$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d436355e-f094-3d6d-9077-beb95e7e4684.roa File: d436355e-f094-3d6d-9077-beb95e7e4684.roa (raw, json) Hash identifier: oS8Y+HI/x46eV4mvpLVWjelrLMTJuCMhaagpJpxuz3c= Subject key identifier: 23:A2:40:A0:91:70:79:BE:6E:3C:BD:9B:B4:41:EE:80:8B:38:EE:F2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9D525B7BDEDC1D1180800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d436355e-f094-3d6d-9077-beb95e7e4684.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:c354::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:d5:25:b7:bd:ed:c1:d1:18:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=e7637d73-0dd9-4859-81a6-638b7b4535b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:76:30:45:ca:3c:dd:c6:67:e6:0e:95:64: 57:df:5b:56:9b:89:a7:38:d9:a6:f9:63:2a:73:c7: 55:0e:c4:ca:40:07:e4:ad:2f:0c:65:00:2b:d2:a0: 94:81:95:2b:00:04:60:6e:20:5f:56:53:64:78:cd: 5a:e3:29:2d:d7:91:ea:9b:35:fb:83:f8:40:3c:3f: fe:34:d8:1e:20:bd:ae:51:9f:58:45:16:92:e2:8a: ad:06:3e:16:2f:08:fc:2a:e4:7d:03:6e:c9:ec:f9: 78:52:1f:ca:91:10:49:34:cb:cb:09:c0:cb:e2:97: 1f:df:f9:e5:ba:21:6e:dc:83:4e:30:0e:3b:85:64: ab:33:8c:56:cf:98:53:ac:87:6b:3e:36:71:f7:f9: 79:a1:64:44:b9:e1:68:97:7c:5c:63:41:f4:02:37: 08:ef:7d:c7:5a:e3:4e:ef:41:66:c3:ac:1e:17:94: 75:94:76:d5:28:06:10:96:63:5a:55:fe:85:7c:18: d4:49:ef:bd:7b:3a:e8:46:1e:77:91:81:df:f6:0a: d4:08:b4:64:2a:a2:d7:4e:ae:0e:99:da:e9:87:af: 88:32:05:08:7d:8b:4e:8f:10:1e:ae:7b:66:d1:73: ba:8d:7f:27:9e:df:11:5e:fa:63:c9:b9:7d:41:d9: 28:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A2:40:A0:91:70:79:BE:6E:3C:BD:9B:B4:41:EE:80:8B:38:EE:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d436355e-f094-3d6d-9077-beb95e7e4684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c354::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:d4:84:af:7c:11:45:a6:45:77:a5:d0:10:9b:b4:58:87:0f: 10:cc:7c:ae:7b:82:03:cc:b9:df:36:87:3d:d2:6c:04:37:04: ea:6c:04:19:b7:b5:00:d8:59:c1:2f:a4:96:60:9b:f0:6c:b7: df:73:ef:15:79:1a:a7:da:00:cf:82:12:57:67:68:fd:0c:b8: 4c:0e:ea:28:3e:3c:e7:7b:af:3a:b4:23:16:d4:06:87:49:dc: 44:ab:0d:53:47:86:bb:9d:46:3c:87:e4:a6:c6:67:9c:2f:25: d7:dd:1b:bd:e1:15:22:15:c0:b5:7c:b7:48:54:83:f9:bb:b1: 3b:fb:11:1f:45:e2:e7:9f:87:e2:cf:3f:23:3a:79:d7:df:68: e1:eb:ca:fc:40:7f:ce:57:c4:1c:5d:4e:8f:a7:8e:08:b9:35: b3:d3:73:22:8e:01:cd:ab:23:15:15:03:a5:be:be:75:4a:13: ed:44:b7:04:e3:f3:e4:73:b9:67:2b:8e:a4:c5:0b:77:17:c3: 02:21:a6:d9:18:f5:76:36:34:d5:b7:3a:96:92:e7:97:a1:df: 1f:e7:2c:68:f2:6b:3c:bd:99:2b:9c:3f:48:f0:60:ff:f8:ce: d0:96:c0:e0:2f:d5:23:b5:31:33:1e:5f:e4:03:f6:6d:e4:cb: 56:51:7a:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9udUlt73twdEYCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZTc2MzdkNzMtMGRkOS00ODU5LTgxYTYtNjM4YjdiNDUzNWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSh2MEXKPN3GZ+YOlWRX31tWm4mnONmm+WMq c8dVDsTKQAfkrS8MZQAr0qCUgZUrAARgbiBfVlNkeM1a4ykt15HqmzX7g/hAPD/+ NNgeIL2uUZ9YRRaS4oqtBj4WLwj8KuR9A27J7Pl4Uh/KkRBJNMvLCcDL4pcf3/nl uiFu3INOMA47hWSrM4xWz5hTrIdrPjZx9/l5oWREueFol3xcY0H0AjcI733HWuNO 70Fmw6weF5R1lHbVKAYQlmNaVf6FfBjUSe+9ezroRh53kYHf9grUCLRkKqLXTq4O mdrph6+IMgUIfYtOjxAerntm0XO6jX8nnt8RXvpjybl9Qdko/wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCOiQKCRcHm+bjy9m7RB7oCLOO7yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQzNjM1NWUtZjA5NC0z ZDZkLTkwNzctYmViOTVlN2U0Njg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcNU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALnUhK98EUWmRXel0BCbtFiHDxDMfK57ggPMud82hz3SbAQ3BOps BBm3tQDYWcEvpJZgm/Bst99z7xV5GqfaAM+CEldnaP0MuEwO6ig+POd7rzq0IxbU BodJ3ESrDVNHhrudRjyH5KbGZ5wvJdfdG73hFSIVwLV8t0hUg/m7sTv7ER9F4uef h+LPPyM6edffaOHryvxAf85XxBxdTo+njgi5NbPTcyKOAc2rIxUVA6W+vnVKE+1E twTj8+RzuWcrjqTFC3cXwwIhptkY9XY2NNW3OpaS55eh3x/nLGjyazy9mSucP0jw YP/4ztCWwOAv1SO1MTMeX+QD9m3ky1ZRemI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:04:33 2025 by rpki-client