$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d122170b-ea00-3e32-9a07-3f0b201a475c.roa File: d122170b-ea00-3e32-9a07-3f0b201a475c.roa (raw, json) Hash identifier: 651X7m3WdqUAkoGLt8jUXNAu4Cam85W9a/S2QMPtUeE= Subject key identifier: 6C:B5:D8:9F:38:FC:3A:49:D5:DD:0C:33:1C:71:E3:16:DB:8E:EA:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB87552563C93C187353D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d122170b-ea00-3e32-9a07-3f0b201a475c.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:559:453::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:75:52:56:3c:93:c1:87:35:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=e74ee1be-9b0e-4545-8ac8-50d5243aae40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:41:be:e7:cb:bd:ae:fb:12:ee:12:3a:b3:ad: d2:24:45:bf:80:1d:33:7d:f3:37:aa:1d:0f:88:f3: 56:6e:84:85:5b:07:22:89:25:81:d7:46:3b:44:c3: 41:23:cd:90:2c:6f:25:c7:60:9e:75:fd:06:b7:28: ae:ca:93:3f:0d:df:aa:8d:4f:26:38:22:85:d6:4e: 37:f8:37:76:d3:f8:9b:44:e6:b2:23:83:f7:f2:9c: ed:6e:cb:eb:f9:79:86:ee:15:3c:f4:41:db:e7:15: 56:4f:1f:e7:35:fc:8c:e9:fa:4c:4e:8d:17:95:00: 96:ab:70:86:00:3e:02:a6:de:90:38:3e:ff:50:3a: cf:38:b3:ca:81:34:52:9c:9d:1a:61:a9:b4:9c:53: a4:f2:74:35:0c:b6:19:d4:32:ed:da:22:24:0b:bb: e7:e9:46:af:20:20:f6:2e:41:c2:75:41:05:4e:57: 31:77:90:b9:f0:53:4d:eb:f0:3c:b6:4a:94:20:a2: 6d:b6:19:37:9e:e1:2b:98:0f:26:07:54:46:cc:f7: 32:3b:10:d8:c6:e2:16:a1:0e:b9:7a:db:0e:0a:ee: 61:f6:83:22:6e:01:b1:0e:7b:0a:ea:8a:f8:b0:2a: 38:57:b2:1a:b0:ba:d9:ac:1e:91:02:2a:8b:97:cd: 58:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B5:D8:9F:38:FC:3A:49:D5:DD:0C:33:1C:71:E3:16:DB:8E:EA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d122170b-ea00-3e32-9a07-3f0b201a475c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:453::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:7e:48:09:c5:2b:95:42:70:9a:a7:e2:3b:c4:99:7d:0d:b3: d7:c1:32:b8:6f:9f:8a:1d:45:f4:a5:fa:20:04:bc:3d:c1:52: e6:1d:ba:cb:5f:0a:5c:a8:52:97:a6:12:48:95:0e:70:b5:e4: be:50:e2:9f:79:69:a7:99:47:be:97:cb:ec:00:5b:fb:10:14: c3:aa:cf:43:0e:25:86:58:d0:29:6f:a5:d4:79:60:94:24:49: ef:08:9d:18:ba:9a:0c:c0:e8:78:61:b2:41:95:2b:91:06:d9: 04:e6:de:59:ff:b4:9d:45:94:5c:72:51:8d:e6:82:9e:4d:9f: 53:cf:c5:6e:27:25:67:2d:62:55:45:93:0c:1f:d8:9a:17:8c: 46:6b:66:59:be:e9:ea:9b:53:b4:4c:3e:48:2d:18:2c:5d:1f: 04:84:bc:79:70:6f:50:26:cd:91:1a:be:11:30:a2:20:8d:a0: 59:82:81:14:d0:25:3b:06:4a:a0:ad:e0:da:c2:4b:b4:91:9f: af:2f:10:55:2a:bc:30:55:a3:cc:07:bf:16:cd:3e:a1:6a:c1: 6b:9f:c2:66:7c:ac:82:e6:40:83:6b:4a:ac:38:7e:20:05:20: 59:55:3d:86:51:d9:88:4f:e9:b4:41:1c:5b:60:17:53:0b:8b: e4:0c:d0:54 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uHVSVjyTwYc1PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZTc0ZWUxYmUtOWIwZS00NTQ1LThhYzgtNTBkNTI0M2FhZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0G+58u9rvsS7hI6s63SJEW/gB0zffM3qh0P iPNWboSFWwciiSWB10Y7RMNBI82QLG8lx2Cedf0GtyiuypM/Dd+qjU8mOCKF1k43 +Dd20/ibROayI4P38pztbsvr+XmG7hU89EHb5xVWTx/nNfyM6fpMTo0XlQCWq3CG AD4Cpt6QOD7/UDrPOLPKgTRSnJ0aYam0nFOk8nQ1DLYZ1DLt2iIkC7vn6UavICD2 LkHCdUEFTlcxd5C58FNN6/A8tkqUIKJtthk3nuErmA8mB1RGzPcyOxDYxuIWoQ65 etsOCu5h9oMibgGxDnsK6or4sCo4V7IasLrZrB6RAiqLl81Y4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGy12J84/DpJ1d0MMxxx4xbbjuq0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDEyMjE3MGItZWEwMC0z ZTMyLTlhMDctM2YwYjIwMWE0NzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQRT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA1+SAnFK5VCcJqn4jvEmX0Ns9fBMrhvn4odRfSl+iAEvD3BUuYd ustfClyoUpemEkiVDnC15L5Q4p95aaeZR76Xy+wAW/sQFMOqz0MOJYZY0ClvpdR5 YJQkSe8InRi6mgzA6HhhskGVK5EG2QTm3ln/tJ1FlFxyUY3mgp5Nn1PPxW4nJWct YlVFkwwf2JoXjEZrZlm+6eqbU7RMPkgtGCxdHwSEvHlwb1AmzZEavhEwoiCNoFmC gRTQJTsGSqCt4NrCS7SRn68vEFUqvDBVo8wHvxbNPqFqwWufwmZ8rILmQINrSqw4 fiAFIFlVPYZR2YhP6bRBHFtgF1MLi+QM0FQ= -----END CERTIFICATE-----Generated at Tue Oct 21 21:43:08 2025 by rpki-client