$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa54c5ad-60a1-3041-a0d1-f84cec167a1b.roa File: aa54c5ad-60a1-3041-a0d1-f84cec167a1b.roa (raw, json) Hash identifier: 9zjRpQN3UFrhIX3Q0JuvEz2v6WDaRGjVdePcjhtmgHQ= Subject key identifier: 34:F4:EC:11:EC:20:A0:ED:BC:55:E3:AF:E7:C4:DF:53:D4:72:10:5D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9F314D122941371ED0B6A Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa54c5ad-60a1-3041-a0d1-f84cec167a1b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:816b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:f3:14:d1:22:94:13:71:ed:0b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8147539d-5b56-4995-b2a0-df35215407ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:56:44:57:b7:2f:1b:58:90:4d:76:c1:b5:a0: 0d:1d:28:57:be:d6:bc:a6:00:fd:0c:56:53:30:99: 20:42:a0:e6:8f:f7:68:83:f6:58:37:4b:ca:a1:7e: 61:14:fe:c9:85:88:e8:cc:ba:6d:dc:aa:fa:2d:86: f7:fe:93:80:c9:53:31:e9:e5:23:47:37:5d:ba:37: 40:d6:c2:37:df:75:64:eb:c4:fd:5c:e9:f4:e6:17: b7:b1:7a:44:7e:74:69:2f:1c:e2:0a:74:c5:22:95: ea:9d:38:71:65:58:87:20:d3:c3:2f:af:91:1f:96: 89:89:86:8f:c5:c4:3c:fa:57:62:45:ba:e2:4a:cf: 1f:e5:f3:5c:4d:a1:40:8a:fb:72:7d:d1:d9:f3:4c: 26:ce:ea:51:1f:ea:4d:39:f2:d0:01:52:57:ed:1e: 45:bf:0d:70:a4:86:a9:02:15:38:a5:8e:71:d1:39: b9:af:fe:c2:91:9e:8d:58:ce:96:d5:7d:25:13:05: e7:f9:18:60:5c:7c:bc:c5:74:f2:25:46:c4:77:34: f4:8c:35:64:90:33:30:fa:d1:2e:be:97:a1:61:eb: 0a:b1:ac:ba:51:1f:35:67:24:2e:10:40:cd:ae:c7: cc:bb:25:09:d9:8a:6f:54:1a:81:7f:4d:70:12:56: a3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F4:EC:11:EC:20:A0:ED:BC:55:E3:AF:E7:C4:DF:53:D4:72:10:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa54c5ad-60a1-3041-a0d1-f84cec167a1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:816b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:f4:13:3c:f2:44:35:1f:da:f8:77:b6:ca:88:04:c4:0d:1c: ff:d8:d5:ed:19:80:d0:b8:81:a8:62:59:7b:fe:86:bd:8c:c6: ca:01:7c:f5:1b:9c:06:33:fe:ce:15:3d:95:e5:14:b0:f4:92: b9:4e:a0:f4:53:28:d6:3b:9f:a6:fa:0b:c4:45:88:e4:57:b7: 37:55:9f:39:45:1a:08:60:a4:1f:09:f6:70:69:20:e9:cc:29: 4d:8c:96:57:fc:2a:bb:d2:93:80:8d:25:3d:fe:da:a0:f8:29: 97:21:77:7e:f0:1b:5d:49:4c:a9:d9:a5:cf:de:74:58:f8:1d: 78:6b:08:85:1e:20:95:41:18:32:0e:9f:5f:7f:f8:2c:61:23: 63:a3:8d:60:59:6e:31:48:8e:79:ee:b8:be:8b:9f:dd:48:0a: e1:69:2f:16:af:09:28:60:95:31:25:df:1b:1e:d5:05:99:d1: 18:ac:92:ee:11:69:97:21:f5:44:94:0a:b0:8b:d1:b5:c5:5c: 87:74:f9:5b:cf:1c:8b:80:31:da:c9:6b:e1:f8:3b:d7:51:88: 09:d8:45:04:83:08:1f:62:3f:4d:11:c7:7a:56:dc:79:26:41: 3e:16:ad:d4:94:d1:b4:06:b4:86:64:d2:5f:df:6d:e8:7e:de: e2:86:3a:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ufMU0SKUE3HtC2owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ODE0NzUzOWQtNWI1Ni00OTk1LWIyYTAtZGYzNTIxNTQwN2FkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1ZEV7cvG1iQTXbBtaANHShXvta8pgD9DFZT MJkgQqDmj/dog/ZYN0vKoX5hFP7JhYjozLpt3Kr6LYb3/pOAyVMx6eUjRzddujdA 1sI333Vk68T9XOn05he3sXpEfnRpLxziCnTFIpXqnThxZViHINPDL6+RH5aJiYaP xcQ8+ldiRbriSs8f5fNcTaFAivtyfdHZ80wmzupRH+pNOfLQAVJX7R5Fvw1wpIap AhU4pY5x0Tm5r/7CkZ6NWM6W1X0lEwXn+RhgXHy8xXTyJUbEdzT0jDVkkDMw+tEu vpehYesKsay6UR81ZyQuEEDNrsfMuyUJ2YpvVBqBf01wElajTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDT07BHsIKDtvFXjr+fE31PUchBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWE1NGM1YWQtNjBhMS0z MDQxLWEwZDEtZjg0Y2VjMTY3YTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYFr MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE30EzzyRDUf2vh3tsqIBMQNHP/Y1e0ZgNC4gahiWXv+hr2MxsoB fPUbnAYz/s4VPZXlFLD0krlOoPRTKNY7n6b6C8RFiORXtzdVnzlFGghgpB8J9nBp IOnMKU2Mllf8KrvSk4CNJT3+2qD4KZchd37wG11JTKnZpc/edFj4HXhrCIUeIJVB GDIOn19/+CxhI2OjjWBZbjFIjnnuuL6Ln91ICuFpLxavCShglTEl3xse1QWZ0Ris ku4RaZch9USUCrCL0bXFXId0+VvPHIuAMdrJa+H4O9dRiAnYRQSDCB9iP00Rx3pW 3HkmQT4WrdSU0bQGtIZk0l/fbeh+3uKGOlw= -----END CERTIFICATE-----Generated at Mon Oct 20 13:12:16 2025 by rpki-client