$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d06a6991-9c6b-3a4f-8940-72c6e90d3090.roa File: d06a6991-9c6b-3a4f-8940-72c6e90d3090.roa (raw, json) Hash identifier: f+2SwTFyoWsuXGgTLU7WVTW0po7TachqRtVnhx42zFw= Subject key identifier: 5E:2B:FE:1A:AF:75:A8:F3:15:5A:15:BB:2C:84:BD:05:49:2B:8C:77 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9F51EE010A19F89E7E760 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d06a6991-9c6b-3a4f-8940-72c6e90d3090.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:841b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:f5:1e:e0:10:a1:9f:89:e7:e7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=3bead21b-aef5-4cce-8a53-72ce3c2e7b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f4:39:37:4d:ed:18:c0:94:35:60:b1:3b:40: 98:5d:22:e1:a1:72:cb:bd:84:6d:a7:7a:8e:ea:bc: 6c:77:cf:4d:21:5f:d6:ca:fc:23:e6:6f:9a:8b:80: 9c:3a:ae:09:ae:3c:12:fa:f0:c8:04:ed:6b:eb:52: 33:1f:02:45:bd:cc:dc:e5:49:35:8e:78:c6:f7:99: d0:43:de:65:12:82:41:3e:0d:4e:fc:86:11:8f:ff: 75:23:89:5a:3d:72:76:cc:df:e0:0c:9c:e0:f1:00: 34:cd:4d:78:f0:9e:4f:54:67:4c:44:8a:b5:54:07: b0:25:a9:51:06:f3:52:7a:d0:c9:58:36:fc:3a:17: 16:2f:07:f1:a2:87:54:4a:f0:c6:44:dc:16:11:11: 52:b1:36:12:4c:e7:1c:4c:fe:86:4e:83:06:1b:ea: 6e:10:5e:a3:e3:ae:a7:8f:df:38:b9:db:f2:d7:22: 8d:61:f6:32:cf:d4:c6:4d:d2:43:88:a2:61:17:4c: 2d:cd:d5:e0:f0:d2:17:d2:76:5c:20:16:c7:23:69: 68:e8:5e:7a:5a:99:b8:5a:bb:e2:a5:b1:47:74:ce: 49:c1:f9:ef:da:50:6c:ec:6a:c4:1b:27:9e:e3:1f: 98:0a:d2:11:dc:be:a7:4f:7f:7a:cc:a1:23:fc:74: 2d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2B:FE:1A:AF:75:A8:F3:15:5A:15:BB:2C:84:BD:05:49:2B:8C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d06a6991-9c6b-3a4f-8940-72c6e90d3090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:841b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:01:41:23:1f:2d:ac:43:ac:58:9e:a3:e8:ac:17:d8:e7:39: ee:13:e3:37:b8:70:e1:ae:6c:d0:12:05:c6:1d:c7:bc:e4:0b: 1f:a3:bc:db:f1:b1:2a:4e:2e:3f:11:cf:ed:08:3e:8b:a4:f8: 71:07:2c:44:ff:ce:5a:70:8a:9f:41:f8:f9:24:36:33:e8:1b: 78:55:1a:43:a6:9d:0e:78:27:40:01:92:61:cd:af:80:2c:ec: 43:08:ed:1e:c6:34:a4:b6:79:0d:bd:e7:a6:78:4a:42:67:a9: d0:9e:5d:15:5c:1e:50:59:24:b7:61:bc:15:c3:17:f4:16:58: 51:66:6b:a0:be:a3:db:18:ab:e1:42:04:be:33:f7:a6:a2:1f: aa:70:05:a7:a5:85:fe:2d:43:e7:ac:a4:c6:14:28:d4:1c:bf: 0f:ed:5b:40:60:58:8c:83:ce:2f:db:44:81:17:af:b8:76:d9: b5:6e:36:e3:03:e9:61:6e:c8:4c:43:5d:d6:1d:d8:9f:79:ea: 6e:17:9e:c5:fc:97:cb:b2:c4:98:e2:e7:2d:db:84:da:23:77: 59:50:3b:dc:49:9b:8f:8f:5e:11:18:46:5e:38:de:20:9d:bb: 09:55:b7:70:7a:c5:ed:fe:db:56:25:41:31:46:8b:ae:5c:a2: f3:9e:ed:3f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ufUe4BChn4nn52AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk M2JlYWQyMWItYWVmNS00Y2NlLThhNTMtNzJjZTNjMmU3YjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Q5N03tGMCUNWCxO0CYXSLhoXLLvYRtp3qO 6rxsd89NIV/Wyvwj5m+ai4CcOq4JrjwS+vDIBO1r61IzHwJFvczc5Uk1jnjG95nQ Q95lEoJBPg1O/IYRj/91I4laPXJ2zN/gDJzg8QA0zU148J5PVGdMRIq1VAewJalR BvNSetDJWDb8OhcWLwfxoodUSvDGRNwWERFSsTYSTOccTP6GToMGG+puEF6j466n j984udvy1yKNYfYyz9TGTdJDiKJhF0wtzdXg8NIX0nZcIBbHI2lo6F56Wpm4Wrvi pbFHdM5Jwfnv2lBs7GrEGyee4x+YCtIR3L6nT396zKEj/HQtaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF4r/hqvdajzFVoVuyyEvQVJK4x3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA2YTY5OTEtOWM2Yi0z YTRmLTg5NDAtNzJjNmU5MGQzMDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYQb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIkBQSMfLaxDrFieo+isF9jnOe4T4ze4cOGubNASBcYdx7zkCx+j vNvxsSpOLj8Rz+0IPouk+HEHLET/zlpwip9B+PkkNjPoG3hVGkOmnQ54J0ABkmHN r4As7EMI7R7GNKS2eQ2956Z4SkJnqdCeXRVcHlBZJLdhvBXDF/QWWFFma6C+o9sY q+FCBL4z96aiH6pwBaelhf4tQ+espMYUKNQcvw/tW0BgWIyDzi/bRIEXr7h22bVu NuMD6WFuyExDXdYd2J956m4XnsX8l8uyxJji5y3bhNojd1lQO9xJm4+PXhEYRl44 3iCduwlVt3B6xe3+21YlQTFGi65covOe7T8= -----END CERTIFICATE-----Generated at Mon Oct 20 06:38:00 2025 by rpki-client