E:F0:0A:17:49:23:97:8A:48:37:90:51:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a751cd9a-e3d9-3411-a213-a340742c64e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:823c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:06:b2:ad:07:be:e2:42:f9:3b:60:6f:b5:66:42:5c:7f:31: c7:9c:66:90:ee:5f:2a:ee:2a:69:71:f0:a1:9e:46:fb:07:40: 86:46:85:2d:9a:61:fc:f3:a0:56:93:62:b8:57:d5:2e:6c:6a: 77:2e:bc:2d:36:99:da:aa:cc:9f:0f:81:04:12:a2:82:78:6b: 3a:eb:3b:54:9d:43:e5:80:ee:b3:53:94:60:70:56:45:e5:4f: 39:39:6b:d8:c2:11:7b:9e:d8:59:3c:f7:b9:c3:33:25:79:29: ee:f8:18:be:d5:12:0e:37:a9:8d:d7:da:e2:8d:e6:71:fb:04: b7:c8:02:b4:15:55:b4:df:8e:8d:f7:69:5f:69:99:33:0e:2d: 1e:73:9b:ba:3c:3a:d1:61:84:7e:83:3b:42:bc:c0:e5:de:ee: 2e:04:57:84:f3:1f:ac:77:e9:7b:61:52:f3:28:29:4b:52:e5: da:e9:1a:d5:25:02:74:07:c1:1b:d1:d7:64:c7:93:5d:f1:09: e6:9e:22:38:b1:88:a8:ef:7d:63:f6:ce:e6:6c:5a:56:83:7c: 15:82:7f:7e:f7:b4:43:20:08:d1:f3:9e:2b:b9:43:9a:c3:1a: 4d:1b:d6:44:c3:db:42:cc:da:e7:46:3d:71:15:32:f4:13:48: 79:b5:35:51 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ub7iDBO/sltnX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YzYyMTg4ODUtZjlhYy00OWNiLTg5YjMtNmQ1ZWJmMzZlY2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRH79siu70OrfK0+BcfWe3qJrO79znAw3dEy VzXiJOBxh8ovu8euXqwNoisY7lR9QMK/sK9NGxwDvIWb2PnQg/3zS8OXCA8wjG2p 24PewSEhIh41l2DV6NAe/HID8YCXO7viBiBj7G+3KxsHVY/e6XsGlxFgICiEttKa OFZH6i1Faq2Q3hTu54Z3DgFbfzSH56jJSvPiqPjENI73aGlI9xvnPzRrA2M8huzT lXdaWg0tGMuNdSufdI3V+d0URP/lmkTTZftpvSYwlyTmxxVZgySxIXMXxYV8Z8vQ mOTSOrN2L5yOlmwaZrCx3hV6E/tyearMMlRBQK8fwC1dDaA2xwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMP2IANEeKmO8AoXSSOXikg3kFHEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTc1MWNkOWEtZTNkOS0z NDExLWEyMTMtYTM0MDc0MmM2NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYI8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACcGsq0HvuJC+Ttgb7VmQlx/McecZpDuXyruKmlx8KGeRvsHQIZG hS2aYfzzoFaTYrhX1S5sancuvC02mdqqzJ8PgQQSooJ4azrrO1SdQ+WA7rNTlGBw VkXlTzk5a9jCEXue2Fk897nDMyV5Ke74GL7VEg43qY3X2uKN5nH7BLfIArQVVbTf jo33aV9pmTMOLR5zm7o8OtFhhH6DO0K8wOXe7i4EV4TzH6x36XthUvMoKUtS5drp GtUlAnQHwRvR12THk13xCeaeIjixiKjvfWP2zuZsWlaDfBWCf373tEMgCNHzniu5 Q5rDGk0b1kTD20LM2udGPXEVMvQTSHm1NVE= -----END CERTIFICATE-----Generated at Mon Oct 20 06:27:44 2025 by rpki-client