$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef811737-a002-3b9b-95e2-46b28329626a.roa File: ef811737-a002-3b9b-95e2-46b28329626a.roa (raw, json) Hash identifier: OgsbC+GBZdbiEzQrbT+NcUaGyIfBXQ1GVWJcw33UPgE= Subject key identifier: 8D:7D:D7:D5:E9:34:54:C7:2D:31:C3:83:8D:0E:99:D1:77:F0:99:05 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB781E8E358CC8634A9F100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef811737-a002-3b9b-95e2-46b28329626a.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 21508 IP address blocks: 2001:559:c071::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b7:81:e8:e3:58:cc:86:34:a9:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=ca67727b-9ee1-4fc0-af50-e4279691b9be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2e:4c:b4:da:7f:60:4d:41:a8:dc:a2:dd:26: 14:11:e7:a3:c0:dd:11:97:93:6b:c1:6a:8c:4a:c3: fb:a9:0f:89:b1:ee:6c:6d:cf:0a:cb:fe:0d:dc:8b: cf:02:a0:5d:e6:b9:a5:6d:42:dd:1b:1f:21:fd:fc: 9c:7a:81:ef:69:e2:5d:a4:ab:8e:a4:99:2e:6c:9b: 52:36:e8:6b:be:2d:c1:29:a3:b2:fc:2c:4f:ee:11: 94:c6:08:1b:3d:08:50:ef:58:de:73:62:26:fd:29: dc:73:ee:4b:e2:d1:57:64:d3:23:9a:9a:9f:5a:e1: b6:17:c0:a5:51:22:63:a2:a8:94:fa:29:b8:0a:c6: 86:d2:6d:fa:16:d0:4d:2a:69:02:df:34:f0:1e:21: 2f:85:b9:d2:0d:b0:69:6a:6e:6f:e9:b2:57:56:26: 34:d6:3c:e2:f5:00:1c:9c:35:8a:e7:fc:3a:6d:68: bf:f4:7e:fe:cf:af:5e:aa:35:33:40:f3:88:f9:a5: ad:30:1f:3c:d0:1b:6c:cc:2f:2d:c5:68:da:94:a6: d9:3e:09:3e:c7:a8:b9:17:21:95:96:64:85:92:f2: a9:a6:fa:01:e5:ce:30:a7:96:ae:33:37:44:16:37: 9b:c1:7d:1e:86:ec:ad:c3:b6:32:d2:28:27:81:52: 38:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7D:D7:D5:E9:34:54:C7:2D:31:C3:83:8D:0E:99:D1:77:F0:99:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef811737-a002-3b9b-95e2-46b28329626a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c071::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4d:3d:c7:6a:19:38:20:54:c2:81:15:14:6b:2a:dc:66:81: ac:f1:36:5b:f1:d4:c3:4f:eb:77:94:44:2a:4c:02:65:f8:35: 74:d2:8d:10:f5:69:b1:1f:0b:ef:0c:5f:4a:b8:a8:f9:e3:d6: c2:3b:f3:02:a6:11:72:ed:31:8b:3b:c5:60:d4:be:28:31:4b: d6:f7:14:c1:84:5d:79:13:fb:66:1d:80:34:d3:27:18:3e:62: 5b:2c:6b:1b:93:ff:0c:2b:b9:83:ab:4e:ca:27:d7:59:d9:c0: 54:21:45:11:04:ca:ba:f7:7c:84:1f:7a:29:ef:19:44:a1:14: 63:2a:e1:dc:9a:2d:56:fd:49:8f:aa:47:44:46:75:f1:97:fa: 12:e3:35:ec:bc:c7:71:3f:b7:31:f1:ff:4a:1c:29:c7:27:45: f3:82:10:c0:23:38:86:76:3d:d6:b0:35:a9:3c:87:bf:d1:19: d1:a1:3c:f1:47:79:3f:34:07:d3:14:bd:00:4d:5a:52:ce:83: eb:33:e4:4b:1c:b6:04:28:1e:87:33:22:69:24:60:14:e2:2c: 62:68:69:91:52:fd:e8:3c:db:ec:cd:a2:3e:2e:0e:1f:96:53: 5f:a5:cd:68:6d:7f:f4:56:a1:73:13:9c:47:68:c3:97:8b:38: a3:6a:d7:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9t4Ho41jMhjSp8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk Y2E2NzcyN2ItOWVlMS00ZmMwLWFmNTAtZTQyNzk2OTFiOWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy5MtNp/YE1BqNyi3SYUEeejwN0Rl5NrwWqM SsP7qQ+Jse5sbc8Ky/4N3IvPAqBd5rmlbULdGx8h/fyceoHvaeJdpKuOpJkubJtS Nuhrvi3BKaOy/CxP7hGUxggbPQhQ71jec2Im/Sncc+5L4tFXZNMjmpqfWuG2F8Cl USJjoqiU+im4CsaG0m36FtBNKmkC3zTwHiEvhbnSDbBpam5v6bJXViY01jzi9QAc nDWK5/w6bWi/9H7+z69eqjUzQPOI+aWtMB880BtszC8txWjalKbZPgk+x6i5FyGV lmSFkvKppvoB5c4wp5auMzdEFjebwX0ehuytw7Yy0igngVI4iwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI1919XpNFTHLTHDg40OmdF38JkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWY4MTE3MzctYTAwMi0z YjliLTk1ZTItNDZiMjgzMjk2MjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcBx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGBNPcdqGTggVMKBFRRrKtxmgazxNlvx1MNP63eURCpMAmX4NXTS jRD1abEfC+8MX0q4qPnj1sI78wKmEXLtMYs7xWDUvigxS9b3FMGEXXkT+2YdgDTT Jxg+YlssaxuT/wwruYOrTson11nZwFQhRREEyrr3fIQfeinvGUShFGMq4dyaLVb9 SY+qR0RGdfGX+hLjNey8x3E/tzHx/0ocKccnRfOCEMAjOIZ2PdawNak8h7/RGdGh PPFHeT80B9MUvQBNWlLOg+sz5EsctgQoHoczImkkYBTiLGJoaZFS/eg82+zNoj4u Dh+WU1+lzWhtf/RWoXMTnEdow5eLOKNq1yw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:32:55 2025 by rpki-client