$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ba68645-a66a-35e8-9efc-1db1b346b905.roa File: 4ba68645-a66a-35e8-9efc-1db1b346b905.roa (raw, json) Hash identifier: xs8RhAlxaM1tPG3kbJv9JOIf1D/uhwX8R1pX4gsGeGU= Subject key identifier: 8A:B9:F1:8F:0A:A3:3E:83:49:9A:54:9D:4D:DD:14:00:FD:81:C1:23 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD2C9F57330D953FB24280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ba68645-a66a-35e8-9efc-1db1b346b905.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33662 IP address blocks: 2001:559:852f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:2c:9f:57:33:0d:95:3f:b2:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=570870be-b076-4eb1-9760-4741a81d8da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:f1:97:f3:47:b2:05:cc:3c:a1:f2:95:ea: e2:30:7b:96:38:b8:fb:6b:95:80:93:10:e0:89:16: 51:92:61:90:3d:61:a5:68:96:b8:e4:5f:00:3d:09: 1c:4c:69:85:f2:aa:dd:72:fa:14:15:ac:76:d9:1b: cf:9c:f0:47:97:6a:50:79:24:3f:d2:ea:d9:c8:2a: 7b:ea:fc:2b:71:48:8b:dd:ae:c0:01:48:28:42:2a: 54:38:91:8c:b2:7a:86:e7:35:e8:c9:e4:42:a3:4d: d1:51:ed:fe:b5:3e:d5:c4:9f:99:62:f0:80:f6:96: f2:93:4a:50:89:f0:97:4e:d0:8e:c6:9d:78:39:fa: 61:89:42:4c:30:01:53:0e:75:bf:f6:a0:52:87:f7: 1f:b3:bf:99:d7:98:de:93:46:2b:57:b2:e0:48:db: 6c:8b:3c:93:a8:d1:01:b4:db:07:1b:90:47:b1:c1: 4a:50:95:f5:a0:3b:b3:cb:96:dc:0f:f1:a5:60:7d: e8:dd:8a:60:01:f1:cf:b8:5a:5f:be:9e:fd:f2:e7: 07:f4:f1:3b:cb:bd:7e:9c:7f:cb:d0:c4:aa:18:7a: 93:63:61:73:bf:fb:6e:16:66:43:d7:65:16:41:0a: 9a:0c:d9:f3:4a:00:01:f1:d2:b7:5c:a3:9b:49:3a: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B9:F1:8F:0A:A3:3E:83:49:9A:54:9D:4D:DD:14:00:FD:81:C1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ba68645-a66a-35e8-9efc-1db1b346b905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:852f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:39:2b:8a:f8:06:24:be:ff:e8:f6:dc:d8:e9:6e:dc:e8:bd: dc:0d:dc:dd:d8:d1:a8:5f:8c:37:99:d7:3c:32:4a:c1:2c:c6: fe:a1:2a:3c:9f:18:f7:8b:c2:63:81:4b:98:d6:d8:50:d8:7a: 6c:c3:44:03:43:e1:4d:b0:54:67:52:c0:11:71:49:20:e4:6e: f9:64:80:e7:b5:dc:e9:8e:eb:fc:25:d6:f1:8a:0b:28:65:e6: ef:10:68:1d:70:9b:d6:1f:d2:9f:b7:6f:df:87:ad:01:03:b8: a9:c1:87:73:cd:4f:cf:71:07:a0:7d:c0:a7:94:97:d7:35:3c: e8:cb:cb:e4:c5:a1:de:cc:8d:b9:12:ed:49:9e:d5:cd:9f:90: be:9c:1d:bb:9e:bb:e5:9e:4c:75:fa:8d:dc:a6:1c:36:38:92: bc:cb:d6:9e:bf:39:a0:8d:69:22:70:93:9b:3b:2b:07:65:a3: 94:e9:d7:e7:d1:34:d8:5c:da:80:89:05:cc:03:45:2d:df:91: 89:6d:1a:dc:d0:a2:d0:e2:cb:d1:c6:66:ce:b7:04:40:77:96: 5c:d4:14:02:c2:72:8d:22:5d:a0:35:87:62:8d:e0:43:67:c0: b8:d1:54:f3:8d:ea:43:56:0b:e0:d1:17:64:6d:ac:f4:6a:a0: 8f:23:ef:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/SyfVzMNlT+yQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NTcwODcwYmUtYjA3Ni00ZWIxLTk3NjAtNDc0MWE4MWQ4ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxavxl/NHsgXMPKHyleriMHuWOLj7a5WAkxDg iRZRkmGQPWGlaJa45F8APQkcTGmF8qrdcvoUFax22RvPnPBHl2pQeSQ/0urZyCp7 6vwrcUiL3a7AAUgoQipUOJGMsnqG5zXoyeRCo03RUe3+tT7VxJ+ZYvCA9pbyk0pQ ifCXTtCOxp14OfphiUJMMAFTDnW/9qBSh/cfs7+Z15jek0YrV7LgSNtsizyTqNEB tNsHG5BHscFKUJX1oDuzy5bcD/GlYH3o3YpgAfHPuFpfvp798ucH9PE7y71+nH/L 0MSqGHqTY2Fzv/tuFmZD12UWQQqaDNnzSgAB8dK3XKObSTrpRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIq58Y8Koz6DSZpUnU3dFAD9gcEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGJhNjg2NDUtYTY2YS0z NWU4LTllZmMtMWRiMWIzNDZiOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYUv MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABM5K4r4BiS+/+j23NjpbtzovdwN3N3Y0ahfjDeZ1zwySsEsxv6h KjyfGPeLwmOBS5jW2FDYemzDRAND4U2wVGdSwBFxSSDkbvlkgOe13OmO6/wl1vGK Cyhl5u8QaB1wm9Yf0p+3b9+HrQEDuKnBh3PNT89xB6B9wKeUl9c1POjLy+TFod7M jbkS7Ume1c2fkL6cHbueu+WeTHX6jdymHDY4krzL1p6/OaCNaSJwk5s7Kwdlo5Tp 1+fRNNhc2oCJBcwDRS3fkYltGtzQotDiy9HGZs63BEB3llzUFALCco0iXaA1h2KN 4ENnwLjRVPON6kNWC+DRF2RtrPRqoI8j74M= -----END CERTIFICATE-----Generated at Sun Jul 20 17:32:36 2025 by rpki-client