$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfae9776-7955-39d6-b304-1317e6dff56e.roa File: cfae9776-7955-39d6-b304-1317e6dff56e.roa (raw, json) Hash identifier: wx8ejnUkYAYcO1u8L6xr6auwWsQl/518YXHbDRz9eg0= Subject key identifier: 40:9C:64:C3:19:B5:37:77:E9:9E:9D:DC:C3:68:FC:A3:72:2E:7B:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584EA78C7C46B2E30D17D57AF540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfae9776-7955-39d6-b304-1317e6dff56e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7016 IP address blocks: 2001:559:87b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8c:7c:46:b2:e3:0d:17:d5:7a:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5891439d-9847-4ead-8a3b-dfa2b9968051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:95:71:81:b1:18:93:0a:9d:2a:fb:5e:1f:53: ef:b7:51:57:75:09:e1:d0:28:07:39:d0:81:d2:00: 36:45:7b:0d:5a:52:10:3a:df:fe:40:89:b1:e4:26: cf:db:d4:8b:73:f9:0f:d0:53:30:7b:2f:8f:95:15: 31:b8:65:fb:fe:ec:45:84:ec:05:f7:33:36:45:64: 07:10:9b:67:6b:06:a3:80:1e:c4:41:a8:3b:a7:ac: 11:bb:6c:d5:7b:b8:2c:b3:8b:0c:3f:9b:27:26:ad: 4c:57:1d:75:38:19:f4:03:0e:b0:8e:e0:82:9b:a6: e7:0d:cb:9b:3f:83:56:9e:04:02:3d:32:5e:54:c7: 12:dc:51:2a:b3:98:48:96:65:71:7e:83:92:04:6d: 7f:a3:69:80:ff:69:0d:db:9f:0c:02:16:2a:53:78: ec:e9:69:ed:e6:cf:cf:f1:19:cd:d9:c8:d9:ef:91: ac:b0:a9:fc:f7:fb:89:c5:9f:7b:a8:04:af:d6:8b: dc:d2:fe:67:72:a5:12:9f:4a:8c:28:ff:f4:b4:08: ba:1e:ef:9a:0a:e9:08:c7:c2:40:71:06:a2:7d:c7: 46:b8:64:c6:3d:b3:25:17:52:f1:97:91:51:eb:f0: c6:6e:ab:83:02:e8:3b:ff:26:51:e3:93:19:97:23: 00:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9C:64:C3:19:B5:37:77:E9:9E:9D:DC:C3:68:FC:A3:72:2E:7B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfae9776-7955-39d6-b304-1317e6dff56e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87b3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:97:48:10:c1:41:2b:36:d0:58:a9:5e:bb:ed:c7:6d:ac:29: 57:82:7c:e6:1c:56:88:84:90:6f:18:12:0a:a6:15:02:98:c6: 47:91:68:41:9d:cb:d5:33:c1:90:8c:b9:05:22:a6:1d:36:1f: 77:d4:bb:d6:1d:ea:e8:75:c7:dd:c9:4e:24:0a:35:79:9a:87: b7:32:70:9d:26:dd:bc:e0:9b:69:94:be:3d:cd:a3:0d:9b:98: 87:a0:74:c8:3a:7f:3a:53:cb:87:1f:ba:ac:64:f8:14:7b:1c: 09:9e:34:08:9a:a0:cd:b5:d4:82:ce:eb:53:53:78:d0:67:04: 42:02:d0:12:71:8f:49:5e:59:ce:28:5e:96:71:53:13:84:22: 27:91:10:52:5d:74:e0:0e:c3:8f:8f:98:da:24:dc:29:6a:b6: 12:3b:a8:d2:e9:6c:db:be:95:0a:b1:2f:2b:da:01:17:24:1f: f9:69:7a:8e:13:0d:ad:4e:90:74:d4:f9:31:1b:32:2a:3a:e2: 5f:2e:0e:c1:c4:d0:b1:9d:77:3e:92:90:97:31:97:cb:6c:43: c9:0b:91:58:fb:1a:d2:35:46:ea:2c:53:4a:73:07:2e:47:3c: 6b:b5:4d:50:b1:61:62:a9:90:dc:04:f9:9b:1b:54:0b:f8:3d: b4:31:aa:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6njHxGsuMNF9V69UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTg5MTQzOWQtOTg0Ny00ZWFkLThhM2ItZGZhMmI5OTY4MDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JVxgbEYkwqdKvteH1Pvt1FXdQnh0CgHOdCB 0gA2RXsNWlIQOt/+QImx5CbP29SLc/kP0FMwey+PlRUxuGX7/uxFhOwF9zM2RWQH EJtnawajgB7EQag7p6wRu2zVe7gss4sMP5snJq1MVx11OBn0Aw6wjuCCm6bnDcub P4NWngQCPTJeVMcS3FEqs5hIlmVxfoOSBG1/o2mA/2kN258MAhYqU3js6Wnt5s/P 8RnN2cjZ75GssKn89/uJxZ97qASv1ovc0v5ncqUSn0qMKP/0tAi6Hu+aCukIx8JA cQaifcdGuGTGPbMlF1Lxl5FR6/DGbquDAug7/yZR45MZlyMAPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFECcZMMZtTd36Z6d3MNo/KNyLnv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZhZTk3NzYtNzk1NS0z OWQ2LWIzMDQtMTMxN2U2ZGZmNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYez MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC2XSBDBQSs20FipXrvtx22sKVeCfOYcVoiEkG8YEgqmFQKYxkeR aEGdy9UzwZCMuQUiph02H3fUu9Yd6uh1x93JTiQKNXmah7cycJ0m3bzgm2mUvj3N ow2bmIegdMg6fzpTy4cfuqxk+BR7HAmeNAiaoM211ILO61NTeNBnBEIC0BJxj0le Wc4oXpZxUxOEIieREFJddOAOw4+PmNok3ClqthI7qNLpbNu+lQqxLyvaARckH/lp eo4TDa1OkHTU+TEbMio64l8uDsHE0LGddz6SkJcxl8tsQ8kLkVj7GtI1RuosU0pz By5HPGu1TVCxYWKpkNwE+ZsbVAv4PbQxqhk= -----END CERTIFICATE-----Generated at Wed Jul 29 07:56:20 2026 by rpki-client