$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0554e324-4168-3f92-80f5-dfd0c3069d3a.roa File: 0554e324-4168-3f92-80f5-dfd0c3069d3a.roa (raw, json) Hash identifier: g3oPyZrlUgZTMmBX2fi+D0d3EjQ9QZJlZNNNAlMKqZM= Subject key identifier: 22:12:2F:F8:18:D4:05:5E:13:AA:D2:E6:D6:FD:2A:5D:E1:0E:B4:07 Certificate issuer: /CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Certificate serial: 010D0C9F4328584B970CD0A92933CFDDBD6A1500 Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0554e324-4168-3f92-80f5-dfd0c3069d3a.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 30133 IP address blocks: 2001:500:99::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:d0:a9:29:33:cf:dd:bd:6a:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=b826e462-7e57-4d87-888f-8323ffe92ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:c0:b1:91:13:e5:d3:c7:6b:bf:23:5b:b5: c7:5d:ab:75:16:1c:33:f7:83:cb:de:c4:b4:7a:0d: 53:fb:ae:2d:13:00:08:2d:89:1f:06:94:50:36:b0: af:66:9a:5e:51:3d:82:e4:d4:bd:14:44:56:e8:1a: f6:ac:92:3e:0f:1c:ec:ba:85:e3:89:03:89:22:85: ea:c1:a1:84:53:31:1a:26:d7:be:5e:4d:f2:c9:1e: 2a:1d:a1:a2:2b:6f:0a:3b:b4:a1:1e:a5:ed:4d:83: 6b:ab:04:7c:e6:2d:96:cd:3c:77:9c:8b:e8:5a:b9: 8d:e9:3b:aa:f5:cd:fe:d7:ff:fa:33:6d:45:25:c2: c2:eb:02:f4:ae:69:cd:72:f7:0c:71:86:76:28:fb: 56:9c:62:c4:94:31:74:6c:eb:56:79:19:cd:95:e8: 9b:b6:23:61:c5:a5:d7:fb:16:47:54:a3:24:2e:7d: 04:1e:08:3c:fb:9b:54:97:4e:6c:2c:02:58:be:90: ac:87:96:fa:6e:79:4a:2c:b3:b8:8a:fa:a4:57:a6: 67:19:e0:d5:5f:1d:7b:75:2d:25:20:5c:04:c5:a7: 9b:fd:47:9b:3a:8a:6f:93:a4:66:4a:43:27:78:ea: e3:c1:86:b0:8c:de:fd:c6:92:ec:8c:de:3f:99:ea: 50:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:12:2F:F8:18:D4:05:5E:13:AA:D2:E6:D6:FD:2A:5D:E1:0E:B4:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/0554e324-4168-3f92-80f5-dfd0c3069d3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl X509v3 Authority Key Identifier: keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer sbgp-ipAddrBlock: critical IPv6: 2001:500:99::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ab:53:9d:e0:06:31:fd:a7:b0:ff:6a:8d:f7:4b:27:b6:a1: 46:1e:5b:4c:11:1e:5b:ca:17:ca:64:a6:e9:a3:d6:a0:62:51: 7d:fc:11:6b:67:41:ed:0d:c6:7f:8b:ac:3a:81:b7:9c:3b:c3: cf:a3:76:9e:25:c8:34:e6:30:03:a2:4c:ae:53:e4:87:ec:dc: 51:b1:87:59:ea:7a:64:eb:1d:b3:fa:27:3b:05:e0:c4:d1:b5: 28:a0:c4:de:e2:43:45:fd:8a:3c:6e:02:c9:3e:61:49:57:24: 14:5f:15:28:31:b8:df:9e:8b:0a:06:88:82:8a:9c:da:26:80: a4:35:6d:de:ad:f2:73:36:16:0a:75:74:40:e4:96:77:aa:32: c9:88:dc:37:07:e2:47:24:9b:04:15:fe:3c:97:db:88:57:16: 62:12:21:12:f7:41:76:71:b7:f3:8e:72:97:e8:17:a6:60:34: a5:e7:f6:79:5e:01:e7:5b:ff:8c:ac:d6:11:83:8d:a7:08:1d: a5:f3:41:36:8c:97:0a:b2:ee:f3:a6:00:c3:80:82:c2:c7:1e: 25:55:23:84:b6:e1:b7:66:ed:02:d4:9e:d1:9b:90:9c:ca:1f: 47:12:99:7d:89:30:31:70:1a:9e:5a:c6:a8:c5:15:54:10:c3: a6:e3:2f:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEuXDNCpKTPP3b1qFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk MTc3MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YjgyNmU0NjItN2U1Ny00ZDg3LTg4OGYtODMyM2ZmZTkyYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRjAsZET5dPHa78jW7XHXat1Fhwz94PL3sS0 eg1T+64tEwAILYkfBpRQNrCvZppeUT2C5NS9FERW6Br2rJI+DxzsuoXjiQOJIoXq waGEUzEaJte+Xk3yyR4qHaGiK28KO7ShHqXtTYNrqwR85i2WzTx3nIvoWrmN6Tuq 9c3+1//6M21FJcLC6wL0rmnNcvcMcYZ2KPtWnGLElDF0bOtWeRnNleibtiNhxaXX +xZHVKMkLn0EHgg8+5tUl05sLAJYvpCsh5b6bnlKLLO4ivqkV6ZnGeDVXx17dS0l IFwExaeb/UebOopvk6RmSkMneOrjwYawjN79xpLsjN4/mepQGwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCISL/gY1AVeE6rS5tb9Kl3hDrQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1 NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMDU1NGUzMjQtNDE2OC0z ZjkyLTgwZjUtZGZkMGMzMDY5ZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4 ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5 MDQ4MGQxNzcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFAACZ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqrU53gBjH9p7D/ao33Sye2oUYeW0wRHlvKF8pkpumj1qBiUX38 EWtnQe0Nxn+LrDqBt5w7w8+jdp4lyDTmMAOiTK5T5Ifs3FGxh1nqemTrHbP6JzsF 4MTRtSigxN7iQ0X9ijxuAsk+YUlXJBRfFSgxuN+eiwoGiIKKnNomgKQ1bd6t8nM2 Fgp1dEDklneqMsmI3DcH4kckmwQV/jyX24hXFmISIRL3QXZxt/OOcpfoF6ZgNKXn 9nleAedb/4ys1hGDjacIHaXzQTaMlwqy7vOmAMOAgsLHHiVVI4S24bdm7QLUntGb kJzKH0cSmX2JMDFwGp5axqjFFVQQw6bjL5M= -----END CERTIFICATE-----Generated at Wed Nov 5 14:55:27 2025 by rpki-client