$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3270547c-bf4b-3bb4-b025-73d8a1ee2b08.roa File: 3270547c-bf4b-3bb4-b025-73d8a1ee2b08.roa (raw, json) Hash identifier: prMvTU1iqdXLyBlSy0OpvJOSlmAOzmC70QCbN5/LomY= Subject key identifier: C1:7F:B1:F4:44:BC:DE:06:B7:8C:79:17:D9:AE:64:77:53:34:BF:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A7780A78C72ABFD00451E8A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3270547c-bf4b-3bb4-b025-73d8a1ee2b08.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 33661 IP address blocks: 2001:558:250::/44 maxlen: 44 2001:558:2d0::/44 maxlen: 44 2001:558:310::/44 maxlen: 44 2001:558:4fef::/48 maxlen: 48 2001:558:500b::/48 maxlen: 48 2001:558:500f::/48 maxlen: 48 2001:558:5017::/48 maxlen: 48 2001:558:6004::/48 maxlen: 48 2001:558:600b::/48 maxlen: 48 2001:558:6015::/48 maxlen: 48 2001:558:fe08::/47 maxlen: 47 2001:558:fe38::/48 maxlen: 48 2001:558:fe3a::/48 maxlen: 48 2001:559:124::/48 maxlen: 48 2001:559:135::/48 maxlen: 48 2001:559:157::/48 maxlen: 48 2001:559:237::/48 maxlen: 48 2001:559:4ed::/48 maxlen: 48 2001:559:4ee::/48 maxlen: 48 2001:559:731::/48 maxlen: 48 2001:559:7a0::/48 maxlen: 48 2001:559:824e::/48 maxlen: 48 2001:559:8298::/48 maxlen: 48 2001:559:8299::/48 maxlen: 48 2001:559:82f9::/48 maxlen: 48 2001:559:830d::/48 maxlen: 48 2001:559:8320::/48 maxlen: 48 2001:559:8339::/48 maxlen: 48 2001:559:839c::/48 maxlen: 48 2001:559:83d8::/48 maxlen: 48 2001:559:8462::/48 maxlen: 48 2001:559:85d6::/48 maxlen: 48 2001:559:864f::/48 maxlen: 48 2001:559:878c::/48 maxlen: 48 2001:559:87d4::/48 maxlen: 48 2001:559:c202::/48 maxlen: 48 2001:559:c22b::/48 maxlen: 48 2001:559:c4b9::/48 maxlen: 48 2001:559:c4ea::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:a7:8c:72:ab:fd:00:45:1e:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=1bcf5e31-3cdb-4c1e-9d42-7a2ff6a06e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:16:3a:6a:7c:a7:4c:70:b6:d5:a7:80:84:23: ee:aa:67:bc:8f:37:23:48:aa:67:d9:05:98:c8:a8: 93:ba:37:7b:cc:f8:fd:a8:b4:5d:4e:3d:87:ae:39: 41:98:2c:e6:b4:0f:ca:de:2c:5d:9e:a2:43:ef:8b: 5e:bb:bd:0b:e1:44:e3:4d:b4:77:9b:0f:58:83:6c: 93:40:f5:f4:fa:fe:2b:01:b7:55:fe:1e:f2:73:71: 87:f5:6e:14:2f:3e:4a:5f:05:c1:a2:a6:bb:6e:f3: 8a:9d:af:a9:31:8e:0e:05:80:d0:a8:43:87:ce:f1: 43:97:f5:8e:16:ca:98:30:44:f0:31:e4:15:35:35: 12:81:b9:fa:ec:2c:89:f8:03:2e:52:f4:a7:80:71: 2e:2d:34:c4:17:34:49:8c:9a:a2:1e:8e:84:5e:c6: a0:19:db:cc:45:7b:8d:3a:fd:f7:ca:4d:66:e8:09: 2c:d1:c8:bd:17:b6:3a:c4:1f:26:f7:e7:2b:1c:0f: b8:68:44:21:83:2f:cb:b2:f3:70:03:f9:36:bc:db: fe:47:ca:ab:b4:8d:19:54:e8:f9:cd:84:cb:03:18: 98:ef:b7:00:b7:37:61:b0:3b:2c:e9:ee:a5:e7:44: 8e:6a:20:c3:7c:fe:fe:cd:af:a9:df:42:c7:72:f0: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:7F:B1:F4:44:BC:DE:06:B7:8C:79:17:D9:AE:64:77:53:34:BF:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3270547c-bf4b-3bb4-b025-73d8a1ee2b08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:250::/44 2001:558:2d0::/44 2001:558:310::/44 2001:558:4fef::/48 2001:558:500b::/48 2001:558:500f::/48 2001:558:5017::/48 2001:558:6004::/48 2001:558:600b::/48 2001:558:6015::/48 2001:558:fe08::/47 