$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e78a81e1-1af4-3a02-a5f1-9473ea91b3e1.roa File: e78a81e1-1af4-3a02-a5f1-9473ea91b3e1.roa (raw, json) Hash identifier: N4nzmX/pWr7m9hXI1doPzi3D0kQq2ogNYZRlnj4Ow7c= Subject key identifier: 74:6C:92:00:75:3C:86:2E:AC:33:DD:23:53:DC:B6:F2:B5:0D:53:8C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9F874B2E5FB3878B21540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e78a81e1-1af4-3a02-a5f1-9473ea91b3e1.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33657 IP address blocks: 2001:559:a009::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:f8:74:b2:e5:fb:38:78:b2:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=6adb122d-40c4-475a-bece-bebd801f23d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:7c:db:a5:c3:9c:fe:9b:0c:66:b0:c4:ea:76: 69:df:36:72:0c:16:6d:31:d8:a5:cc:0b:55:c1:43: 5b:04:a3:4c:61:19:b6:92:ea:33:b3:10:84:e5:67: ce:04:dd:8a:0d:64:b6:95:e8:46:84:23:ae:37:a7: d9:9b:1c:5c:38:0a:ae:35:0d:0b:0c:90:f5:12:e5: e6:84:f7:0a:03:62:4f:f1:16:f7:e9:e1:da:eb:82: f5:be:37:9b:e9:bb:ca:db:ed:4b:82:fc:53:04:69: 1c:bd:6d:24:f3:c9:7e:ac:f9:80:6e:3d:7a:80:cf: 0f:73:c3:f6:ca:af:9a:f7:2a:5d:be:28:77:8e:78: 12:2b:e0:ff:23:5d:97:e2:53:a1:9b:a8:cc:56:64: af:e8:87:fd:6b:6b:71:c5:0a:76:25:5e:4c:d6:38: 61:8e:7e:40:a0:09:82:43:a4:40:49:25:3b:de:2f: b5:88:9e:7e:7f:6b:3a:f5:ef:fd:12:62:05:70:73: 48:24:4d:cd:62:21:f8:9f:0b:29:7b:96:6b:7c:2f: e7:10:98:94:df:e4:7e:bb:73:75:f3:45:d2:0f:81: 91:14:43:04:ac:a4:24:56:db:55:cb:d2:6f:ed:25: 20:b2:4e:2a:f2:bb:36:6a:ff:a3:33:36:ad:04:fe: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:6C:92:00:75:3C:86:2E:AC:33:DD:23:53:DC:B6:F2:B5:0D:53:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e78a81e1-1af4-3a02-a5f1-9473ea91b3e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a009::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:aa:1b:27:f7:c0:a5:ff:7d:99:7f:5e:3e:3a:c8:a1:22:ae: dc:15:f6:22:b2:43:d6:38:06:dc:7e:03:cd:dd:f6:24:83:3e: aa:eb:1a:eb:93:27:21:ef:2f:46:21:b3:62:9b:4d:bc:82:8c: 0b:a5:44:86:23:30:5f:c2:3f:5e:7e:92:e0:4d:ab:78:94:78: 07:4d:75:20:b3:f7:3e:cb:43:ed:8d:a5:57:1d:e8:be:8a:d5: e9:70:32:74:5d:b2:c9:37:01:70:03:6f:fe:b5:46:36:66:90: 71:52:27:e9:7d:df:66:6d:3c:9a:df:a9:0f:63:04:b9:6b:f7: 16:97:ee:53:bc:5b:d6:64:a2:72:2c:8f:5e:2f:42:ba:47:b9: 8e:57:6e:a0:e8:8b:ef:5f:82:74:13:84:01:55:5e:b0:15:3f: 92:03:5f:36:e7:c8:36:69:81:d4:47:5b:f5:d2:b9:bb:c5:08: 76:d2:2c:ed:da:9d:5d:cc:b0:e4:1f:08:48:58:a4:78:9f:25: 51:25:bd:e7:05:ca:a7:ce:1e:98:8c:e1:1a:f3:7e:46:23:33: ad:94:e1:d3:c5:c2:13:46:5a:06:f5:04:11:b8:d2:98:42:07: 7a:5c:fc:d7:6c:29:74:f4:87:a7:49:7f:b5:e3:a6:f1:49:ea: cb:a6:be:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9ufh0suX7OHiyFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk NmFkYjEyMmQtNDBjNC00NzVhLWJlY2UtYmViZDgwMWYyM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XzbpcOc/psMZrDE6nZp3zZyDBZtMdilzAtV wUNbBKNMYRm2kuozsxCE5WfOBN2KDWS2lehGhCOuN6fZmxxcOAquNQ0LDJD1EuXm hPcKA2JP8Rb36eHa64L1vjeb6bvK2+1LgvxTBGkcvW0k88l+rPmAbj16gM8Pc8P2 yq+a9ypdvih3jngSK+D/I12X4lOhm6jMVmSv6If9a2txxQp2JV5M1jhhjn5AoAmC Q6RASSU73i+1iJ5+f2s69e/9EmIFcHNIJE3NYiH4nwspe5ZrfC/nEJiU3+R+u3N1 80XSD4GRFEMErKQkVttVy9Jv7SUgsk4q8rs2av+jMzatBP5kYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHRskgB1PIYurDPdI1PctvK1DVOMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTc4YTgxZTEtMWFmNC0z YTAyLWE1ZjEtOTQ3M2VhOTFiM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAJ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKKqGyf3wKX/fZl/Xj46yKEirtwV9iKyQ9Y4Btx+A83d9iSDPqrr GuuTJyHvL0Yhs2KbTbyCjAulRIYjMF/CP15+kuBNq3iUeAdNdSCz9z7LQ+2NpVcd 6L6K1elwMnRdssk3AXADb/61RjZmkHFSJ+l932ZtPJrfqQ9jBLlr9xaX7lO8W9Zk onIsj14vQrpHuY5XbqDoi+9fgnQThAFVXrAVP5IDXzbnyDZpgdRHW/XSubvFCHbS LO3anV3MsOQfCEhYpHifJVElvecFyqfOHpiM4RrzfkYjM62U4dPFwhNGWgb1BBG4 0phCB3pc/NdsKXT0h6dJf7XjpvFJ6sumvnU= -----END CERTIFICATE-----Generated at Mon Oct 20 03:20:03 2025 by rpki-client