$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae21ee38-afa0-354b-8c1a-2173a91aefa8.roa File: ae21ee38-afa0-354b-8c1a-2173a91aefa8.roa (raw, json) Hash identifier: iXiwQhmd5LehBSkE3wOF72zNJej4nz5az3a2Wa6g0YQ= Subject key identifier: 91:6A:29:02:4C:D8:6D:FD:8E:6F:26:C4:54:BC:12:EF:D0:E5:E5:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584BB45D3714695DC71EA7442980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae21ee38-afa0-354b-8c1a-2173a91aefa8.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 7015 IP address blocks: 2001:559:e024::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:37:14:69:5d:c7:1e:a7:44:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=b97ccd1b-a55f-4c71-9240-08733cfeda4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bd:05:41:6f:1d:f4:37:c3:57:71:98:4e:da: c9:44:59:f9:a5:71:1e:e1:a4:6c:1a:7c:b8:e6:e4: 8a:01:6e:b9:f1:83:b0:77:46:d8:84:b2:f6:08:24: 9a:a8:b2:37:76:ca:d8:ad:c2:5c:44:76:e0:7f:14: 19:af:15:7b:94:1c:9f:7e:b0:0b:3d:e9:da:c0:3f: c9:a0:09:6f:f2:27:47:e7:e5:6a:ea:e3:32:db:2c: ba:eb:df:e1:24:18:78:16:ad:dd:df:73:c4:ce:8f: e3:40:d7:6f:68:ff:28:53:f8:8b:1e:e2:c4:31:3b: 3d:b8:90:ac:8a:6b:f5:b8:cc:48:cf:25:40:a7:ab: 88:9f:28:6a:ae:0c:bd:67:0c:2b:a4:d5:82:a0:37: 7f:de:4a:3d:f0:cb:43:07:e9:ab:35:55:88:78:03: fd:f4:e2:8d:89:6c:e1:e8:bd:75:c5:95:bd:9f:d8: f7:ad:2e:ec:58:54:a3:ce:7a:8a:87:39:89:74:c6: d4:f8:a7:0d:3b:d3:c9:dd:ad:5b:ae:9b:4e:4a:71: 52:db:34:8e:24:38:1d:92:c9:71:36:27:2d:9e:11: df:55:83:f4:8e:1a:17:96:4b:c3:a0:66:5d:f7:86: cb:7c:33:d0:b9:37:d5:99:73:0f:58:aa:cd:b0:12: a8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6A:29:02:4C:D8:6D:FD:8E:6F:26:C4:54:BC:12:EF:D0:E5:E5:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae21ee38-afa0-354b-8c1a-2173a91aefa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:e024::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ae:53:da:58:cb:51:1b:7c:00:f7:97:85:11:01:0d:53:5d: 5a:5b:da:9b:cd:9b:a3:d4:77:cc:c4:a2:d8:fe:9a:5b:1b:a9: 0d:1d:0a:4b:6c:c8:79:22:55:a1:02:a9:51:b5:c7:e5:84:4e: ea:64:ed:c5:3f:1b:3e:02:34:a6:4a:3d:1f:83:b6:6e:a7:71: b5:4e:ee:23:d5:8d:14:eb:c6:ac:28:2c:69:6d:99:b4:e5:f0: 3d:c8:58:d1:e2:32:33:c3:73:55:c7:82:da:21:2b:98:cf:58: 74:fe:24:46:fb:9a:11:df:ab:68:ad:cd:1c:d9:32:97:28:5f: 27:70:7e:93:ff:f0:68:64:42:8c:78:1c:44:f4:f3:93:e4:9a: 34:74:06:45:99:41:c4:88:86:5f:60:38:d7:35:c2:b2:80:ca: 93:65:c6:4a:de:71:c8:23:0c:d8:a7:2f:7d:37:b2:0d:30:72: 17:9b:26:2e:99:f0:ad:1f:19:81:7d:2b:06:43:da:30:ff:68: 25:8c:af:c2:14:4a:19:f0:f5:0d:a3:71:26:0e:ed:e2:e4:a5: 8b:07:2f:69:dc:3a:b1:73:1b:1a:84:66:bc:43:37:09:a5:16: 1d:68:01:ae:38:24:16:b1:bf:8e:56:6d:28:76:1a:fa:77:e5: 5a:b5:bb:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XTcUaV3HHqdEKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk Yjk3Y2NkMWItYTU1Zi00YzcxLTkyNDAtMDg3MzNjZmVkYTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b0FQW8d9DfDV3GYTtrJRFn5pXEe4aRsGny4 5uSKAW658YOwd0bYhLL2CCSaqLI3dsrYrcJcRHbgfxQZrxV7lByffrALPenawD/J oAlv8idH5+Vq6uMy2yy669/hJBh4Fq3d33PEzo/jQNdvaP8oU/iLHuLEMTs9uJCs imv1uMxIzyVAp6uInyhqrgy9ZwwrpNWCoDd/3ko98MtDB+mrNVWIeAP99OKNiWzh 6L11xZW9n9j3rS7sWFSjznqKhzmJdMbU+KcNO9PJ3a1brptOSnFS2zSOJDgdkslx NictnhHfVYP0jhoXlkvDoGZd94bLfDPQuTfVmXMPWKrNsBKoKQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJFqKQJM2G39jm8mxFS8Eu/Q5eWoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWUyMWVlMzgtYWZhMC0z NTRiLThjMWEtMjE3M2E5MWFlZmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeAk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC6uU9pYy1EbfAD3l4URAQ1TXVpb2pvNm6PUd8zEotj+mlsbqQ0d CktsyHkiVaECqVG1x+WETupk7cU/Gz4CNKZKPR+Dtm6ncbVO7iPVjRTrxqwoLGlt mbTl8D3IWNHiMjPDc1XHgtohK5jPWHT+JEb7mhHfq2itzRzZMpcoXydwfpP/8Ghk Qox4HET085PkmjR0BkWZQcSIhl9gONc1wrKAypNlxkreccgjDNinL303sg0wcheb Ji6Z8K0fGYF9KwZD2jD/aCWMr8IUShnw9Q2jcSYO7eLkpYsHL2ncOrFzGxqEZrxD NwmlFh1oAa44JBaxv45WbSh2Gvp35Vq1uw8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:25:10 2025 by rpki-client