$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86144b44-b32e-31f3-a82c-68b777b85ede.roa File: 86144b44-b32e-31f3-a82c-68b777b85ede.roa (raw, json) Hash identifier: cJFORoNFGIlLHObpU6OzAraXNV/Lmm/V58VzE48bM14= Subject key identifier: 56:E0:2A:EA:7A:B6:8C:C5:18:99:11:08:FC:56:B1:5F:0F:2D:13:07 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC4D74F234F19424779C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86144b44-b32e-31f3-a82c-68b777b85ede.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 2001:559:84fe::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:4d:74:f2:34:f1:94:24:77:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=8348a45c-b170-4d35-b946-083a75b7363a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fa:d1:14:df:91:93:de:a5:a7:58:fb:d8:91: 44:4f:1c:a2:a2:76:74:d6:2b:a0:87:6e:2e:6e:8e: f4:c6:17:5e:28:82:4e:fd:2e:bc:69:db:64:02:5a: a3:07:aa:61:09:21:26:1d:bf:e9:63:c9:55:91:14: 2f:c2:aa:85:8a:a4:da:0c:87:35:5b:c0:d6:87:08: 7c:58:d4:ac:d5:ef:64:6b:31:92:99:fd:58:99:d2: bc:48:a1:2d:d5:50:b2:35:85:f9:7a:b8:b4:0d:8c: 9b:28:a9:e3:4d:d7:07:e5:9e:47:79:04:fd:d8:6b: 8c:f7:3a:37:e0:8e:05:1e:a3:95:fe:cf:81:ad:91: b5:a1:2c:f2:d1:dd:5f:0c:e8:42:43:55:6c:1c:f0: f0:ad:b5:26:09:23:50:0f:b1:7b:24:9b:b3:83:aa: 98:1f:07:f1:f9:07:01:1d:bd:e9:3e:4e:1f:59:28: 54:97:e1:74:3a:bf:6a:b6:7c:b9:c6:8d:df:7c:8a: 15:c8:41:e3:c3:4a:18:f8:34:b5:c0:ee:79:d5:ad: 70:7a:44:86:f7:9a:fa:e3:cc:5c:e0:40:88:11:a3: 74:57:94:26:2f:9d:28:1f:26:80:29:30:6b:43:c3: ef:d8:7b:f3:b2:ec:95:c4:70:8a:36:5f:6b:d2:46: 63:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E0:2A:EA:7A:B6:8C:C5:18:99:11:08:FC:56:B1:5F:0F:2D:13:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86144b44-b32e-31f3-a82c-68b777b85ede.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:84fe::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:0d:c1:5b:8f:f8:72:a9:50:cf:4b:29:9f:e6:97:9e:da:18: d9:6b:4c:8f:45:74:a9:d9:27:4f:ff:63:33:67:0e:3e:4f:99: 8b:89:73:2a:f2:06:81:3b:45:38:c8:c7:4d:13:12:4f:56:7e: 33:dd:a0:25:b1:f9:09:20:41:5e:0b:f7:c3:ab:98:9f:2f:d7: 65:52:fd:22:87:36:0c:68:fa:75:ce:33:e9:df:68:41:7e:d9: 19:86:61:d8:89:dd:77:4c:4e:76:42:30:c7:59:f2:7a:ce:dd: b0:d3:e8:48:00:5e:ea:4f:03:30:73:e3:55:a9:c2:ae:ef:5e: f6:29:ba:da:55:51:77:08:9a:75:0a:ec:dd:7a:34:a9:5f:e2: ee:1f:15:38:c4:6a:d7:47:b0:ae:b3:47:eb:83:4e:5b:a4:19: d9:fd:86:c3:51:17:4d:0b:30:43:d6:d9:a8:0d:9a:f2:ea:70: 58:ce:50:96:3f:6b:cc:38:d5:bb:29:b6:9b:66:a3:13:67:72: fd:31:74:a4:36:2e:da:e8:0a:b2:fd:02:53:51:c3:63:fb:29: a4:98:1c:58:be:50:68:9c:c6:5e:89:75:7a:ae:0f:31:11:6a: 33:a4:c5:37:80:df:63:ce:f2:04:29:f4:fa:21:3d:84:7c:e3: de:d1:70:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/E108jTxlCR3nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ODM0OGE0NWMtYjE3MC00ZDM1LWI5NDYtMDgzYTc1YjczNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivrRFN+Rk96lp1j72JFETxyionZ01iugh24u bo70xhdeKIJO/S68adtkAlqjB6phCSEmHb/pY8lVkRQvwqqFiqTaDIc1W8DWhwh8 WNSs1e9kazGSmf1YmdK8SKEt1VCyNYX5eri0DYybKKnjTdcH5Z5HeQT92GuM9zo3 4I4FHqOV/s+BrZG1oSzy0d1fDOhCQ1VsHPDwrbUmCSNQD7F7JJuzg6qYHwfx+QcB Hb3pPk4fWShUl+F0Or9qtny5xo3ffIoVyEHjw0oY+DS1wO551a1wekSG95r648xc 4ECIEaN0V5QmL50oHyaAKTBrQ8Pv2HvzsuyVxHCKNl9r0kZjcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFbgKup6tozFGJkRCPxWsV8PLRMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODYxNDRiNDQtYjMyZS0z MWYzLWE4MmMtNjhiNzc3Yjg1ZWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYT+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACQNwVuP+HKpUM9LKZ/ml57aGNlrTI9FdKnZJ0//YzNnDj5PmYuJ cyryBoE7RTjIx00TEk9WfjPdoCWx+QkgQV4L98OrmJ8v12VS/SKHNgxo+nXOM+nf aEF+2RmGYdiJ3XdMTnZCMMdZ8nrO3bDT6EgAXupPAzBz41Wpwq7vXvYputpVUXcI mnUK7N16NKlf4u4fFTjEatdHsK6zR+uDTlukGdn9hsNRF00LMEPW2agNmvLqcFjO UJY/a8w41bsptptmoxNncv0xdKQ2LtroCrL9AlNRw2P7KaSYHFi+UGicxl6JdXqu DzERajOkxTeA32PO8gQp9PohPYR8497RcFM= -----END CERTIFICATE-----Generated at Sun Jul 20 17:39:37 2025 by rpki-client