$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8b2c220-03f5-3574-bd23-c7e1a5f386fa.roa File: a8b2c220-03f5-3574-bd23-c7e1a5f386fa.roa (raw, json) Hash identifier: S42suuaXJ0mox3E+Xp6nwAXHIdORhBTx85ibnF/NO5E= Subject key identifier: 69:43:95:C8:EC:2C:29:B4:C9:0A:FB:58:7D:0B:AF:0E:C4:D6:0D:82 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB743D5B54D99ED7955BE50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8b2c220-03f5-3574-bd23-c7e1a5f386fa.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 2001:559:c1b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:43:d5:b5:4d:99:ed:79:55:be:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=35428986-e6b5-454f-bea1-cd2dce46e746 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:cd:45:d2:f2:d8:2e:e8:69:de:ca:e5:66:c1: 7e:f8:29:3b:fe:cd:56:0e:ad:bf:f7:8c:58:3c:a7: b3:7a:8b:f9:81:b7:1e:84:8a:ae:98:8d:ce:2b:4e: fa:14:84:06:13:7a:42:b0:c6:0c:a9:71:61:96:77: c5:a4:55:cb:64:81:70:00:d1:d8:a4:65:92:27:17: 20:95:15:54:d5:b1:bd:30:74:70:a7:a4:e9:ac:71: 1e:d3:e9:29:2b:15:f3:58:97:6b:92:09:12:1b:fa: 8c:1a:73:1b:20:fa:9b:7c:22:c8:ca:c0:09:64:2a: 66:b3:5b:d1:69:70:ac:4c:a0:24:a0:6c:f3:d6:fb: 25:d9:b3:f9:39:15:d0:50:ab:20:f3:a1:4e:75:aa: 30:e3:19:07:1d:f8:f4:53:f7:11:26:01:b4:ab:75: 05:0d:3f:5e:94:47:1e:58:a9:f4:c7:c8:bd:5b:61: de:74:16:61:49:a3:1b:82:29:ad:0d:dd:f1:28:51: 67:d9:36:a7:f3:4a:37:3e:c5:78:b4:d3:f1:9a:fb: 5a:72:1a:1e:32:09:2a:ac:2b:22:80:38:9f:2e:02: d5:c2:b4:99:ff:63:0a:d7:47:f6:cf:1f:98:1b:3d: 5d:69:7e:fc:76:ba:5c:1a:0f:36:fc:5a:60:04:79: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:43:95:C8:EC:2C:29:B4:C9:0A:FB:58:7D:0B:AF:0E:C4:D6:0D:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8b2c220-03f5-3574-bd23-c7e1a5f386fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c1b0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1e:05:10:2e:20:7c:21:6c:70:7a:5f:a7:d0:7c:d4:09:5e: 77:c3:c5:e6:91:69:6f:1c:ab:d9:56:93:fb:18:14:a0:25:68: 89:9d:a9:31:42:bc:06:3b:49:26:ae:1f:53:35:6d:64:42:d1: bd:6c:66:c7:b2:37:ab:ef:6f:48:0e:a5:62:23:92:6c:0b:49: e7:9e:35:08:04:a3:42:4d:94:67:89:ce:4f:96:d4:39:3d:76: 02:68:49:d7:00:5b:b0:83:1a:2f:c4:71:f2:b6:da:a2:1f:2e: 69:f4:e7:9c:72:e9:ef:8a:1a:2b:7a:52:aa:fd:69:42:6e:01: fa:d1:5f:a4:ad:20:9b:fb:d4:5a:33:80:57:1f:dd:70:b5:12: f7:7a:da:0b:99:e2:46:5f:5d:cd:0c:60:9e:ef:c8:ad:a7:51: b6:9f:5a:ab:4c:2b:bb:f5:a7:2d:6e:06:d6:fc:ff:47:7b:b9: 01:a8:8f:99:70:46:b3:a9:28:8d:bc:e7:7c:4a:81:10:85:2e: a0:b6:2a:f9:fc:8c:52:76:af:fe:8f:5a:49:48:4c:bb:a1:93: cf:f3:4d:36:4c:4e:51:e5:60:ab:22:c8:f3:44:2a:c4:2b:46: a4:cc:ef:43:ba:6b:05:cb:f0:50:5c:12:63:39:78:08:ed:51: af:46:df:32 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t0PVtU2Z7XlVvlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MzU0Mjg5ODYtZTZiNS00NTRmLWJlYTEtY2QyZGNlNDZlNzQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc1F0vLYLuhp3srlZsF++Ck7/s1WDq2/94xY PKezeov5gbcehIqumI3OK076FIQGE3pCsMYMqXFhlnfFpFXLZIFwANHYpGWSJxcg lRVU1bG9MHRwp6TprHEe0+kpKxXzWJdrkgkSG/qMGnMbIPqbfCLIysAJZCpms1vR aXCsTKAkoGzz1vsl2bP5ORXQUKsg86FOdaow4xkHHfj0U/cRJgG0q3UFDT9elEce WKn0x8i9W2HedBZhSaMbgimtDd3xKFFn2Tan80o3PsV4tNPxmvtachoeMgkqrCsi gDifLgLVwrSZ/2MK10f2zx+YGz1daX78drpcGg82/FpgBHnZ0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGlDlcjsLCm0yQr7WH0Lrw7E1g2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYThiMmMyMjAtMDNmNS0z NTc0LWJkMjMtYzdlMWE1ZjM4NmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcGw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF4eBRAuIHwhbHB6X6fQfNQJXnfDxeaRaW8cq9lWk/sYFKAlaImd qTFCvAY7SSauH1M1bWRC0b1sZseyN6vvb0gOpWIjkmwLSeeeNQgEo0JNlGeJzk+W 1Dk9dgJoSdcAW7CDGi/EcfK22qIfLmn055xy6e+KGit6Uqr9aUJuAfrRX6StIJv7 1FozgFcf3XC1Evd62guZ4kZfXc0MYJ7vyK2nUbafWqtMK7v1py1uBtb8/0d7uQGo j5lwRrOpKI2853xKgRCFLqC2Kvn8jFJ2r/6PWklITLuhk8/zTTZMTlHlYKsiyPNE KsQrRqTM70O6awXL8FBcEmM5eAjtUa9G3zI= -----END CERTIFICATE-----Generated at Mon Oct 20 03:44:32 2025 by rpki-client