$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf76afcc-0c55-312f-bcf8-73769d3733ec.roa File: cf76afcc-0c55-312f-bcf8-73769d3733ec.roa (raw, json) Hash identifier: aFGE0S4C0YDBbg0r0B2vkbsktO7qAwjfcO0iC6GNwos= Subject key identifier: 79:42:F2:70:07:4D:B2:47:20:B2:BF:D8:31:E7:F6:69:46:C2:C4:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB7B874D91670F5F128BC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf76afcc-0c55-312f-bcf8-73769d3733ec.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33662 IP address blocks: 2001:559:879f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:b8:74:d9:16:70:f5:f1:28:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=c2d44d9e-2d86-4906-8ed4-6f148a7d116e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3b:08:1b:b1:ea:48:b5:39:ed:74:f2:38:91: 00:b3:43:fe:47:44:9c:ae:90:84:11:5e:da:af:a6: f2:53:21:ea:5a:be:1f:1c:06:c3:bc:aa:eb:50:64: 0a:1a:3f:9d:5b:44:7b:bc:7c:ab:91:28:0f:d4:c5: 1f:7a:47:32:94:d5:21:c5:18:e1:0d:e8:82:77:cf: b2:28:f3:b5:25:6d:28:e0:55:54:ee:5a:91:50:0f: 5c:22:b9:75:66:d6:43:86:0c:40:06:17:45:8e:d9: 06:10:e3:d9:59:0c:ca:8a:89:0d:c4:2b:5d:fb:a9: 7a:49:3b:7e:4b:b7:ba:df:1c:11:ec:66:5c:30:ed: e1:fb:5f:ca:6b:96:34:17:2c:d6:40:ef:b0:77:99: 35:3b:78:d1:b2:09:d4:31:95:69:49:f8:10:15:d9: d1:ee:e4:55:3f:85:9c:b8:d4:1d:22:19:87:d1:8f: 11:39:ec:38:65:d6:1b:80:9f:31:13:54:63:7f:ad: 15:f4:ea:da:2f:ea:ea:c6:91:02:28:9a:58:ba:f9: ce:b3:37:61:00:0f:fd:0c:f8:26:29:53:8b:0a:12: 41:2a:51:36:54:bc:c3:83:e2:d0:5e:87:6d:22:cd: a6:bf:9f:0c:99:40:40:20:66:b5:3a:81:9d:2d:e9: be:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:42:F2:70:07:4D:B2:47:20:B2:BF:D8:31:E7:F6:69:46:C2:C4:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf76afcc-0c55-312f-bcf8-73769d3733ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:879f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4e:dd:6a:66:b2:17:6a:0c:d1:55:c6:19:46:49:a7:24:ed: 5c:d2:74:0f:ec:72:a4:6a:aa:c0:d6:32:ec:d1:42:e2:b4:13: af:99:5b:a4:41:c0:09:4c:bf:2d:c8:ec:38:eb:f4:9d:49:9e: 12:43:a2:d7:ea:63:45:6a:17:42:d9:92:8a:c0:93:c1:6c:a5: 44:b7:c2:86:0a:82:fd:44:79:1a:18:c4:d7:7d:69:c3:6c:d5: 8e:0c:5b:fa:ea:d7:cb:23:a2:df:7d:5e:4e:aa:ba:e5:34:94: c6:85:99:93:02:85:c2:66:3c:ec:c5:54:55:12:67:8d:b7:34: bd:12:3d:57:3a:d7:03:18:3a:30:ef:5c:1f:30:65:76:ea:fc: f1:c3:99:83:99:88:f2:92:64:b6:90:2d:0d:18:4f:5f:43:58: 7e:45:c4:13:cd:71:1d:c1:89:b0:a9:3b:10:af:fd:4a:58:89: 3d:e5:2e:91:ab:6a:bb:ef:55:05:cd:0d:67:5a:fd:bd:b6:dc: 66:86:8a:9f:02:cf:08:45:6c:a5:30:a7:36:54:60:24:53:73: b4:57:76:75:f7:ca:96:fd:06:fc:63:81:55:6f:9e:32:4a:6b: 9d:db:fc:7f:1b:a2:cd:2b:bb:08:7d:77:e0:ad:30:21:00:3f: f3:0c:c1:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t7h02RZw9fEovIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YzJkNDRkOWUtMmQ4Ni00OTA2LThlZDQtNmYxNDhhN2QxMTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzsIG7HqSLU57XTyOJEAs0P+R0ScrpCEEV7a r6byUyHqWr4fHAbDvKrrUGQKGj+dW0R7vHyrkSgP1MUfekcylNUhxRjhDeiCd8+y KPO1JW0o4FVU7lqRUA9cIrl1ZtZDhgxABhdFjtkGEOPZWQzKiokNxCtd+6l6STt+ S7e63xwR7GZcMO3h+1/Ka5Y0FyzWQO+wd5k1O3jRsgnUMZVpSfgQFdnR7uRVP4Wc uNQdIhmH0Y8ROew4ZdYbgJ8xE1Rjf60V9OraL+rqxpECKJpYuvnOszdhAA/9DPgm KVOLChJBKlE2VLzDg+LQXodtIs2mv58MmUBAIGa1OoGdLem+1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHlC8nAHTbJHILK/2DHn9mlGwsRfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y3NmFmY2MtMGM1NS0z MTJmLWJjZjgtNzM3NjlkMzczM2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYef MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBO3WpmshdqDNFVxhlGSack7VzSdA/scqRqqsDWMuzRQuK0E6+Z W6RBwAlMvy3I7Djr9J1JnhJDotfqY0VqF0LZkorAk8FspUS3woYKgv1EeRoYxNd9 acNs1Y4MW/rq18sjot99Xk6quuU0lMaFmZMChcJmPOzFVFUSZ423NL0SPVc61wMY OjDvXB8wZXbq/PHDmYOZiPKSZLaQLQ0YT19DWH5FxBPNcR3BibCpOxCv/UpYiT3l LpGrarvvVQXNDWda/b223GaGip8CzwhFbKUwpzZUYCRTc7RXdnX3ypb9BvxjgVVv njJKa53b/H8bos0ruwh9d+CtMCEAP/MMwRs= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:31 2025 by rpki-client