$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e8770e-64fc-3d29-a1d4-5c539722c89a.roa File: 43e8770e-64fc-3d29-a1d4-5c539722c89a.roa (raw, json) Hash identifier: MnVf/TPTm/TIAbkI23DV/L28n6r/i0ZhK2vnEtzW6jk= Subject key identifier: 6E:F2:5D:BD:19:FB:2D:B2:C2:22:9E:94:46:67:BF:A1:0C:64:59:89 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBEBBF4E4E3806F65D6400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e8770e-64fc-3d29-a1d4-5c539722c89a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7015 IP address blocks: 2001:559:8313::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:eb:bf:4e:4e:38:06:f6:5d:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=edbbe9e5-fc7a-430b-a39d-fcbb99f1b563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e3:8c:6a:35:06:98:8a:d9:bb:85:2a:dd:c1: df:e3:09:fb:3e:bd:9a:89:f5:e8:49:a8:b8:32:80: 43:a8:f3:c3:62:49:f3:f0:f0:27:cd:b0:f8:4c:de: c2:38:38:0d:88:f8:0c:01:20:1f:df:70:87:3f:49: 97:03:3b:9a:10:d5:9e:49:78:13:f6:10:a3:94:11: a6:78:19:12:b2:62:8b:6c:6d:ea:37:b1:ec:22:b2: c3:bf:6d:af:ce:b5:46:ba:5b:a2:6a:3e:9f:88:bb: 6f:b7:b2:89:92:67:77:54:af:b8:0e:46:f2:60:6f: 3c:24:2b:be:9a:fa:db:22:72:b3:bf:94:fd:c4:0f: 57:e7:79:32:52:50:64:66:9d:e7:66:12:55:61:a6: 05:60:21:6f:69:2b:a5:28:00:f0:8c:e5:14:5b:10: 70:16:4b:68:24:20:40:8b:05:27:9e:3c:37:cc:39: 76:98:6a:65:ec:1c:48:c6:58:fc:44:8d:04:12:81: e6:82:09:81:c3:d9:70:46:63:e1:2a:b6:f9:d9:36: ae:ad:3b:58:54:4f:cb:fd:be:6c:91:5d:27:d7:82: 3b:4b:af:a1:7f:fd:ac:15:b0:0d:cf:35:c2:9a:dd: 90:11:d4:29:d2:d0:93:62:d8:b6:a3:ca:16:69:46: 69:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F2:5D:BD:19:FB:2D:B2:C2:22:9E:94:46:67:BF:A1:0C:64:59:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43e8770e-64fc-3d29-a1d4-5c539722c89a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8313::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:09:de:e7:ca:67:2e:f9:4c:5b:65:bf:3e:ec:24:43:a5:0a: 41:d1:75:0f:0a:db:02:71:d2:1e:2f:b6:0f:47:c0:06:20:8c: 55:c2:3a:b3:7f:a9:38:7b:7b:3d:31:d3:11:ca:28:c8:8c:2a: df:10:32:51:68:fc:a8:39:b1:06:75:94:36:9a:35:63:55:b0: 66:e9:bf:ab:8f:a5:4b:ba:3a:7c:e5:b3:07:c1:75:cd:77:cf: 3d:48:23:5f:fa:66:04:a8:a9:b9:b7:c7:1d:6d:25:57:84:bd: 48:ed:09:0e:6e:e7:a8:e8:03:64:1f:da:39:9b:9f:f2:e5:e4: cc:57:24:9c:11:74:93:b7:e5:cc:ff:b8:42:2a:b9:7d:76:3b: b7:12:c0:80:55:c8:08:a0:2e:84:eb:98:4b:b5:c1:9d:63:ba: ec:ee:36:cd:c4:20:da:c4:ab:05:b0:90:90:ef:7b:17:e9:09: c9:7b:5f:84:fb:12:b5:dd:11:28:ad:ba:0b:bf:31:e8:b9:44: b8:36:48:5e:ee:b5:8f:9b:58:a6:bf:70:ce:33:df:13:4e:49: fd:12:25:eb:69:ad:81:d2:0f:15:e7:a3:84:73:16:a5:86:86: 43:6e:0d:8a:5f:85:4f:27:81:0e:0c:5b:94:c8:73:47:8e:bf: 66:6f:9c:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc++u/Tk44BvZdZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZWRiYmU5ZTUtZmM3YS00MzBiLWEzOWQtZmNiYjk5ZjFiNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleOMajUGmIrZu4Uq3cHf4wn7Pr2aifXoSai4 MoBDqPPDYknz8PAnzbD4TN7CODgNiPgMASAf33CHP0mXAzuaENWeSXgT9hCjlBGm eBkSsmKLbG3qN7HsIrLDv22vzrVGuluiaj6fiLtvt7KJkmd3VK+4DkbyYG88JCu+ mvrbInKzv5T9xA9X53kyUlBkZp3nZhJVYaYFYCFvaSulKADwjOUUWxBwFktoJCBA iwUnnjw3zDl2mGpl7BxIxlj8RI0EEoHmggmBw9lwRmPhKrb52TaurTtYVE/L/b5s kV0n14I7S6+hf/2sFbANzzXCmt2QEdQp0tCTYti2o8oWaUZplQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG7yXb0Z+y2ywiKelEZnv6EMZFmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDNlODc3MGUtNjRmYy0z ZDI5LWExZDQtNWM1Mzk3MjJjODlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYMT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMsJ3ufKZy75TFtlvz7sJEOlCkHRdQ8K2wJx0h4vtg9HwAYgjFXC OrN/qTh7ez0x0xHKKMiMKt8QMlFo/Kg5sQZ1lDaaNWNVsGbpv6uPpUu6OnzlswfB dc13zz1II1/6ZgSoqbm3xx1tJVeEvUjtCQ5u56joA2Qf2jmbn/Ll5MxXJJwRdJO3 5cz/uEIquX12O7cSwIBVyAigLoTrmEu1wZ1juuzuNs3EINrEqwWwkJDvexfpCcl7 X4T7ErXdESitugu/Mei5RLg2SF7utY+bWKa/cM4z3xNOSf0SJetprYHSDxXno4Rz FqWGhkNuDYpfhU8ngQ4MW5TIc0eOv2ZvnLI= -----END CERTIFICATE-----Generated at Sun Jul 20 21:22:52 2025 by rpki-client