$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/957a3d65-0848-33e4-a968-6bbb4b3e9041.roa File: 957a3d65-0848-33e4-a968-6bbb4b3e9041.roa (raw, json) Hash identifier: 98iP5V+OQYa/rvnY7dYbFZTQkFi+N3+Bb1DjlNJkUWs= Subject key identifier: 0D:B0:F9:98:B8:12:84:63:02:7C:5F:36:29:EF:75:AB:5E:32:24:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDD2E4078F476D8BB62620 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/957a3d65-0848-33e4-a968-6bbb4b3e9041.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33659 IP address blocks: 2001:559:825c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:d2:e4:07:8f:47:6d:8b:b6:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=17be21eb-d522-4409-b00c-a60b5afd53c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ec:3b:c8:97:da:6d:bf:75:f9:ab:7a:4d:bc: 49:1e:d5:b6:6e:04:50:d8:f9:8c:b3:3e:a3:47:54: 54:76:c7:c5:bc:b2:db:f2:37:9d:36:13:7d:3a:6d: d3:cd:68:ed:ad:d3:9f:0f:4a:40:ec:5d:09:be:0b: 95:32:ff:a4:90:17:7d:b7:66:3d:cc:81:90:49:88: 98:40:5c:8a:d0:54:6a:d3:00:1f:53:6e:b0:8c:d5: a3:9f:bc:fc:25:0d:11:da:bf:12:30:9b:ca:da:a7: 7e:dc:4b:f4:df:cb:10:3e:c7:37:d2:76:50:ba:65: 75:90:d5:d5:76:4e:bd:e7:e5:54:0a:ac:fe:d0:f2: 5c:ea:ce:c1:3c:7c:33:00:ce:d8:73:be:e8:ea:a4: 64:0e:28:a4:66:2b:92:1e:2d:80:c4:d4:c8:52:6e: 1b:35:2e:12:cf:e1:b3:57:cf:0e:51:cd:d5:8f:1a: 45:5e:7d:7a:fb:58:73:bf:4c:31:51:0a:cf:f0:3d: 0f:5c:52:69:30:fb:10:28:a0:44:f2:e8:92:c0:a5: cd:59:57:e2:f9:b7:69:1e:28:94:d1:f4:6e:b6:4e: 9a:9f:b1:14:16:e6:9e:ae:cc:17:b7:1f:72:8c:b3: 83:d6:45:9f:15:ac:3e:b1:09:7e:f0:ec:e5:7c:cc: 6c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B0:F9:98:B8:12:84:63:02:7C:5F:36:29:EF:75:AB:5E:32:24:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/957a3d65-0848-33e4-a968-6bbb4b3e9041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:825c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:1f:65:21:62:1b:a8:7a:c8:a0:28:bf:a5:6d:b1:f7:0a:e0: a7:f4:eb:42:80:c8:36:f6:c1:87:9d:b2:ea:15:89:0a:39:00: cb:b1:e6:55:7a:fa:5e:29:20:5f:6c:69:e4:d6:2f:ea:de:33: e6:48:cc:35:dc:a0:e1:e8:2c:de:6d:d2:2d:9b:c8:b2:38:33: 28:f8:8a:da:89:f4:74:e4:ef:54:20:24:89:12:00:20:fb:5d: 91:c4:cc:08:15:21:ef:13:ad:e6:db:6b:de:a2:d4:1c:f5:ac: a0:9d:2e:de:d3:9e:3e:ed:ea:79:8a:4b:cd:0e:b1:52:4f:82: 92:11:0b:b2:6d:e6:38:12:b8:44:77:bf:b3:13:2d:a4:15:5a: 06:5c:c8:a6:c5:71:83:f0:91:75:23:cf:d1:9e:72:b7:36:ba: a9:29:1d:0a:3b:f5:27:03:d0:93:ca:e3:93:35:cf:7a:ac:99: 62:44:8f:b7:50:85:a2:08:f5:42:82:0b:cf:23:0d:9c:25:ca: 51:27:58:58:b6:84:92:5c:ba:0c:c4:fe:f9:1a:d5:39:fe:0f: 70:c0:58:1e:18:0c:e5:d9:96:b2:49:49:32:54:19:28:ce:9c: d7:1a:91:ba:34:86:a9:a9:4e:5c:35:52:d8:17:c2:7a:c4:ad: d3:65:2d:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/dLkB49HbYu2JiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MTdiZTIxZWItZDUyMi00NDA5LWIwMGMtYTYwYjVhZmQ1M2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuw7yJfabb91+at6TbxJHtW2bgRQ2PmMsz6j R1RUdsfFvLLb8jedNhN9Om3TzWjtrdOfD0pA7F0JvguVMv+kkBd9t2Y9zIGQSYiY QFyK0FRq0wAfU26wjNWjn7z8JQ0R2r8SMJvK2qd+3Ev038sQPsc30nZQumV1kNXV dk695+VUCqz+0PJc6s7BPHwzAM7Yc77o6qRkDiikZiuSHi2AxNTIUm4bNS4Sz+Gz V88OUc3VjxpFXn16+1hzv0wxUQrP8D0PXFJpMPsQKKBE8uiSwKXNWVfi+bdpHiiU 0fRutk6an7EUFuaerswXtx9yjLOD1kWfFaw+sQl+8OzlfMxsLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA2w+Zi4EoRjAnxfNinvdateMiQLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU3YTNkNjUtMDg0OC0z M2U0LWE5NjgtNmJiYjRiM2U5MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABIfZSFiG6h6yKAov6VtsfcK4Kf060KAyDb2wYedsuoViQo5AMux 5lV6+l4pIF9saeTWL+reM+ZIzDXcoOHoLN5t0i2byLI4Myj4itqJ9HTk71QgJIkS ACD7XZHEzAgVIe8Trebba96i1Bz1rKCdLt7Tnj7t6nmKS80OsVJPgpIRC7Jt5jgS uER3v7MTLaQVWgZcyKbFcYPwkXUjz9Gecrc2uqkpHQo79ScD0JPK45M1z3qsmWJE j7dQhaII9UKCC88jDZwlylEnWFi2hJJcugzE/vka1Tn+D3DAWB4YDOXZlrJJSTJU GSjOnNcakbo0hqmpTlw1UtgXwnrErdNlLV4= -----END CERTIFICATE-----Generated at Sun Jul 20 21:13:43 2025 by rpki-client