$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d41a1d3b-bec2-3dc3-a9dc-b37b804259d6.roa File: d41a1d3b-bec2-3dc3-a9dc-b37b804259d6.roa (raw, json) Hash identifier: tXE3j7fPI6uMiaLvOL35Ygg7naT3cLhWidKucIa8ePQ= Subject key identifier: 6F:10:5C:8C:C8:B2:1E:78:38:0F:EA:D9:84:16:B8:D8:21:22:DC:8F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8DE3E5E5CB8D7C2667280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d41a1d3b-bec2-3dc3-a9dc-b37b804259d6.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 22909 IP address blocks: 2001:559:3b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:de:3e:5e:5c:b8:d7:c2:66:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=8ffccb0d-9c42-4f5e-ba4f-59ee628b5356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e0:42:38:00:97:3a:32:37:9a:ae:56:6a:54: be:ca:8d:3d:a6:b6:38:23:27:ae:83:13:b0:37:6d: 43:6a:47:75:05:e6:47:bb:ed:5c:55:e7:0d:bd:80: 32:31:ed:16:91:8b:22:98:66:3a:b7:2b:ee:1d:33: 5c:ee:8b:5a:35:5d:f5:e2:f8:12:af:00:22:3f:9b: ea:e1:6f:68:1a:c3:dd:15:6d:14:1e:ce:14:0d:ef: 3d:31:47:85:57:ab:72:1c:12:b2:47:46:d4:e2:21: b2:a7:76:af:e1:d5:d6:82:73:03:aa:5a:cf:e0:2d: 20:c3:9b:eb:c5:a5:95:54:d1:a4:86:87:4f:bc:3e: 00:7b:aa:21:b3:40:de:57:6c:42:42:3f:a0:ac:0a: 52:bb:85:1e:c8:cc:d2:8b:d4:94:d2:6d:47:69:7c: 79:24:c8:b2:78:29:e4:98:ce:6f:1d:fe:7e:c0:21: 3c:c4:00:e3:2a:1b:b2:28:f3:f1:09:42:27:a7:98: e5:b1:56:86:ca:3b:82:7f:4a:3a:e2:0e:e2:ee:84: 3f:5a:95:6b:17:5d:61:f8:e2:ac:e8:bf:eb:70:cd: 9e:e3:d2:a8:69:41:30:a7:6e:05:1f:a9:a0:cc:e2: ae:30:52:7d:1b:b7:73:76:8b:0e:fa:c3:fb:79:29: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:10:5C:8C:C8:B2:1E:78:38:0F:EA:D9:84:16:B8:D8:21:22:DC:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d41a1d3b-bec2-3dc3-a9dc-b37b804259d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:3b8::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:2a:ab:86:81:a9:f3:f4:1b:63:82:cf:60:29:87:05:3f:15: 86:41:32:9d:6a:71:32:a8:70:47:1e:cf:27:0a:2d:0c:95:8e: ba:8e:a5:94:f3:37:88:72:d0:a9:79:f1:9e:89:36:7a:df:18: 72:7b:96:04:d1:99:18:af:a5:08:35:ac:d8:4d:5c:c5:98:0d: d2:20:d2:3e:b6:52:81:bd:04:6e:41:3f:5d:a6:81:17:39:b9: 65:1b:f8:56:cb:ee:73:43:a0:da:42:8c:21:14:ae:cb:11:7a: 52:09:57:34:cb:fd:30:78:35:2d:52:94:d6:fa:82:d5:23:d3: b9:e9:a2:d8:cf:7d:bf:7f:11:c4:3b:0f:29:e0:43:f5:72:24: a5:53:59:32:81:70:98:e2:39:14:d1:f9:71:d4:23:6d:11:e8: 47:cb:cc:99:0a:7a:4f:e9:64:b1:f2:c9:a5:bd:0d:0b:2b:c2: cd:fd:98:eb:26:42:48:8c:67:52:5b:3b:7b:9d:75:38:e6:45: 12:70:2e:0d:db:ed:4f:0d:0e:b3:52:0c:12:db:33:6d:8c:d2: cc:c6:e1:08:b5:3d:f1:64:6c:1a:9e:87:3b:1f:e8:2c:6c:79: 48:25:56:0c:0a:c7:ce:43:62:ef:d0:e6:b7:6e:96:89:6f:75: a7:48:09:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uN4+Xly418JmcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk OGZmY2NiMGQtOWM0Mi00ZjVlLWJhNGYtNTllZTYyOGI1MzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+BCOACXOjI3mq5WalS+yo09prY4IyeugxOw N21Dakd1BeZHu+1cVecNvYAyMe0WkYsimGY6tyvuHTNc7otaNV314vgSrwAiP5vq 4W9oGsPdFW0UHs4UDe89MUeFV6tyHBKyR0bU4iGyp3av4dXWgnMDqlrP4C0gw5vr xaWVVNGkhodPvD4Ae6ohs0DeV2xCQj+grApSu4UeyMzSi9SU0m1HaXx5JMiyeCnk mM5vHf5+wCE8xADjKhuyKPPxCUInp5jlsVaGyjuCf0o64g7i7oQ/WpVrF11h+OKs 6L/rcM2e49KoaUEwp24FH6mgzOKuMFJ9G7dzdosO+sP7eSlS8wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG8QXIzIsh54OA/q2YQWuNghItyPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQxYTFkM2ItYmVjMi0z ZGMzLWE5ZGMtYjM3YjgwNDI1OWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQO4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADoqq4aBqfP0G2OCz2AphwU/FYZBMp1qcTKocEcezycKLQyVjrqO pZTzN4hy0Kl58Z6JNnrfGHJ7lgTRmRivpQg1rNhNXMWYDdIg0j62UoG9BG5BP12m gRc5uWUb+FbL7nNDoNpCjCEUrssRelIJVzTL/TB4NS1SlNb6gtUj07npotjPfb9/ EcQ7DyngQ/VyJKVTWTKBcJjiORTR+XHUI20R6EfLzJkKek/pZLHyyaW9DQsrws39 mOsmQkiMZ1JbO3uddTjmRRJwLg3b7U8NDrNSDBLbM22M0szG4Qi1PfFkbBqehzsf 6CxseUglVgwKx85DYu/Q5rdulolvdadICRE= -----END CERTIFICATE-----Generated at Mon Oct 20 12:05:50 2025 by rpki-client