2001:558:fe38::/48 2001:558:fe3a::/48 2001:559:124::/48 2001:559:135::/48 2001:559:157::/48 2001:559:237::/48 2001:559:4ed::-2001:559:4ee:ffff:ffff:ffff:ffff:ffff 2001:559:731::/48 2001:559:7a0::/48 2001:559:824e::/48 2001:559:8298::/47 2001:559:82f9::/48 2001:559:830d::/48 2001:559:8320::/48 2001:559:8339::/48 2001:559:839c::/48 2001:559:83d8::/48 2001:559:8462::/48 2001:559:85d6::/48 2001:559:864f::/48 2001:559:878c::/48 2001:559:87d4::/48 2001:559:c202::/48 2001:559:c22b::/48 2001:559:c4b9::/48 2001:559:c4ea::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:86:97:d4:6a:b9:79:b5:78:58:f7:5f:65:28:45:c1:11:0f: a5:4d:27:79:68:e9:ef:59:e3:dd:c6:71:2e:b7:4e:49:a3:66: 15:6b:52:2b:57:5d:af:c3:76:a0:43:4b:90:29:4f:b5:e5:72: 41:ff:52:ce:40:65:bc:2a:40:43:bb:dd:25:8b:39:da:49:64: dd:0e:55:79:f2:74:80:ce:8d:58:4c:c1:ac:47:7e:fc:40:99: 9d:3f:3f:99:d1:11:09:84:77:00:9c:1b:1f:ac:06:42:4a:4d: 08:16:11:05:a7:a3:c2:20:3c:02:f1:4d:50:fb:6e:74:59:a0: f5:ad:65:d1:d8:90:97:32:5d:4f:c4:92:09:f3:45:60:49:67: bf:b9:6b:0a:cf:0d:ab:c1:dd:39:80:50:14:46:ee:c0:1f:a3: db:17:b7:1b:35:0c:d1:62:fc:d7:95:fd:83:cf:e8:10:0b:f9: e8:cb:1e:d4:ea:d0:36:53:51:d8:cc:b1:e0:54:b6:0f:e5:4b: 7a:24:f8:c1:f8:53:be:3b:85:d2:76:3b:e9:76:5b:0b:01:7f: 47:a1:e5:03:ab:ad:67:b5:1a:ef:1d:e6:47:40:a1:68:7e:be: bc:bf:1a:c3:07:b3:49:13:b8:05:d3:b0:77:9a:39:02:33:f8: 3f:5b:94:ff -----BEGIN CERTIFICATE----- MIIHnzCCBoegAwIBAgIUAQ0Mn0MoWEp3gKeMcqv9AEUeioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk MWJjZjVlMzEtM2NkYi00YzFlLTlkNDItN2EyZmY2YTA2ZTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RY6anynTHC21aeAhCPuqme8jzcjSKpn2QWY yKiTujd7zPj9qLRdTj2HrjlBmCzmtA/K3ixdnqJD74teu70L4UTjTbR3mw9Yg2yT QPX0+v4rAbdV/h7yc3GH9W4ULz5KXwXBoqa7bvOKna+pMY4OBYDQqEOHzvFDl/WO FsqYMETwMeQVNTUSgbn67CyJ+AMuUvSngHEuLTTEFzRJjJqiHo6EXsagGdvMRXuN Ov33yk1m6Aks0ci9F7Y6xB8m9+crHA+4aEQhgy/LsvNwA/k2vNv+R8qrtI0ZVOj5 zYTLAxiY77cAtzdhsDss6e6l50SOaiDDfP7+za+p30LHcvCJYQIDAQABo4IEsTCC BK0wHQYDVR0OBBYEFMF/sfREvN4Gt4x5F9muZHdTNL8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI3MDU0N2MtYmY0Yi0z YmI0LWIwMjUtNzNkOGExZWUyYjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMIIBeQYIKwYBBQUHAQcBAf8EggFoMIIBZDCCAWAEAgACMIIB WAMHBCABBVgCUAMHBCABBVgC0AMHBCABBVgDEAMHACABBVhP7wMHACABBVhQCwMH ACABBVhQDwMHACABBVhQFwMHACABBVhgBAMHACABBVhgCwMHACABBVhgFQMHASAB BVj+CAMHACABBVj+OAMHACABBVj+OgMHACABBVkBJAMHACABBVkBNQMHACABBVkB VwMHACABBVkCNzASAwcAIAEFWQTtAwcAIAEFWQTuAwcAIAEFWQcxAwcAIAEFWQeg AwcAIAEFWYJOAwcBIAEFWYKYAwcAIAEFWYL5AwcAIAEFWYMNAwcAIAEFWYMgAwcA IAEFWYM5AwcAIAEFWYOcAwcAIAEFWYPYAwcAIAEFWYRiAwcAIAEFWYXWAwcAIAEF WYZPAwcAIAEFWYeMAwcAIAEFWYfUAwcAIAEFWcICAwcAIAEFWcIrAwcAIAEFWcS5 AwcAIAEFWcTqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJCGl9RquXm1eFj3X2UoRcERD6VNJ3lo6e9Z493G cS63TkmjZhVrUitXXa/DdqBDS5ApT7XlckH/Us5AZbwqQEO73SWLOdpJZN0OVXny dIDOjVhMwaxHfvxAmZ0/P5nREQmEdwCcGx+sBkJKTQgWEQWno8IgPALxTVD7bnRZ oPWtZdHYkJcyXU/EkgnzRWBJZ7+5awrPDavB3TmAUBRG7sAfo9sXtxs1DNFi/NeV /YPP6BAL+ejLHtTq0DZTUdjMseBUtg/lS3ok+MH4U747hdJ2O+l2WwsBf0eh5QOr rWe1Gu8d5kdAoWh+vry/GsMHs0kTuAXTsHeaOQIz+D9blP8= -----END CERTIFICATE-----Generated at Sun Jul 20 21:14:01 2025 by rpki-client