$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1904e119-aa6e-3f83-a7d4-3b7e551cdd5e.roa File: 1904e119-aa6e-3f83-a7d4-3b7e551cdd5e.roa (raw, json) Hash identifier: onOwkZZzncBUl3STQqxQapW3LcU6lGMjMFZX9B4PHI0= Subject key identifier: C4:D4:10:71:A0:47:2C:E9:B3:13:04:C2:27:6E:F3:52:B4:13:BA:03 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBB9F93B51594E66D4B580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1904e119-aa6e-3f83-a7d4-3b7e551cdd5e.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33651 IP address blocks: 2001:559:2a6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:b9:f9:3b:51:59:4e:66:d4:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b64dcfd1-1cda-48c7-85de-f3c9cda66529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9f:78:9e:d3:8e:93:0f:08:4e:d2:e9:e4:0b: 16:99:79:1f:4e:e0:46:c3:98:09:94:65:ce:11:43: 25:65:c1:bc:d1:fd:10:23:ae:c5:53:f1:05:8f:4e: 03:15:fd:cc:ae:49:ff:10:e9:61:02:bb:d2:26:c5: cb:60:e5:6b:c2:4a:6a:ea:7d:58:e9:7c:64:0a:a6: b8:68:f4:22:61:87:32:df:af:89:a1:11:29:52:66: 01:84:e7:fa:9d:94:b4:62:57:7e:08:ce:d9:15:ba: ab:c6:e0:66:64:a1:2a:54:46:a8:ad:e9:20:04:33: 3f:00:f9:9d:4f:aa:3b:f2:6d:e7:35:d6:40:2e:ae: e3:ab:dd:f6:f8:32:06:6a:19:84:12:2b:6f:2d:0f: e5:c0:86:48:31:dd:2d:df:68:12:b8:4d:95:fd:bb: 67:a3:4a:07:64:6f:9e:2a:d4:55:83:e7:21:a3:90: 9a:71:a8:c9:a1:2e:f0:fa:f9:a8:14:d6:e4:98:9f: 00:3e:61:2d:11:a0:0c:53:94:be:c9:07:b4:52:13: bc:f5:46:b8:9e:9b:61:ff:3a:fa:2f:66:e8:ce:d3: f7:d0:ca:c3:0e:79:8f:cc:81:86:11:17:ce:b8:b1: ad:1d:ef:17:9d:29:b5:78:8a:fb:ea:b4:4b:4b:fe: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D4:10:71:A0:47:2C:E9:B3:13:04:C2:27:6E:F3:52:B4:13:BA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1904e119-aa6e-3f83-a7d4-3b7e551cdd5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2a6::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:a8:c2:8e:de:e9:bc:5c:bd:25:be:42:25:a1:bc:b6:e8:85: 42:99:11:38:b7:38:6f:8d:fe:8a:99:5f:a9:45:5f:34:bd:b8: b7:11:4b:57:4b:3f:88:f4:75:60:12:30:fc:85:ad:07:98:f9: 3a:b4:dc:6b:62:d5:cb:bf:cd:bd:e1:eb:c3:61:6a:73:60:76: 2a:90:1e:d6:f9:29:6f:b2:02:f4:d1:16:96:af:a1:0d:93:11: 8e:06:a3:7f:59:d4:0c:b4:cd:22:8a:63:a9:9d:38:ce:79:69: 63:8e:94:6c:49:8d:1e:ec:c5:2e:ee:27:a4:e8:ee:8a:cf:6f: 39:0f:06:3d:d7:ed:db:55:db:05:f0:9b:22:ca:14:97:88:a2: 6c:70:f4:21:a8:ac:b7:56:72:79:8b:88:df:2b:91:e9:9d:b5: 56:29:b8:e8:56:f4:08:b8:37:b2:77:7e:71:27:b0:a0:42:b1: fd:4b:a8:b9:48:b7:f8:00:d3:57:27:17:7d:4e:c7:48:48:13: a6:57:84:50:a7:bd:58:66:58:2c:13:7f:08:43:3a:d0:ff:96: 96:7f:13:6f:93:e8:14:88:8a:fb:cb:3f:50:49:96:ae:4b:4a: 8c:71:3f:44:a4:76:26:83:e7:2b:6b:18:ef:f8:b5:62:78:09: 11:c8:4a:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc+7n5O1FZTmbUtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjY0ZGNmZDEtMWNkYS00OGM3LTg1ZGUtZjNjOWNkYTY2NTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl594ntOOkw8ITtLp5AsWmXkfTuBGw5gJlGXO EUMlZcG80f0QI67FU/EFj04DFf3Mrkn/EOlhArvSJsXLYOVrwkpq6n1Y6XxkCqa4 aPQiYYcy36+JoREpUmYBhOf6nZS0Yld+CM7ZFbqrxuBmZKEqVEaorekgBDM/APmd T6o78m3nNdZALq7jq932+DIGahmEEitvLQ/lwIZIMd0t32gSuE2V/btno0oHZG+e KtRVg+cho5CacajJoS7w+vmoFNbkmJ8APmEtEaAMU5S+yQe0UhO89Ua4npth/zr6 L2boztP30MrDDnmPzIGGERfOuLGtHe8XnSm1eIr76rRLS/4aQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMTUEHGgRyzpsxMEwidu81K0E7oDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTkwNGUxMTktYWE2ZS0z ZjgzLWE3ZDQtM2I3ZTU1MWNkZDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQKm MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJWowo7e6bxcvSW+QiWhvLbohUKZETi3OG+N/oqZX6lFXzS9uLcR S1dLP4j0dWASMPyFrQeY+Tq03Gti1cu/zb3h68NhanNgdiqQHtb5KW+yAvTRFpav oQ2TEY4Go39Z1Ay0zSKKY6mdOM55aWOOlGxJjR7sxS7uJ6To7orPbzkPBj3X7dtV 2wXwmyLKFJeIomxw9CGorLdWcnmLiN8rkemdtVYpuOhW9Ai4N7J3fnEnsKBCsf1L qLlIt/gA01cnF31Ox0hIE6ZXhFCnvVhmWCwTfwhDOtD/lpZ/E2+T6BSIivvLP1BJ lq5LSoxxP0SkdiaD5ytrGO/4tWJ4CRHISjA= -----END CERTIFICATE-----Generated at Sun Jul 20 17:21:39 2025 by rpki-client