$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdeffc14-2428-3abd-b7f1-ccf0b97b101e.roa File: cdeffc14-2428-3abd-b7f1-ccf0b97b101e.roa (raw, json) Hash identifier: i6e2RaEzeFkVu2/SX7SVlHWJM49Fa6siagPLkjeG95A= Subject key identifier: AF:C4:A3:23:D4:5E:51:32:EB:65:9B:59:5C:17:F9:ED:FC:E6:EC:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78E92D5A0ACFCB0AA0A8E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdeffc14-2428-3abd-b7f1-ccf0b97b101e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 33657 IP address blocks: 2001:559:871d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8e:92:d5:a0:ac:fc:b0:aa:0a:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=58b60fb5-c7af-42f1-ac05-c130b6e2a7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:88:14:18:fe:97:64:13:b9:03:7b:f7:28: 38:71:73:d6:6f:32:f3:08:b6:3e:72:0b:6b:f9:9e: d6:7b:bd:8a:a3:41:88:ea:ea:fb:76:0a:b1:35:a9: ae:8f:d3:7f:30:e6:82:13:4d:33:9b:51:e6:74:9a: f6:78:43:20:5b:e0:65:74:5e:83:b9:d2:30:91:e1: f5:f7:35:3e:80:13:05:71:51:6a:5f:46:b0:ba:40: ac:a2:39:be:b6:50:2c:74:fa:85:ba:b2:37:66:1e: 80:ce:f7:21:25:38:57:fa:ab:24:e2:a8:de:54:bb: b0:ee:fe:11:85:63:44:7b:1e:8b:98:55:da:73:b6: 55:0f:81:66:b4:49:1e:ba:90:ac:ad:1a:40:8b:bb: 3d:62:c6:49:3c:c0:44:ea:ad:27:3c:22:a9:6d:6c: 5c:dd:fa:4e:8f:2c:3b:ef:4d:9c:2d:32:1a:05:55: 7a:44:8d:9a:b0:2c:e1:f9:1a:5f:2c:b4:b5:d4:32: c1:82:67:c0:c0:4c:e8:08:97:36:79:47:aa:9f:1c: fd:bb:43:9e:c0:50:5b:67:bb:b5:15:c1:eb:b9:d7: 39:d8:38:dd:bb:24:b8:a3:77:73:b1:8d:2e:8b:9a: 53:67:48:59:25:17:9c:a1:67:89:d6:d2:34:f8:9b: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C4:A3:23:D4:5E:51:32:EB:65:9B:59:5C:17:F9:ED:FC:E6:EC:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdeffc14-2428-3abd-b7f1-ccf0b97b101e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:871d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:49:a8:d3:e0:03:fe:23:94:44:96:da:1a:30:44:5a:c9:41: 40:c9:4a:4b:7c:8b:a3:d5:07:62:f3:2b:20:4d:36:1c:9a:b1: 19:b2:a2:d0:63:4f:ab:b1:d0:11:52:f8:f8:39:d5:9c:00:4e: ea:11:a7:d6:78:a0:51:8a:1b:f4:7c:8e:bb:1f:43:a3:dd:6c: 53:6f:c3:94:e0:7e:d1:88:a5:2e:af:0c:af:3f:24:3c:83:1f: f9:43:98:50:ac:78:91:4d:e3:c4:a7:24:21:73:da:d4:3a:d6: ae:67:87:0f:97:94:29:d8:bd:81:55:fc:33:58:11:f0:50:a5: 66:89:da:b9:6b:80:e3:62:1f:3f:59:02:7d:d1:71:e8:ee:c1: c3:ae:c1:0d:00:59:2a:cd:2c:b0:e3:e8:32:5e:e4:0a:ab:36: a9:ff:a0:77:18:98:4f:21:77:4c:20:e2:48:0c:37:fc:ff:7d: e3:5c:99:99:f8:20:d6:21:ba:d6:b6:30:4f:92:64:95:cf:53: 06:78:94:ef:1d:68:23:e2:65:b3:e9:7f:fb:55:39:42:a1:44: b9:26:3e:66:ec:ee:46:f3:88:9e:b2:47:72:10:f9:dc:87:bc: de:91:8f:95:1a:0e:8c:0b:60:dc:3b:b5:cd:dc:4b:0e:4e:b2: be:c2:7d:ec -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njpLVoKz8sKoKjgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NThiNjBmYjUtYzdhZi00MmYxLWFjMDUtYzEzMGI2ZTJhN2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQyIFBj+l2QTuQN79yg4cXPWbzLzCLY+cgtr +Z7We72Ko0GI6ur7dgqxNamuj9N/MOaCE00zm1HmdJr2eEMgW+BldF6DudIwkeH1 9zU+gBMFcVFqX0awukCsojm+tlAsdPqFurI3Zh6AzvchJThX+qsk4qjeVLuw7v4R hWNEex6LmFXac7ZVD4FmtEkeupCsrRpAi7s9YsZJPMBE6q0nPCKpbWxc3fpOjyw7 702cLTIaBVV6RI2asCzh+RpfLLS11DLBgmfAwEzoCJc2eUeqnxz9u0OewFBbZ7u1 FcHrudc52DjduyS4o3dzsY0ui5pTZ0hZJRecoWeJ1tI0+Jtg1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK/EoyPUXlEy62WbWVwX+e385uxPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2RlZmZjMTQtMjQyOC0z YWJkLWI3ZjEtY2NmMGI5N2IxMDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYcd MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFdJqNPgA/4jlESW2howRFrJQUDJSkt8i6PVB2LzKyBNNhyasRmy otBjT6ux0BFS+Pg51ZwATuoRp9Z4oFGKG/R8jrsfQ6PdbFNvw5TgftGIpS6vDK8/ JDyDH/lDmFCseJFN48SnJCFz2tQ61q5nhw+XlCnYvYFV/DNYEfBQpWaJ2rlrgONi Hz9ZAn3RcejuwcOuwQ0AWSrNLLDj6DJe5AqrNqn/oHcYmE8hd0wg4kgMN/z/feNc mZn4INYhuta2ME+SZJXPUwZ4lO8daCPiZbPpf/tVOUKhRLkmPmbs7kbziJ6yR3IQ +dyHvN6Rj5UaDowLYNw7tc3cSw5Osr7Cfew= -----END CERTIFICATE-----Generated at Wed Jul 29 09:01:04 2026 by rpki-client