$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dd5c3db-af52-39c9-8b1f-87fc7c026f9e.roa File: 2dd5c3db-af52-39c9-8b1f-87fc7c026f9e.roa (raw, json) Hash identifier: uDGvoaBofer+EGS6sO9V9c2GfNf4ARf5vhXfzmjW7eM= Subject key identifier: 5B:02:3D:9F:F5:62:92:7D:B1:B2:3C:5E:C4:92:7E:6D:4B:DD:03:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBBF624ECD8FD848A1B980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dd5c3db-af52-39c9-8b1f-87fc7c026f9e.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33651 IP address blocks: 2001:559:c3a4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:bf:62:4e:cd:8f:d8:48:a1:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=9f5c83b0-634c-41b1-9b26-5a5f2aa3ad6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:78:a9:fc:c1:26:51:43:7e:01:b0:08:1d:53: e6:60:6e:e0:ee:12:0d:17:bc:6f:18:b1:ce:ea:cf: cc:62:58:86:11:07:f8:92:8e:93:22:33:c0:25:08: cd:be:58:76:fb:81:ee:0f:67:d6:9f:84:0f:83:ef: 3e:ec:16:db:5d:62:ec:b7:59:59:08:a3:d1:47:19: ee:b4:d7:c5:d1:a4:31:90:66:6e:93:8c:75:9f:1f: 42:48:6d:68:fd:02:a3:b0:b4:a9:5a:c3:60:51:d6: dd:61:03:3b:d6:c7:2d:c6:90:3e:dd:6d:26:53:31: 6a:9f:55:be:0d:ba:7a:f7:4c:c8:e7:50:54:15:02: 97:3d:d8:e2:44:02:41:e5:e3:f5:e0:dd:24:df:67: 59:2f:a1:bd:f2:8a:6c:d4:39:7b:f2:1d:b4:86:ac: c4:48:02:b5:87:5a:5a:57:28:e1:42:d4:c2:9f:b8: 4d:ce:77:5f:f6:dd:24:35:0d:bb:0a:ef:64:47:99: 76:64:7f:36:b9:79:98:09:ce:1b:d1:d4:7c:c8:0e: a9:ff:2d:9e:f2:4d:ff:68:47:8c:3b:12:f8:94:24: d4:5b:00:e5:35:22:16:45:cf:38:91:4b:f8:1d:9a: a6:08:8e:b3:e6:29:e0:8d:8c:9c:aa:e7:9e:5e:68: 49:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:02:3D:9F:F5:62:92:7D:B1:B2:3C:5E:C4:92:7E:6D:4B:DD:03:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dd5c3db-af52-39c9-8b1f-87fc7c026f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3a4::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:4c:25:3c:60:76:2b:cc:4c:94:56:74:ec:f3:a9:be:4f:7d: b9:fa:6c:25:6e:47:af:ab:46:c2:d1:4c:88:ef:ae:77:f3:0d: 6c:56:20:3f:19:53:7d:f1:15:8d:12:f9:04:c8:bf:b9:aa:9d: d5:f4:29:1b:33:ff:9c:ab:7e:f3:f8:93:a3:6c:4d:cd:88:40: 47:83:a3:5f:d7:1e:54:52:4b:09:d7:de:14:cf:1a:e8:53:c7: 4b:c0:a9:80:55:5c:12:51:fa:4e:65:d5:44:b4:18:90:94:a8: c9:09:34:7f:e4:97:36:ec:5b:4f:6d:f9:4f:24:74:c5:55:cf: 73:6d:c9:a7:6b:6b:6e:00:34:84:f5:4d:90:c4:91:68:23:21: 93:85:0a:a8:9a:1b:07:b3:7e:63:78:ca:8f:07:3e:15:94:61: db:b6:1b:d2:0a:0f:7b:6c:c1:49:ab:d4:fe:d4:55:06:5c:a8: 39:b6:27:4a:6c:68:57:5a:86:f0:99:bf:d0:62:ab:62:0b:2c: 1b:66:f3:68:54:8b:f3:ba:31:fb:45:20:d0:43:6e:1c:dc:35: 93:cd:e1:51:37:16:40:c3:51:fc:d0:8a:9f:f2:9f:7d:57:24: ae:62:63:dc:ab:35:1a:de:c0:9a:52:96:f2:fd:bd:8e:ce:f9: 81:1d:44:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc+79iTs2P2EihuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk OWY1YzgzYjAtNjM0Yy00MWIxLTliMjYtNWE1ZjJhYTNhZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXip/MEmUUN+AbAIHVPmYG7g7hINF7xvGLHO 6s/MYliGEQf4ko6TIjPAJQjNvlh2+4HuD2fWn4QPg+8+7BbbXWLst1lZCKPRRxnu tNfF0aQxkGZuk4x1nx9CSG1o/QKjsLSpWsNgUdbdYQM71sctxpA+3W0mUzFqn1W+ Dbp690zI51BUFQKXPdjiRAJB5eP14N0k32dZL6G98ops1Dl78h20hqzESAK1h1pa VyjhQtTCn7hNzndf9t0kNQ27Cu9kR5l2ZH82uXmYCc4b0dR8yA6p/y2e8k3/aEeM OxL4lCTUWwDlNSIWRc84kUv4HZqmCI6z5ingjYycqueeXmhJQwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFsCPZ/1YpJ9sbI8XsSSfm1L3QM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRkNWMzZGItYWY1Mi0z OWM5LThiMWYtODdmYzdjMDI2ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcOk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFtMJTxgdivMTJRWdOzzqb5Pfbn6bCVuR6+rRsLRTIjvrnfzDWxW ID8ZU33xFY0S+QTIv7mqndX0KRsz/5yrfvP4k6NsTc2IQEeDo1/XHlRSSwnX3hTP GuhTx0vAqYBVXBJR+k5l1US0GJCUqMkJNH/klzbsW09t+U8kdMVVz3Ntyadra24A NIT1TZDEkWgjIZOFCqiaGwezfmN4yo8HPhWUYdu2G9IKD3tswUmr1P7UVQZcqDm2 J0psaFdahvCZv9Biq2ILLBtm82hUi/O6MftFINBDbhzcNZPN4VE3FkDDUfzQip/y n31XJK5iY9yrNRrewJpSlvL9vY7O+YEdRCs= -----END CERTIFICATE-----Generated at Sun Jul 20 20:57:29 2025 by rpki-client