$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/989d0985-da2c-362c-b6ae-61e3b3050345.roa File: 989d0985-da2c-362c-b6ae-61e3b3050345.roa (raw, json) Hash identifier: Lguees4AQGK07ptOsErbEmplWEotXkWgF2N9dxQDIaA= Subject key identifier: 1D:D6:37:29:9C:1B:B7:32:C6:7F:20:7B:3A:C2:5B:9A:EC:C9:30:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC4BC2B7E94508DF3A5800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/989d0985-da2c-362c-b6ae-61e3b3050345.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 2001:559:8373::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:4b:c2:b7:e9:45:08:df:3a:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=02572d0a-02c0-437e-8c21-5283a76a9885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:11:48:fc:95:94:81:a5:e9:0f:ef:3b:4d:6b: 2a:89:81:79:fa:fd:1e:7d:8b:16:dd:09:ea:16:f9: 42:c2:de:f9:59:e8:7a:2f:a4:24:59:93:31:b6:d5: f4:96:61:5d:1e:9f:30:38:8c:34:f5:8b:22:06:6b: 1b:8e:ce:a6:6a:17:3f:ab:94:be:48:f3:76:4d:ae: 0b:ec:bf:15:9d:08:2a:35:5c:21:92:b1:9d:3e:b9: c6:d1:35:be:75:45:7d:26:9a:11:3c:4a:52:f9:e7: d1:1c:ec:53:41:4d:b2:8f:3b:89:29:1b:bc:52:d4: c1:0a:f5:53:b3:52:fd:20:7a:19:c9:56:18:d2:29: b2:84:88:8c:c9:ba:f2:82:b7:d0:a3:c4:1c:b1:a1: 42:63:e9:67:07:1d:ce:4f:9b:85:93:60:1f:33:b1: d2:ad:9c:55:c3:3a:86:7d:06:a3:88:65:af:92:1f: 13:1f:0c:14:3c:a5:d4:2b:d6:56:9a:7a:57:bf:6b: a1:ee:fd:92:c4:cc:77:ca:5b:4a:5c:bf:fe:a6:84: 2d:63:bc:93:20:0b:0a:43:5f:9e:60:73:3c:2e:33: fa:8d:10:dc:4f:c5:d0:f5:b5:f1:a5:e0:e1:44:0c: d2:c0:6e:eb:a6:02:d9:77:f9:5b:d5:4a:55:0d:d4: 94:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D6:37:29:9C:1B:B7:32:C6:7F:20:7B:3A:C2:5B:9A:EC:C9:30:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/989d0985-da2c-362c-b6ae-61e3b3050345.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8373::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:12:4f:58:0d:f9:2a:00:0f:42:01:7f:c7:49:d2:0a:27:21: bb:b5:7f:81:6c:8e:6d:b0:78:8c:54:55:02:64:18:d6:81:1e: ed:d2:46:9d:da:91:a4:bd:1e:83:b4:16:e7:6d:49:ac:ae:91: 4e:82:e2:23:33:ba:f9:f7:54:87:45:12:e9:62:cb:2d:01:6c: e4:35:ec:28:26:27:35:e7:20:b5:8f:90:de:f8:ed:5f:0e:39: 0e:dc:c9:1e:bb:fd:ca:5e:e5:25:3b:88:e3:be:90:7c:c1:2d: 16:da:cd:cd:ac:e6:22:04:d8:13:c1:4d:4c:87:40:5d:3e:90: 90:ca:38:8b:13:af:c7:6f:4e:52:8a:de:65:3b:26:52:34:d3: 57:5d:6f:78:44:25:4d:54:9e:77:63:6e:26:22:0d:16:eb:a5: b8:05:5f:ae:fd:9f:2b:cf:2a:4b:08:8f:c9:80:b9:a7:6d:b2: a8:22:b8:df:f7:8c:60:be:2f:dc:45:94:de:59:68:bf:6c:15: e0:b0:19:95:b8:eb:80:d6:9c:65:11:c3:94:18:74:b2:1b:a4: 93:9a:95:1b:ea:9b:04:f8:1b:b1:8b:28:76:60:39:f3:7b:0c: 49:ab:a6:e0:a7:2f:4d:47:fa:2c:52:bb:04:24:6a:5d:89:82: fa:42:72:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/EvCt+lFCN86WAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MDI1NzJkMGEtMDJjMC00MzdlLThjMjEtNTI4M2E3NmE5ODg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxFI/JWUgaXpD+87TWsqiYF5+v0efYsW3Qnq FvlCwt75Weh6L6QkWZMxttX0lmFdHp8wOIw09YsiBmsbjs6mahc/q5S+SPN2Ta4L 7L8VnQgqNVwhkrGdPrnG0TW+dUV9JpoRPEpS+efRHOxTQU2yjzuJKRu8UtTBCvVT s1L9IHoZyVYY0imyhIiMybrygrfQo8QcsaFCY+lnBx3OT5uFk2AfM7HSrZxVwzqG fQajiGWvkh8THwwUPKXUK9ZWmnpXv2uh7v2SxMx3yltKXL/+poQtY7yTIAsKQ1+e YHM8LjP6jRDcT8XQ9bXxpeDhRAzSwG7rpgLZd/lb1UpVDdSUNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB3WNymcG7cyxn8gezrCW5rsyTA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTg5ZDA5ODUtZGEyYy0z NjJjLWI2YWUtNjFlM2IzMDUwMzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYNz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYST1gN+SoAD0IBf8dJ0gonIbu1f4Fsjm2weIxUVQJkGNaBHu3S Rp3akaS9HoO0FudtSayukU6C4iMzuvn3VIdFEuliyy0BbOQ17CgmJzXnILWPkN74 7V8OOQ7cyR67/cpe5SU7iOO+kHzBLRbazc2s5iIE2BPBTUyHQF0+kJDKOIsTr8dv TlKK3mU7JlI001ddb3hEJU1UnndjbiYiDRbrpbgFX679nyvPKksIj8mAuadtsqgi uN/3jGC+L9xFlN5ZaL9sFeCwGZW464DWnGURw5QYdLIbpJOalRvqmwT4G7GLKHZg OfN7DEmrpuCnL01H+ixSuwQkal2JgvpCcoE= -----END CERTIFICATE-----Generated at Sun Jul 20 21:42:59 2025 by rpki-client