$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa File: 40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa (raw, json) Hash identifier: JIfnGpKYX3STRK0zoFrBQ715+JXlzBqbQqWhavXUUWk= Subject key identifier: 19:32:29:2E:D2:21:BF:86:E0:3A:7E:D0:63:C1:97:CB:DD:18:59:6B Certificate issuer: /CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Certificate serial: 010D0C9F4328584AA42B886DE3F5AAE2A19F4C00 Authority key identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 22594 IP address blocks: 2620:5b:4000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:88:6d:e3:f5:aa:e2:a1:9f:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64 Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=35a83e4c-30cb-43a6-88dc-b9d0e7256205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:23:0b:25:fd:53:c0:ce:9e:ed:29:9d:42:ed: 38:41:6a:2b:1b:4a:e4:ed:1c:92:60:f1:64:7e:e7: 4d:2b:f3:03:4d:ea:b3:b7:cb:a4:a4:a2:e6:aa:1d: ff:de:d2:89:ef:02:cc:ed:93:4f:c4:54:7b:34:96: 15:8b:48:8a:4a:15:17:ea:25:13:56:1c:41:6e:d8: 41:66:00:a3:44:c4:85:f7:d4:95:0e:fd:61:79:a8: 92:67:5f:6d:4c:c2:2e:c3:30:73:e1:66:c7:76:68: fe:2b:bb:91:9f:6c:ce:dd:be:23:67:1a:9f:46:f3: 84:2c:9e:69:9b:a0:7a:fc:fe:89:b9:db:55:b9:75: 4a:36:3f:e4:56:b9:84:88:68:1e:ac:e1:a8:8e:2b: 04:ee:cc:86:c9:3c:15:1a:47:1c:13:73:18:3e:b3: 73:4a:5b:50:cc:39:3c:c3:e2:35:a5:0a:14:3d:f7: 80:37:9d:39:80:72:84:4f:f1:48:b2:44:c3:6e:b9: a1:1f:ab:9e:86:0e:ae:6a:3c:df:12:4b:24:a7:89: d4:92:be:5f:37:33:a8:f3:59:71:76:0e:d4:09:3b: 33:84:4e:b8:ed:bd:f6:5b:33:67:02:bf:ec:75:79: c0:5f:8c:b3:ce:6a:f6:f0:a1:8c:af:fc:4a:b2:24: 71:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:32:29:2E:D2:21:BF:86:E0:3A:7E:D0:63:C1:97:CB:DD:18:59:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl X509v3 Authority Key Identifier: keyid:76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer sbgp-ipAddrBlock: critical IPv6: 2620:5b:4000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:3d:69:1b:30:9d:d7:e4:d0:30:ee:01:d2:fc:ec:56:eb:ed: e5:1f:16:ed:10:85:f1:cb:f9:f0:0d:3c:e3:86:b4:b0:a2:e4: a9:fb:54:15:cb:f9:5d:36:99:3f:73:b8:85:ef:c5:01:d4:93: ef:68:6c:fc:d0:12:38:6f:6a:cd:c2:97:5e:ad:53:f5:3a:e3: d3:a8:0f:bb:62:3e:8e:1b:3e:11:9e:1c:35:ba:9a:b3:62:62: 28:1d:64:7f:6f:c4:32:ec:e6:fd:d8:61:b7:74:3d:f0:30:85: ff:6e:58:4b:99:23:c6:cf:2c:a7:1b:cd:11:b8:f8:81:57:e7: 81:30:72:d3:8d:0a:29:0d:9c:13:24:ae:98:7a:43:c8:59:4f: d2:7d:83:b4:00:58:df:f0:54:85:dc:70:e7:52:7b:03:64:1a: 23:9e:b9:1e:fe:7a:24:b2:a0:83:57:2b:16:13:48:3e:62:4d: 59:2b:e8:d8:1f:81:06:78:ea:49:cb:b0:2c:55:50:0d:11:e2: 7a:b7:42:e8:e6:45:d6:44:07:14:b6:f5:a2:1a:84:f7:2b:74: 86:db:3b:eb:6f:78:44:61:a4:2c:d4:d4:67:9f:38:35:09:77: d2:0f:67:98:2f:28:6c:e8:d9:0f:ff:1b:6e:57:06:92:1b:04: 0b:55:77:8a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEqkK4ht4/Wq4qGfTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2Y1YjllZjYtM2I3Yy00ODVlLTk4MDQtZTNhZDY1YzU0 ZjY0MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MzVhODNlNGMtMzBjYi00M2E2LTg4ZGMtYjlkMGU3MjU2MjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSMLJf1TwM6e7SmdQu04QWorG0rk7RySYPFk fudNK/MDTeqzt8ukpKLmqh3/3tKJ7wLM7ZNPxFR7NJYVi0iKShUX6iUTVhxBbthB ZgCjRMSF99SVDv1heaiSZ19tTMIuwzBz4WbHdmj+K7uRn2zO3b4jZxqfRvOELJ5p m6B6/P6JudtVuXVKNj/kVrmEiGgerOGojisE7syGyTwVGkccE3MYPrNzSltQzDk8 w+I1pQoUPfeAN505gHKET/FIskTDbrmhH6uehg6uajzfEkskp4nUkr5fNzOo81lx dg7UCTszhE647b32WzNnAr/sdXnAX4yzzmr28KGMr/xKsiRxTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBkyKS7SIb+G4Dp+0GPBl8vdGFlrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjVi OWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2FkNjVjNTRmNjQvNDA4MTQwMjUtNTY3NS0z Y2IzLWIzY2UtODBiM2NiY2RkNWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvY2Y1YjllZjYtM2I3Yy00ODVlLTk4 MDQtZTNhZDY1YzU0ZjY0L2NmNWI5ZWY2LTNiN2MtNDg1ZS05ODA0LWUzYWQ2NWM1 NGY2NC5jcmwwHwYDVR0jBBgwFoAUdvnWgBZmurAcw/kqHHB5yEPCtFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jZjViOWVmNi0zYjdjLTQ4NWUtOTgwNC1lM2Fk NjVjNTRmNjQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAW0AA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABE9aRswndfk0DDuAdL87Fbr7eUfFu0QhfHL+fANPOOGtLCi5Kn7 VBXL+V02mT9zuIXvxQHUk+9obPzQEjhvas3Cl16tU/U649OoD7tiPo4bPhGeHDW6 mrNiYigdZH9vxDLs5v3YYbd0PfAwhf9uWEuZI8bPLKcbzRG4+IFX54EwctONCikN nBMkrph6Q8hZT9J9g7QAWN/wVIXccOdSewNkGiOeuR7+eiSyoINXKxYTSD5iTVkr 6NgfgQZ46knLsCxVUA0R4nq3QujmRdZEBxS29aIahPcrdIbbO+tveERhpCzU1Gef ODUJd9IPZ5gvKGzo2Q//G25XBpIbBAtVd4o= -----END CERTIFICATE-----Generated at Sun Aug 24 06:39:09 2025 by rpki-client