$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa31be93-1fcd-3fc4-a307-0461bbef61ed.roa File: aa31be93-1fcd-3fc4-a307-0461bbef61ed.roa (raw, json) Hash identifier: zLxoycfkWL7spRaiJvoRzgh+vCSc5pWeJ0pptjacGA4= Subject key identifier: FF:EB:6C:50:C2:9E:83:E9:C3:22:50:EA:8A:D5:FD:8E:33:96:A8:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB837FE872AE48A6F8D8840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa31be93-1fcd-3fc4-a307-0461bbef61ed.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:593::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:37:fe:87:2a:e4:8a:6f:8d:88:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=cfc1dc19-97ff-461b-ab35-e1c194c10867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7d:de:58:2d:e4:ac:23:d5:91:5c:c3:7c:9f: a6:74:1f:c0:95:0d:f6:42:e4:9a:19:22:32:b5:d7: a2:25:f7:e4:c6:78:82:cc:85:a1:cf:d1:c3:d6:cb: 78:56:0f:ae:80:4e:1b:ca:a3:16:22:54:c0:a3:3f: 4d:04:45:42:1b:be:3a:ec:00:27:98:1a:32:fe:2b: 32:8d:91:9b:29:49:a5:ad:7a:dc:a8:18:2b:d3:a5: c2:73:c7:ce:1f:e8:1d:d7:09:41:5a:83:20:3f:f9: 2c:a5:61:8f:ae:cf:72:ec:ed:1e:16:f5:19:4f:d2: 84:2b:5c:63:da:58:8c:f9:d8:a0:d4:f2:bf:2e:fc: b3:30:ca:f8:30:0a:64:66:88:b2:c1:5d:7c:c3:91: 31:0b:58:de:84:40:c4:68:13:40:10:19:73:ed:39: e9:08:ee:7c:6b:a3:55:bd:0d:87:4d:1b:e7:de:ad: 88:33:17:c6:f1:73:6d:b7:4e:d0:fd:e9:12:8a:49: c7:34:68:54:ca:09:b4:c4:53:84:91:12:ef:3c:5f: 80:d3:c9:9c:9e:12:64:81:a7:21:e4:e2:11:76:44: 84:ce:d0:5e:18:11:86:7d:c8:78:c2:3b:99:00:dd: 1a:44:ef:95:cd:ae:d1:8b:3a:f6:07:6e:1a:82:65: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:EB:6C:50:C2:9E:83:E9:C3:22:50:EA:8A:D5:FD:8E:33:96:A8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa31be93-1fcd-3fc4-a307-0461bbef61ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:593::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:87:07:f5:16:c4:79:28:8c:d4:b2:ad:9f:f5:07:50:a8:39: c4:68:52:f1:57:d1:02:77:b0:3b:d8:5c:3a:6d:f0:fb:e2:0a: 09:b3:6d:af:14:da:ca:16:00:50:dc:11:52:20:29:a7:26:f0: 72:ab:29:22:b3:e7:5e:32:f2:ed:40:92:05:47:81:e2:a3:8d: 6c:9e:2e:1c:59:23:7d:60:d3:d1:cb:d3:f4:2e:79:aa:79:86: f8:48:44:d2:1a:41:47:3b:2a:96:be:fa:9a:2d:af:e9:0f:d4: 86:82:68:5b:8c:c1:9a:cd:8e:fc:4b:4e:55:a6:73:91:93:05: c9:be:f3:8c:86:ee:71:98:d5:ac:bc:77:f8:0a:71:68:e7:39: 37:d9:75:d7:5b:08:eb:64:30:64:3c:23:af:31:4a:01:47:da: b7:ee:93:cd:bf:bf:30:25:c1:e0:29:6a:1e:7a:65:f5:9f:a6: bc:fd:9c:70:f9:ac:2c:79:fd:4c:a0:18:b9:67:34:b5:3e:d5: b9:0c:1e:c3:f0:20:20:b4:89:d6:86:d1:21:98:70:df:9c:d8: 22:c8:21:41:4b:5c:a2:72:74:90:65:1b:d7:39:3d:72:51:77: e1:fb:02:68:d0:81:a2:33:03:78:a8:14:cc:03:64:a8:69:cc: 91:c6:13:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uDf+hyrkim+NiEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Y2ZjMWRjMTktOTdmZi00NjFiLWFiMzUtZTFjMTk0YzEwODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH3eWC3krCPVkVzDfJ+mdB/AlQ32QuSaGSIy tdeiJffkxniCzIWhz9HD1st4Vg+ugE4byqMWIlTAoz9NBEVCG7467AAnmBoy/isy jZGbKUmlrXrcqBgr06XCc8fOH+gd1wlBWoMgP/kspWGPrs9y7O0eFvUZT9KEK1xj 2liM+dig1PK/LvyzMMr4MApkZoiywV18w5ExC1jehEDEaBNAEBlz7TnpCO58a6NV vQ2HTRvn3q2IMxfG8XNtt07Q/ekSiknHNGhUygm0xFOEkRLvPF+A08mcnhJkgach 5OIRdkSEztBeGBGGfch4wjuZAN0aRO+Vza7Rizr2B24agmUVCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP/rbFDCnoPpwyJQ6orV/Y4zlqhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEzMWJlOTMtMWZjZC0z ZmM0LWEzMDctMDQ2MWJiZWY2MWVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGiHB/UWxHkojNSyrZ/1B1CoOcRoUvFX0QJ3sDvYXDpt8PviCgmz ba8U2soWAFDcEVIgKacm8HKrKSKz514y8u1AkgVHgeKjjWyeLhxZI31g09HL0/Qu eap5hvhIRNIaQUc7Kpa++potr+kP1IaCaFuMwZrNjvxLTlWmc5GTBcm+84yG7nGY 1ay8d/gKcWjnOTfZdddbCOtkMGQ8I68xSgFH2rfuk82/vzAlweApah56ZfWfprz9 nHD5rCx5/UygGLlnNLU+1bkMHsPwICC0idaG0SGYcN+c2CLIIUFLXKJydJBlG9c5 PXJRd+H7AmjQgaIzA3ioFMwDZKhpzJHGE0I= -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:05 2025 by rpki-client