$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf2150f0-e046-3be0-bb35-0afc3634e5db.roa File: cf2150f0-e046-3be0-bb35-0afc3634e5db.roa (raw, json) Hash identifier: YyyofDp2lhnUzkUy40uPLT+Epj7dxkhgbc1N7RPLbUY= Subject key identifier: 16:86:90:22:0F:67:78:53:4C:75:24:D0:6F:23:25:30:C8:DB:0F:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B3DB9CD980D75B01CB0954800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf2150f0-e046-3be0-bb35-0afc3634e5db.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 33287 IP address blocks: 2001:559:798::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b9:cd:98:0d:75:b0:1c:b0:95:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a4108580-ff85-48f8-a7d0-639b0df4ce48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:08:b5:fe:e3:df:99:bb:a2:71:63:df:c8:69: ac:13:7f:8f:04:7c:53:ab:f9:a6:d7:ae:fd:d1:b9: 1e:1b:7e:75:e3:c7:8c:8a:1f:01:32:d8:4d:17:bd: 0b:bf:a7:e1:72:be:b1:72:1d:09:6b:bf:6c:9e:fd: 7a:41:3e:90:5a:ba:5a:bd:7a:4c:a4:b7:62:e3:86: d5:25:c5:d4:0b:0d:36:a2:d9:cd:c1:6e:b7:d3:41: 0b:49:b2:0c:25:2c:88:be:0e:36:0f:b9:e6:c8:ef: 99:0a:1b:1f:60:2e:a6:4f:ec:39:a5:c1:2b:36:44: 86:a2:7f:9b:c9:34:e8:6c:b2:2f:53:b3:34:c6:c2: da:cd:d9:c7:a5:8b:ad:c8:ee:1f:03:88:66:56:b1: aa:93:31:c8:d7:1e:50:4e:55:96:42:f9:76:f8:fe: 29:73:4a:75:94:19:ad:72:77:29:2b:8f:e4:55:87: 41:c1:2f:86:c1:32:60:5b:c6:0d:da:2d:95:9b:92: 79:11:b2:f5:42:74:9c:37:b1:75:0e:51:74:54:cc: da:f2:77:77:f0:b7:fa:dc:60:cc:1e:86:ee:2c:f9: d0:85:20:d7:ad:1a:23:45:0c:fd:48:a2:c0:0f:21: dc:66:7f:ee:50:13:8e:58:e6:db:9c:3d:a4:63:93: 51:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:86:90:22:0F:67:78:53:4C:75:24:D0:6F:23:25:30:C8:DB:0F:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf2150f0-e046-3be0-bb35-0afc3634e5db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:798::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:ff:42:4f:1c:cf:ec:c0:52:f8:25:0b:8b:93:32:97:c1:c5: 5b:d9:e7:e2:db:38:59:b6:10:88:c3:8e:a1:52:83:74:5c:aa: 19:f9:a9:23:cc:84:5c:af:53:53:93:c2:3c:96:b7:92:2f:2b: 60:1c:40:47:88:93:22:a2:85:62:c1:95:35:a5:21:e1:a0:6a: 81:72:2d:2c:97:d1:67:07:79:e2:c3:c4:79:23:c4:0f:59:d7: e0:11:84:d0:66:34:5e:f6:9e:06:97:48:33:b3:09:9c:bb:35: f0:b5:ad:28:e6:68:dc:d3:08:ae:c6:55:08:30:6d:5b:d9:8f: c6:3a:37:64:56:20:c2:7a:82:6c:32:1a:fa:bc:c5:95:73:c6: ed:c5:af:28:a1:fb:67:be:9d:fd:61:a3:72:e3:bf:68:19:39: bc:da:dc:0a:b6:d8:45:2d:c2:45:0f:f2:37:ac:28:9a:04:13: a6:86:81:57:a5:2e:eb:00:18:0a:fc:1f:1c:2d:f2:d8:ad:e5: a3:a5:0a:76:56:2b:86:64:3d:14:f7:19:af:e6:1a:a2:a6:6d: 9d:c2:c3:00:78:55:25:da:ca:d2:03:8d:a3:f2:a4:14:6d:10: 0f:21:72:4e:dd:74:17:47:3b:59:b6:25:b9:97:26:3d:5c:d8: a9:a1:b1:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEs9uc2YDXWwHLCVSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTQxMDg1ODAtZmY4NS00OGY4LWE3ZDAtNjM5YjBkZjRjZTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qi1/uPfmbuicWPfyGmsE3+PBHxTq/mm1679 0bkeG35148eMih8BMthNF70Lv6fhcr6xch0Ja79snv16QT6QWrpavXpMpLdi44bV JcXUCw02otnNwW6300ELSbIMJSyIvg42D7nmyO+ZChsfYC6mT+w5pcErNkSGon+b yTTobLIvU7M0xsLazdnHpYutyO4fA4hmVrGqkzHI1x5QTlWWQvl2+P4pc0p1lBmt cncpK4/kVYdBwS+GwTJgW8YN2i2Vm5J5EbL1QnScN7F1DlF0VMza8nd38Lf63GDM HobuLPnQhSDXrRojRQz9SKLADyHcZn/uUBOOWObbnD2kY5NRdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBaGkCIPZ3hTTHUk0G8jJTDI2w8CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2YyMTUwZjAtZTA0Ni0z YmUwLWJiMzUtMGFmYzM2MzRlNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQeY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL//Qk8cz+zAUvglC4uTMpfBxVvZ5+LbOFm2EIjDjqFSg3Rcqhn5 qSPMhFyvU1OTwjyWt5IvK2AcQEeIkyKihWLBlTWlIeGgaoFyLSyX0WcHeeLDxHkj xA9Z1+ARhNBmNF72ngaXSDOzCZy7NfC1rSjmaNzTCK7GVQgwbVvZj8Y6N2RWIMJ6 gmwyGvq8xZVzxu3Fryih+2e+nf1ho3Ljv2gZObza3Aq22EUtwkUP8jesKJoEE6aG gVelLusAGAr8Hxwt8tit5aOlCnZWK4ZkPRT3Ga/mGqKmbZ3CwwB4VSXaytIDjaPy pBRtEA8hck7ddBdHO1m2JbmXJj1c2KmhsSs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:39:18 2025 by rpki-client