$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a00943ec-9724-344b-95f6-cc0fce2f4e42.roa File: a00943ec-9724-344b-95f6-cc0fce2f4e42.roa (raw, json) Hash identifier: eYST1NMoBwGjKOm81UEW1GIi3TwYnymYnCBHARoCJ3g= Subject key identifier: 80:6E:EB:DD:19:6C:10:5E:7B:0E:0E:F1:88:5B:99:CF:F4:64:E4:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDCE60CF3D0C9E069A0000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a00943ec-9724-344b-95f6-cc0fce2f4e42.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33659 IP address blocks: 2001:559:31b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:ce:60:cf:3d:0c:9e:06:9a:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=25e3f460-009c-49e0-a439-e9c56558051a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:df:6d:b9:f3:75:67:9c:dd:1f:d1:27:8b:23: c3:f5:6d:be:54:17:47:e3:52:35:ab:28:c4:5b:b9: b7:bb:bb:22:df:42:f0:f6:62:a9:fe:7d:38:72:c2: 9f:c8:c9:5c:97:21:24:b5:30:73:b0:2a:1a:74:88: ff:ca:90:51:7b:dc:49:ac:05:a0:59:40:e5:67:be: 5a:8d:2d:1c:94:0e:5a:e3:7d:84:92:aa:f4:ed:a7: 29:81:80:c5:05:82:26:1b:23:3e:9a:d0:57:6e:c8: 22:0a:a4:61:91:1e:d4:eb:99:b4:9b:04:e9:34:c6: 09:28:41:1e:f9:38:de:fd:61:1a:60:e6:e8:6d:c0: 4e:22:fa:95:29:23:14:b0:f9:16:09:bc:3c:d6:03: fd:ea:ba:67:d4:36:b8:bb:49:22:66:bf:8e:7a:55: 61:a4:cf:47:d4:68:3b:8b:1a:97:45:01:8b:8f:c8: 75:4c:67:52:cd:ca:77:e3:7d:bc:55:3e:a4:bc:16: 82:ed:94:10:c4:33:4a:56:e7:4c:93:6e:f4:12:8c: ee:af:4c:c7:4a:9f:ba:49:6d:5e:43:fb:6c:4e:7c: c2:7c:9b:5d:a7:32:c2:44:83:92:90:93:13:3b:22: ef:62:d0:26:4a:2a:9b:8d:e5:e7:59:2f:98:5a:05: bb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:6E:EB:DD:19:6C:10:5E:7B:0E:0E:F1:88:5B:99:CF:F4:64:E4:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a00943ec-9724-344b-95f6-cc0fce2f4e42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:31b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:15:08:6e:01:4b:35:5c:86:84:eb:ba:73:b1:7c:79:91:ab: fa:81:cb:b2:a2:b6:80:00:96:a9:5b:f6:2b:18:23:b0:01:15: 5c:fb:af:76:ab:24:d7:97:2a:71:6b:30:38:2b:a5:b5:92:a0: 7c:66:ff:c5:8b:d1:ff:85:ba:72:7d:bd:cf:5a:95:b6:e9:11: 5c:32:df:60:87:7a:78:96:fd:3e:2c:68:fd:d6:d9:e4:1b:66: dc:05:e3:e9:af:10:54:31:c6:ae:70:df:2f:19:dc:74:c0:09: 5d:cd:5b:47:25:90:0a:7f:f0:cf:0c:95:83:81:bf:94:5b:66: 5b:6a:7a:50:32:63:34:2a:1d:90:45:db:64:d2:3f:66:0f:b4: f5:e6:ca:f5:10:47:b9:69:bd:37:78:f8:39:00:93:48:12:aa: 32:85:7f:54:64:4b:6b:98:ce:9a:d6:21:54:1d:2b:37:76:56: d3:d1:79:53:9a:19:45:74:8e:91:36:27:6d:8a:0d:78:1c:bc: f0:aa:72:7b:af:74:13:9b:71:5c:56:37:44:e1:59:e1:09:f0: b6:0a:bb:22:68:ce:6f:60:89:6d:8c:27:16:5b:cd:64:36:11: 27:8f:6f:41:0e:31:1f:60:df:69:6f:ff:34:b2:b4:ad:04:a4: 3a:42:e0:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/c5gzz0MngaaAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MjVlM2Y0NjAtMDA5Yy00OWUwLWE0MzktZTljNTY1NTgwNTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt9tufN1Z5zdH9EniyPD9W2+VBdH41I1qyjE W7m3u7si30Lw9mKp/n04csKfyMlclyEktTBzsCoadIj/ypBRe9xJrAWgWUDlZ75a jS0clA5a432Ekqr07acpgYDFBYImGyM+mtBXbsgiCqRhkR7U65m0mwTpNMYJKEEe +Tje/WEaYObobcBOIvqVKSMUsPkWCbw81gP96rpn1Da4u0kiZr+OelVhpM9H1Gg7 ixqXRQGLj8h1TGdSzcp34328VT6kvBaC7ZQQxDNKVudMk270Eozur0zHSp+6SW1e Q/tsTnzCfJtdpzLCRIOSkJMTOyLvYtAmSiqbjeXnWS+YWgW7nQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIBu690ZbBBeew4O8Yhbmc/0ZOT8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTAwOTQzZWMtOTcyNC0z NDRiLTk1ZjYtY2MwZmNlMmY0ZTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQMb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAEVCG4BSzVchoTrunOxfHmRq/qBy7KitoAAlqlb9isYI7ABFVz7 r3arJNeXKnFrMDgrpbWSoHxm/8WL0f+FunJ9vc9albbpEVwy32CHeniW/T4saP3W 2eQbZtwF4+mvEFQxxq5w3y8Z3HTACV3NW0clkAp/8M8MlYOBv5RbZltqelAyYzQq HZBF22TSP2YPtPXmyvUQR7lpvTd4+DkAk0gSqjKFf1RkS2uYzprWIVQdKzd2VtPR eVOaGUV0jpE2J22KDXgcvPCqcnuvdBObcVxWN0ThWeEJ8LYKuyJozm9giW2MJxZb zWQ2ESePb0EOMR9g32lv/zSytK0EpDpC4PE= -----END CERTIFICATE-----Generated at Sun Jul 20 21:41:57 2025 by rpki-client