$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43815d8a-3301-3132-8b08-db9fa49a970b.roa File: 43815d8a-3301-3132-8b08-db9fa49a970b.roa (raw, json) Hash identifier: 8bWWzgq82CvI98yK3K2ipZEzaw0y3PM6h6skTSZWZWI= Subject key identifier: 90:DE:F7:F3:16:36:38:9B:EF:B3:6E:A2:B1:A6:79:7F:B5:00:19:AF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB8742096C95D57013CEF00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43815d8a-3301-3132-8b08-db9fa49a970b.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33659 IP address blocks: 2001:559:339::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b8:74:20:96:c9:5d:57:01:3c:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=0dc20149-7686-4e08-ab4a-e7ea2a6e42f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e5:58:97:44:26:60:ea:09:53:2d:1a:01:f8: fb:52:7f:a8:4c:7a:c1:98:91:a2:d3:99:7e:47:46: 33:6e:57:b8:7b:0d:cc:6c:15:3e:2f:49:e9:de:e4: 51:a5:cd:c2:a8:36:ee:0f:bb:5c:4d:ab:15:3d:42: 96:c0:a5:95:96:df:b1:8d:91:91:65:e8:32:58:be: d0:18:32:6f:89:c3:50:8c:21:cf:f0:18:f1:c5:61: 3f:f4:54:ef:f7:04:f9:13:e6:27:b1:a4:89:c8:bb: b8:7a:75:1c:13:20:43:5c:3c:bb:f9:70:69:5f:3b: 6b:c0:3a:a3:bd:cc:1f:c9:f9:85:1c:95:4d:16:49: f2:71:73:2d:5f:8d:c1:57:bd:e3:e9:40:34:22:31: 0a:c5:f2:3a:c9:14:33:de:52:6e:60:de:49:25:f3: 83:7e:b9:c1:4f:19:82:5f:71:58:c5:a6:be:9b:89: 1d:a2:72:57:62:1c:db:fc:d4:8f:28:62:78:d6:ef: 46:7d:d2:2b:ca:1e:7b:9e:f5:ad:7c:e0:7b:4a:26: 5c:a3:e5:91:8b:51:6e:ac:35:33:2f:cc:12:e3:29: 89:20:ce:08:97:86:bf:da:c0:b5:54:96:27:e7:ed: 31:ee:37:42:32:81:6f:f9:d7:7e:cd:5d:d4:54:45: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DE:F7:F3:16:36:38:9B:EF:B3:6E:A2:B1:A6:79:7F:B5:00:19:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43815d8a-3301-3132-8b08-db9fa49a970b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:339::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:83:e8:07:d2:e1:b9:bf:83:e7:0e:8e:00:0e:54:4d:f8:9c: 1f:f4:b5:97:11:23:aa:d6:96:40:aa:7f:5e:22:a5:f1:c5:42: 1f:ba:2e:c8:22:b8:27:13:19:2e:f3:b2:38:20:75:9d:08:6e: bc:38:60:29:2b:3e:13:4c:93:41:93:c2:12:02:be:a0:d4:dd: 05:1a:d6:6a:1d:df:ed:be:c4:90:6d:43:47:b9:49:12:9f:4a: 5e:d9:a1:1e:1b:62:94:16:63:31:46:2b:e8:ba:21:46:f6:0f: 03:8e:97:86:72:c0:94:01:f6:0a:b2:3a:f4:a1:53:53:52:5d: 93:3a:b2:d2:c0:66:d8:67:82:c9:06:bc:60:40:56:b1:4f:47: a9:10:52:57:cb:22:82:40:7b:67:70:39:ca:ac:cb:0a:93:82: 21:7a:6c:6a:d9:58:5f:2e:96:58:56:71:0f:f2:b7:38:b4:96: da:3a:d8:7f:dc:4f:1d:b9:20:de:2d:5c:47:05:0b:0d:18:65: 38:f7:9a:f9:19:06:66:31:b2:84:86:50:db:b6:ce:d3:cd:a7: 24:9d:af:7d:d6:6d:32:0c:62:1b:82:13:03:bb:0f:d6:31:1c: a6:74:11:8c:a6:e6:a2:ab:1a:77:ca:30:02:85:5f:7a:a1:a8: 97:b8:1d:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uHQglsldVwE87wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk MGRjMjAxNDktNzY4Ni00ZTA4LWFiNGEtZTdlYTJhNmU0MmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheVYl0QmYOoJUy0aAfj7Un+oTHrBmJGi05l+ R0Yzble4ew3MbBU+L0np3uRRpc3CqDbuD7tcTasVPUKWwKWVlt+xjZGRZegyWL7Q GDJvicNQjCHP8BjxxWE/9FTv9wT5E+YnsaSJyLu4enUcEyBDXDy7+XBpXztrwDqj vcwfyfmFHJVNFknycXMtX43BV73j6UA0IjEKxfI6yRQz3lJuYN5JJfODfrnBTxmC X3FYxaa+m4kdonJXYhzb/NSPKGJ41u9GfdIryh57nvWtfOB7SiZco+WRi1FurDUz L8wS4ymJIM4Il4a/2sC1VJYn5+0x7jdCMoFv+dd+zV3UVEWLVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJDe9/MWNjib77NuorGmeX+1ABmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDM4MTVkOGEtMzMwMS0z MTMyLThiMDgtZGI5ZmE0OWE5NzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQM5 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMiD6AfS4bm/g+cOjgAOVE34nB/0tZcRI6rWlkCqf14ipfHFQh+6 LsgiuCcTGS7zsjggdZ0Ibrw4YCkrPhNMk0GTwhICvqDU3QUa1mod3+2+xJBtQ0e5 SRKfSl7ZoR4bYpQWYzFGK+i6IUb2DwOOl4ZywJQB9gqyOvShU1NSXZM6stLAZthn gskGvGBAVrFPR6kQUlfLIoJAe2dwOcqsywqTgiF6bGrZWF8ullhWcQ/ytzi0lto6 2H/cTx25IN4tXEcFCw0YZTj3mvkZBmYxsoSGUNu2ztPNpySdr33WbTIMYhuCEwO7 D9YxHKZ0EYym5qKrGnfKMAKFX3qhqJe4Hao= -----END CERTIFICATE-----Generated at Wed Nov 5 01:00:11 2025 by rpki-client