$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eae567ef-7d29-3d5b-a1c0-a9b6c0539d48.roa File: eae567ef-7d29-3d5b-a1c0-a9b6c0539d48.roa (raw, json) Hash identifier: LnLkzTA4crkx1W/xNgSHYKKRUlkxY9CP1Q/Mps0/9CM= Subject key identifier: BE:08:DB:F6:4F:C4:D6:E2:FC:1F:2D:F1:76:D4:57:3F:69:A4:E8:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9566BAE89B92D8973AC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eae567ef-7d29-3d5b-a1c0-a9b6c0539d48.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33662 IP address blocks: 2001:559:52e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:56:6b:ae:89:b9:2d:89:73:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=f522e299-a44e-44dd-adb5-628697819e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7d:b0:ce:d6:fb:da:2b:33:6b:3c:a6:82:91: 6a:d9:f2:76:4d:b9:27:04:da:fd:30:3c:50:75:16: fa:53:f0:6f:a8:96:50:7b:87:c9:d4:df:42:f7:68: 9a:99:e4:b0:1f:38:a2:23:bf:07:42:66:de:2e:b8: 80:56:90:e5:23:ec:25:69:1e:72:0d:71:84:86:b3: e3:10:dd:18:79:be:09:ea:84:d1:6c:cc:a4:49:41: bf:b4:a9:7c:97:5a:ce:9e:b5:a8:f5:33:5f:43:f4: b8:c4:68:d3:01:01:7d:3b:a5:05:bb:b0:15:a7:dc: 61:a6:32:5f:06:08:a8:4d:3a:16:d1:51:df:f7:47: 44:8f:93:cd:e6:97:0f:c4:b8:01:35:28:de:b7:dd: bb:16:1f:40:0a:c4:4b:80:de:c7:27:79:22:03:93: f4:9c:42:82:19:56:9a:aa:b8:f0:20:4e:6e:4c:36: c9:df:0b:50:42:6a:8a:7c:eb:ee:20:a0:cf:ee:68: 36:2d:a2:93:b1:c4:d1:8a:fd:0c:b5:57:6a:0d:28: a9:05:48:67:fe:47:15:3a:63:a6:db:de:06:e9:3a: 3d:16:b2:4c:df:71:4b:91:92:b0:0e:3b:fa:49:7b: 40:79:72:f6:12:de:30:d3:d8:f2:6a:34:7d:1c:a1: 81:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:08:DB:F6:4F:C4:D6:E2:FC:1F:2D:F1:76:D4:57:3F:69:A4:E8:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eae567ef-7d29-3d5b-a1c0-a9b6c0539d48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:52e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:9c:80:c7:03:db:75:4b:f6:b1:b3:b1:76:96:5f:ba:9a:2f: 0c:71:5a:ed:a6:13:9d:e2:5f:db:79:05:e7:47:03:87:48:68: 9b:7d:de:69:3a:e4:75:90:0e:c6:78:20:63:d8:b9:e0:12:ef: b7:b3:61:0b:c0:36:e1:54:da:d4:f1:7e:03:26:b3:d9:9a:13: f2:03:38:bd:c1:4b:89:82:0d:3e:90:da:47:e9:9a:1e:2a:21: 59:f5:4f:63:68:af:23:e6:d7:95:3a:c5:4f:7a:34:df:c6:cd: 40:34:c1:e0:55:23:ce:82:59:a3:f4:e9:32:94:c1:c2:79:19: be:60:be:f0:66:28:44:3d:8f:3e:93:34:55:54:8b:69:1d:8c: c2:75:b8:71:e6:97:67:a9:a5:62:89:a8:76:09:11:8b:91:c5: 30:90:68:85:de:ab:87:1c:61:c9:15:08:fd:07:7c:7e:c1:f4: 8b:43:91:83:64:c1:7a:70:1a:be:46:ab:33:8d:14:92:d2:e4: b3:64:ff:ac:b9:a6:a0:bf:ea:42:ac:08:8f:c1:b7:9d:e8:b1: 5f:bb:89:20:22:3b:14:b3:d3:d1:a7:f8:63:08:08:3c:e2:2e: c7:59:ac:90:94:50:db:65:e6:97:92:7c:c0:28:94:2b:e3:ae: 6d:8b:bc:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uVZrrom5LYlzrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZjUyMmUyOTktYTQ0ZS00NGRkLWFkYjUtNjI4Njk3ODE5ZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH2wztb72iszazymgpFq2fJ2TbknBNr9MDxQ dRb6U/BvqJZQe4fJ1N9C92iameSwHziiI78HQmbeLriAVpDlI+wlaR5yDXGEhrPj EN0Yeb4J6oTRbMykSUG/tKl8l1rOnrWo9TNfQ/S4xGjTAQF9O6UFu7AVp9xhpjJf BgioTToW0VHf90dEj5PN5pcPxLgBNSjet927Fh9ACsRLgN7HJ3kiA5P0nEKCGVaa qrjwIE5uTDbJ3wtQQmqKfOvuIKDP7mg2LaKTscTRiv0MtVdqDSipBUhn/kcVOmOm 294G6To9FrJM33FLkZKwDjv6SXtAeXL2Et4w09jyajR9HKGBPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL4I2/ZPxNbi/B8t8XbUVz9ppOhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWFlNTY3ZWYtN2QyOS0z ZDViLWExYzAtYTliNmMwNTM5ZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQUu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANWcgMcD23VL9rGzsXaWX7qaLwxxWu2mE53iX9t5BedHA4dIaJt9 3mk65HWQDsZ4IGPYueAS77ezYQvANuFU2tTxfgMms9maE/IDOL3BS4mCDT6Q2kfp mh4qIVn1T2NoryPm15U6xU96NN/GzUA0weBVI86CWaP06TKUwcJ5Gb5gvvBmKEQ9 jz6TNFVUi2kdjMJ1uHHml2eppWKJqHYJEYuRxTCQaIXeq4ccYckVCP0HfH7B9ItD kYNkwXpwGr5GqzONFJLS5LNk/6y5pqC/6kKsCI/Bt53osV+7iSAiOxSz09Gn+GMI CDziLsdZrJCUUNtl5peSfMAolCvjrm2LvJM= -----END CERTIFICATE-----Generated at Mon Oct 20 09:23:05 2025 by rpki-client