$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa File: aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa (raw, json) Hash identifier: DgBen0FrB34E87cs736wu/sCB6+eqQG3u1g+P6SwZnY= Subject key identifier: B0:1C:BB:26:B1:75:A4:2A:43:06:F7:98:B7:B3:9D:2A:A9:C2:54:64 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7B68BDF37E72E1FC57280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33662 IP address blocks: 2001:559:19b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:b6:8b:df:37:e7:2e:1f:c5:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=2ac990cd-dab5-4728-8ba0-583db3416194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9b:70:68:02:9a:01:22:a9:f1:6b:ae:1e:65: 60:da:4e:95:57:57:99:18:af:b2:ee:be:15:06:64: 65:55:99:61:7a:62:d4:35:8e:76:c8:b6:36:c1:32: 6d:a3:33:cc:ba:57:e1:4c:97:07:d5:07:ab:08:65: 47:f6:6a:3c:c7:e2:9e:6f:ec:76:1f:d3:bb:72:1d: 64:17:79:8d:7b:4f:ed:d8:2f:09:7b:e7:ea:09:27: 72:a5:84:5c:27:6f:b0:9a:23:94:9c:1c:b3:5c:3d: d9:bf:d6:a3:3b:02:7c:a0:0c:b3:bd:1b:8b:52:15: 77:e6:69:03:63:cb:03:93:2e:f7:7c:29:b2:79:c4: 97:2d:3b:c7:4a:e7:4b:1e:85:8b:80:b1:df:48:38: 7b:bf:46:fd:c1:23:97:41:17:73:27:a5:0e:b5:46: 98:9a:a5:81:e0:46:65:59:cc:a8:df:ab:e9:82:7e: ba:c6:02:fe:71:76:16:21:5e:45:24:3e:0f:43:b0: 7a:e4:3a:19:34:0a:44:7d:19:4c:1a:0c:f2:d2:77: fd:33:f5:02:f0:4b:67:46:5b:a1:3e:cb:7d:2a:70: ea:cd:8d:4b:ac:65:92:eb:a2:93:ed:0b:5f:ce:e5: 6a:46:90:f3:6b:88:0b:c6:77:95:fd:c5:11:93:43: 85:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1C:BB:26:B1:75:A4:2A:43:06:F7:98:B7:B3:9D:2A:A9:C2:54:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:19b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:1e:d2:87:28:d0:47:66:6a:3b:0e:59:c9:c5:67:63:8c:c0: 43:fc:f0:d5:60:0a:0a:26:7e:68:53:70:f4:a1:af:89:e2:51: 42:80:5c:11:a6:11:a7:99:a7:6d:15:32:65:de:75:89:e2:af: c0:c4:58:b5:eb:b3:58:39:d1:3b:ec:64:43:a8:18:c3:fe:c3: ac:b1:25:07:10:c7:1a:eb:92:7c:f8:bf:d3:66:d6:05:47:95: d6:e9:c5:03:60:79:e0:3c:8c:bf:57:c0:b0:bc:e2:22:a8:0b: 5e:94:0d:1e:28:30:22:80:4d:f0:1a:9c:d5:64:8e:51:5a:c3: 3b:e8:06:92:1b:45:30:92:96:29:b0:19:6b:29:ff:e0:a6:23: cd:39:1f:75:43:d2:09:98:04:ed:58:6c:46:09:ab:4b:c9:8a: 92:4a:51:87:bc:a3:bc:63:94:1d:25:d6:8f:23:81:62:d9:66: c3:d9:88:f7:7f:f0:0b:1c:a9:5b:cd:fd:d5:38:bc:3d:ff:8f: c0:c8:7b:d9:91:62:60:af:35:af:62:b9:e0:23:e3:72:af:a1: 20:a6:2f:05:5c:5f:16:e0:48:7a:27:80:0a:c1:95:7a:76:51: 5a:a4:ac:f4:1c:f7:dc:a8:08:51:f9:2a:23:9e:75:c4:c0:01: 2a:6b:ef:ac -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t7aL3zfnLh/FcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MmFjOTkwY2QtZGFiNS00NzI4LThiYTAtNTgzZGIzNDE2MTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZtwaAKaASKp8WuuHmVg2k6VV1eZGK+y7r4V BmRlVZlhemLUNY52yLY2wTJtozPMulfhTJcH1QerCGVH9mo8x+Keb+x2H9O7ch1k F3mNe0/t2C8Je+fqCSdypYRcJ2+wmiOUnByzXD3Zv9ajOwJ8oAyzvRuLUhV35mkD Y8sDky73fCmyecSXLTvHSudLHoWLgLHfSDh7v0b9wSOXQRdzJ6UOtUaYmqWB4EZl Wcyo36vpgn66xgL+cXYWIV5FJD4PQ7B65DoZNApEfRlMGgzy0nf9M/UC8EtnRluh Pst9KnDqzY1LrGWS66KT7QtfzuVqRpDza4gLxneV/cURk0OF7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLAcuyaxdaQqQwb3mLeznSqpwlRkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFhMjUwMzUtZTllMy0z ZjllLTgzNGYtMjMxZWY0OWE1NGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQGb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANUe0oco0EdmajsOWcnFZ2OMwEP88NVgCgomfmhTcPShr4niUUKA XBGmEaeZp20VMmXedYnir8DEWLXrs1g50TvsZEOoGMP+w6yxJQcQxxrrknz4v9Nm 1gVHldbpxQNgeeA8jL9XwLC84iKoC16UDR4oMCKATfAanNVkjlFawzvoBpIbRTCS limwGWsp/+CmI805H3VD0gmYBO1YbEYJq0vJipJKUYe8o7xjlB0l1o8jgWLZZsPZ iPd/8AscqVvN/dU4vD3/j8DIe9mRYmCvNa9iueAj43KvoSCmLwVcXxbgSHongArB lXp2UVqkrPQc99yoCFH5KiOedcTAASpr76w= -----END CERTIFICATE-----Generated at Mon Oct 20 15:21:05 2025 by rpki-client