$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e37197e-64fb-3df3-9d21-b6a3f3de8413.roa File: 8e37197e-64fb-3df3-9d21-b6a3f3de8413.roa (raw, json) Hash identifier: adi98Y/ociBno/i0ojNT/wUvH6KycB12QY5YDfKYHEQ= Subject key identifier: B4:70:88:08:8E:55:D3:BC:17:49:81:F6:AD:1C:AB:4B:F6:A7:FF:D2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A9018492EA27F83A3DEC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e37197e-64fb-3df3-9d21-b6a3f3de8413.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 2001:559:852e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:01:84:92:ea:27:f8:3a:3d:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=68063ef9-27f5-4b0d-8cbc-5258afab696b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3f:73:10:7d:88:79:bc:01:2f:92:f9:8f:56: 4f:c9:bf:f8:48:fd:3a:07:49:a1:bd:44:98:b9:ed: 55:ef:dd:e8:93:63:4f:29:ba:28:e2:b9:a7:8f:bb: 01:95:01:ef:19:a3:30:10:ff:a8:38:d6:1b:61:93: 56:f8:6d:9b:25:b6:bd:95:2a:16:19:e9:1b:51:97: 3b:a6:c8:66:53:2d:c0:b0:25:74:34:43:b0:fa:ff: 9d:49:09:32:56:64:df:9f:65:bf:bb:7c:6f:39:e6: 4b:c8:e9:d6:ac:ab:7e:d9:65:f5:a7:53:74:7d:ec: f8:b0:46:c2:03:cf:02:f5:5c:da:0f:af:34:ca:9b: 62:ca:bc:c5:0e:1b:b1:01:d6:23:f7:af:e1:37:10: f3:e4:1f:3f:2a:6c:32:11:cd:ac:a4:2a:5a:13:d2: 33:64:f3:2c:3c:3b:82:3a:60:61:f7:79:12:9e:93: 68:65:30:7b:54:3e:c2:1c:bd:e6:00:04:d9:e6:23: 3c:77:ef:a7:ae:cd:c3:d8:e3:6d:79:fe:67:e6:d2: 59:7e:59:57:22:bf:88:60:d5:6c:20:5a:b8:06:d3: dd:a9:29:04:f9:bd:7d:c8:cb:5b:8f:87:9a:a5:ce: 5d:d0:19:bd:50:c2:1c:f3:77:00:1f:70:a5:e7:2f: 06:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:70:88:08:8E:55:D3:BC:17:49:81:F6:AD:1C:AB:4B:F6:A7:FF:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e37197e-64fb-3df3-9d21-b6a3f3de8413.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:852e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:96:75:e8:80:2a:ed:7f:45:f8:8b:aa:08:1b:3b:08:91:44: 14:06:35:69:1d:c1:fd:86:9d:b5:91:4b:7b:75:64:d2:8c:42: 20:0b:fc:9e:70:50:c6:56:47:16:37:db:eb:fd:34:70:ae:06: 66:70:75:ed:43:36:7f:69:79:60:51:9b:d4:5b:d1:79:e7:21: 85:19:07:e4:53:54:c9:6d:45:e5:40:d4:98:8b:e0:80:29:d9: b9:3b:ca:1b:75:4c:c1:e9:11:32:71:25:53:e0:d1:20:25:4d: 10:e3:c1:99:2b:7b:fe:37:0c:63:25:2f:8c:df:0f:53:cd:1b: 9c:eb:1b:eb:84:2c:24:d0:b1:f8:9e:86:62:6e:22:3b:a6:49: 0e:bb:4f:5b:7a:a2:70:61:6f:0e:94:3e:58:9a:d4:00:89:e2: 5b:06:25:c9:80:14:e1:c7:cd:ef:ac:e1:dd:7d:5c:12:0d:30: 73:ea:dc:48:dd:2a:45:01:81:17:f8:e2:d4:4b:17:7c:5c:e5: 77:3c:ab:a3:d1:50:68:da:d2:96:11:a2:64:a3:cc:08:96:57: a2:b7:ac:32:08:8b:1e:74:11:6d:96:00:26:c7:df:9e:81:88: 84:12:1c:73:b6:50:27:64:48:cf:d1:77:2a:c9:6c:80:5e:e8: ad:68:42:6a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuVqQGEkuon+Do97AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjgwNjNlZjktMjdmNS00YjBkLThjYmMtNTI1OGFmYWI2OTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT9zEH2IebwBL5L5j1ZPyb/4SP06B0mhvUSY ue1V793ok2NPKboo4rmnj7sBlQHvGaMwEP+oONYbYZNW+G2bJba9lSoWGekbUZc7 pshmUy3AsCV0NEOw+v+dSQkyVmTfn2W/u3xvOeZLyOnWrKt+2WX1p1N0fez4sEbC A88C9VzaD680yptiyrzFDhuxAdYj96/hNxDz5B8/KmwyEc2spCpaE9IzZPMsPDuC OmBh93kSnpNoZTB7VD7CHL3mAATZ5iM8d++nrs3D2ONtef5n5tJZfllXIr+IYNVs IFq4BtPdqSkE+b19yMtbj4eapc5d0Bm9UMIc83cAH3Cl5y8G9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLRwiAiOVdO8F0mB9q0cq0v2p//SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGUzNzE5N2UtNjRmYi0z ZGYzLTlkMjEtYjZhM2YzZGU4NDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYUu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACuWdeiAKu1/RfiLqggbOwiRRBQGNWkdwf2GnbWRS3t1ZNKMQiAL /J5wUMZWRxY32+v9NHCuBmZwde1DNn9peWBRm9Rb0XnnIYUZB+RTVMltReVA1JiL 4IAp2bk7yht1TMHpETJxJVPg0SAlTRDjwZkre/43DGMlL4zfD1PNG5zrG+uELCTQ sfiehmJuIjumSQ67T1t6onBhbw6UPlia1ACJ4lsGJcmAFOHHze+s4d19XBINMHPq 3EjdKkUBgRf44tRLF3xc5Xc8q6PRUGja0pYRomSjzAiWV6K3rDIIix50EW2WACbH 356BiIQSHHO2UCdkSM/RdyrJbIBe6K1oQmo= -----END CERTIFICATE-----Generated at Tue Oct 21 21:47:24 2025 by rpki-client