$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e8260f7-3838-33cd-b0cf-a3990931a028.roa File: 1e8260f7-3838-33cd-b0cf-a3990931a028.roa (raw, json) Hash identifier: jFIad84uKv423uL5OTbZG2+6CasPv0U4cPlxfQNcXgM= Subject key identifier: D5:C7:87:B2:D2:5A:9D:01:72:C7:A6:CA:CE:CC:BB:C9:18:48:23:7F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDD677A72CC01F3F975F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e8260f7-3838-33cd-b0cf-a3990931a028.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33659 IP address blocks: 2001:559:c21a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:d6:77:a7:2c:c0:1f:3f:97:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=c7652e05-eae6-4878-9048-0637ca25df8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:18:d9:36:cc:9f:80:40:53:27:42:ff:01:75: 53:7b:55:8f:92:6d:ad:2e:07:f9:ae:c0:c7:cb:b4: 65:04:9d:b1:0b:c4:a8:3f:01:15:bf:c8:ca:1d:29: 37:70:08:77:a2:86:c0:92:9f:71:85:fb:05:9c:e5: c1:fa:0b:0f:9c:98:60:2f:51:e8:d9:16:91:5d:09: c5:7f:53:09:79:c0:c6:17:5b:28:ec:dc:a9:c4:7f: 88:3c:2b:1b:b9:c3:dd:bd:aa:e5:7a:45:6f:eb:9e: fd:cc:a2:5c:a8:64:7d:1e:1c:97:17:38:72:5f:6c: 24:a2:e2:b2:ee:0c:8a:a2:89:30:2c:7e:f1:95:69: 0e:20:2c:fe:a5:b2:6a:ee:75:3b:a4:54:2c:34:5e: a1:0e:2b:3e:6f:9e:ee:66:41:3c:39:7c:4b:dd:53: 4b:7d:75:b5:1b:dc:db:ed:35:d3:16:ef:7a:48:66: 5c:3e:a8:a3:e1:05:b5:7c:9f:72:22:d7:40:25:5f: 92:de:cf:1a:8f:fb:0a:f8:3c:b1:cf:1e:44:24:ed: c9:cf:1b:98:cd:d0:ab:16:23:fb:0c:e6:8d:9c:5e: 2b:3c:b1:ae:3e:ec:be:14:38:b9:2a:bc:7f:a3:2c: 2c:26:cd:3d:65:46:3c:06:35:2c:05:5c:ff:71:7a: 4d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C7:87:B2:D2:5A:9D:01:72:C7:A6:CA:CE:CC:BB:C9:18:48:23:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1e8260f7-3838-33cd-b0cf-a3990931a028.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c21a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:5f:44:97:dd:40:3c:9f:18:94:6e:31:33:d0:56:55:8c:51: fe:5d:0f:4f:42:00:ba:e4:0c:d4:48:f6:29:d3:2b:7e:f5:5f: ea:55:bc:34:8f:d4:7e:2a:45:9f:5b:50:ff:8a:79:cd:f4:0a: 0e:38:5e:45:53:78:eb:e5:04:14:95:31:c4:85:b6:e0:20:93: 30:2f:e4:28:73:1f:7f:74:68:4a:1d:4c:3a:e5:77:55:92:b4: 14:0d:91:df:14:c6:b2:10:70:f4:6a:f0:4a:fc:89:09:45:42: 21:85:f7:da:81:63:e1:e3:fa:e0:7b:c3:b8:d5:ce:b5:b3:03: bd:a1:22:28:ed:24:81:b2:0a:77:57:3f:73:ef:1d:e8:c8:f1: e0:09:d1:b3:a6:26:d9:42:e5:cd:11:80:e5:a6:76:f7:93:6c: d4:71:8b:03:e8:53:bb:8d:8a:22:cc:b9:d0:18:1b:c7:60:2a: db:c8:66:34:be:2c:61:eb:97:e3:c1:73:4b:56:f7:89:2b:ad: 6c:62:54:9f:36:90:49:a0:b5:bc:e6:16:9b:10:bf:88:e1:5d: 97:0f:5d:32:70:74:74:11:ba:2e:61:39:6e:ee:e4:fb:73:43: bd:59:ff:09:a9:53:a1:67:13:ce:26:02:60:d1:41:a0:ac:46: bc:75:5b:e3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/dZ3pyzAHz+XX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk Yzc2NTJlMDUtZWFlNi00ODc4LTkwNDgtMDYzN2NhMjVkZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xjZNsyfgEBTJ0L/AXVTe1WPkm2tLgf5rsDH y7RlBJ2xC8SoPwEVv8jKHSk3cAh3oobAkp9xhfsFnOXB+gsPnJhgL1Ho2RaRXQnF f1MJecDGF1so7NypxH+IPCsbucPdvarlekVv6579zKJcqGR9HhyXFzhyX2wkouKy 7gyKookwLH7xlWkOICz+pbJq7nU7pFQsNF6hDis+b57uZkE8OXxL3VNLfXW1G9zb 7TXTFu96SGZcPqij4QW1fJ9yItdAJV+S3s8aj/sK+Dyxzx5EJO3JzxuYzdCrFiP7 DOaNnF4rPLGuPuy+FDi5Krx/oywsJs09ZUY8BjUsBVz/cXpN4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNXHh7LSWp0Bcsemys7Mu8kYSCN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWU4MjYwZjctMzgzOC0z M2NkLWIwY2YtYTM5OTA5MzFhMDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcIa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK1fRJfdQDyfGJRuMTPQVlWMUf5dD09CALrkDNRI9inTK371X+pV vDSP1H4qRZ9bUP+Kec30Cg44XkVTeOvlBBSVMcSFtuAgkzAv5ChzH390aEodTDrl d1WStBQNkd8UxrIQcPRq8Er8iQlFQiGF99qBY+Hj+uB7w7jVzrWzA72hIijtJIGy CndXP3PvHejI8eAJ0bOmJtlC5c0RgOWmdveTbNRxiwPoU7uNiiLMudAYG8dgKtvI ZjS+LGHrl+PBc0tW94krrWxiVJ82kEmgtbzmFpsQv4jhXZcPXTJwdHQRui5hOW7u 5PtzQ71Z/wmpU6FnE84mAmDRQaCsRrx1W+M= -----END CERTIFICATE-----Generated at Sun Jul 20 17:34:27 2025 by rpki-client