$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c55cf8-8078-3b74-8e19-0ee320d8d052.roa File: a7c55cf8-8078-3b74-8e19-0ee320d8d052.roa (raw, json) Hash identifier: SmBtTDz0CJdQGBb2OIhWyFI9b9M9c3rzKG6FQShhA8Q= Subject key identifier: D9:D3:78:F7:AB:5B:51:EC:E2:D7:48:A6:BD:C2:8D:4B:3F:68:DB:86 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBE745DE5DDF6385DFB200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c55cf8-8078-3b74-8e19-0ee320d8d052.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7015 IP address blocks: 2001:559:4cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:e7:45:de:5d:df:63:85:df:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=4f331833-10a4-4fdb-b338-cebae3fe78b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:99:49:52:d5:c0:6c:27:75:60:27:24:fe:1a: af:22:69:fb:cf:fa:f7:4c:b7:a7:da:a0:5f:36:7e: 17:cb:5f:7e:86:c6:8f:c1:71:b4:c7:f0:54:08:6a: 40:57:a5:90:4e:86:76:44:05:99:29:31:e6:a0:5e: 1a:89:b9:91:a0:55:b4:e7:ed:df:69:c9:e9:0a:bb: 3a:9a:3c:85:ca:15:21:57:b9:b0:df:66:3d:5a:49: 0a:39:6b:26:35:b0:ef:8b:51:d7:ad:ea:78:66:7f: 7f:23:aa:77:aa:4b:fa:e1:5d:be:0b:ec:b3:b2:08: af:88:de:2f:89:aa:b5:70:20:97:bb:fb:ad:33:99: 67:3c:d0:0e:c4:62:fc:43:73:98:17:70:49:09:bd: b9:37:3f:fb:5d:64:91:02:cb:28:5a:54:5d:ae:22: 58:9f:6a:9b:1f:f0:b1:5f:2f:5f:ed:fd:bd:70:42: be:06:74:a9:74:ac:b0:ff:76:f8:4f:53:d5:45:26: dc:7a:9d:2f:ec:01:08:67:c0:09:8e:e6:71:89:20: 73:20:e6:f3:47:fa:22:54:f7:bb:6f:4b:d4:40:09: 4f:c9:6c:9a:72:bf:0c:69:65:65:b9:ae:ad:2e:c5: 3e:b8:2b:48:b3:65:f4:6c:9b:79:3c:f8:1a:8f:cd: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:D3:78:F7:AB:5B:51:EC:E2:D7:48:A6:BD:C2:8D:4B:3F:68:DB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7c55cf8-8078-3b74-8e19-0ee320d8d052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:4cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:9c:93:d9:19:44:b1:37:6c:04:7c:cc:a3:61:14:b5:47:4c: c2:38:b1:dd:42:c0:a8:8b:85:90:f5:9a:a2:92:bc:19:2d:fa: a7:ba:45:f5:c1:84:23:e7:af:94:c8:c5:22:8c:fb:d2:72:89: 22:cb:ea:50:5b:03:d8:02:e8:15:a7:36:f1:5f:4b:6c:d6:a3: 84:8b:c4:46:aa:a1:11:d3:69:2d:a0:5b:82:24:c6:4f:e2:23: 59:e9:8b:92:7a:bf:41:55:24:46:71:bd:2d:04:bb:bf:a4:6a: 2c:c6:3e:6c:d5:3d:19:0a:0d:63:84:1d:2a:59:33:ba:3e:0d: 21:2e:6d:75:ec:43:22:fe:01:b5:44:9f:14:be:7f:89:b1:8e: 7b:8f:47:a3:90:cb:74:5d:aa:3e:7e:b4:83:49:8c:29:01:3b: 1a:5a:64:78:88:35:50:22:30:41:94:67:62:92:77:bf:6c:5d: 19:58:06:52:4c:ba:10:68:84:c0:0d:87:f9:8c:30:86:ed:88: ef:86:d3:fc:af:2f:1d:06:0e:d0:2d:0a:b5:e9:90:dc:3b:aa: 08:63:66:f8:43:28:0c:dc:46:1c:6e:3c:8a:db:28:e7:57:8f: 7c:33:90:21:7b:5d:56:10:d6:e2:03:24:2b:95:57:01:ac:a9: bf:e3:3a:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc++dF3l3fY4XfsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NGYzMzE4MzMtMTBhNC00ZmRiLWIzMzgtY2ViYWUzZmU3OGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZlJUtXAbCd1YCck/hqvImn7z/r3TLen2qBf Nn4Xy19+hsaPwXG0x/BUCGpAV6WQToZ2RAWZKTHmoF4aibmRoFW05+3facnpCrs6 mjyFyhUhV7mw32Y9WkkKOWsmNbDvi1HXrep4Zn9/I6p3qkv64V2+C+yzsgiviN4v iaq1cCCXu/utM5lnPNAOxGL8Q3OYF3BJCb25Nz/7XWSRAssoWlRdriJYn2qbH/Cx Xy9f7f29cEK+BnSpdKyw/3b4T1PVRSbcep0v7AEIZ8AJjuZxiSBzIObzR/oiVPe7 b0vUQAlPyWyacr8MaWVlua6tLsU+uCtIs2X0bJt5PPgaj83sqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNnTePerW1Hs4tdIpr3CjUs/aNuGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdjNTVjZjgtODA3OC0z Yjc0LThlMTktMGVlMzIwZDhkMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQTM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMWck9kZRLE3bAR8zKNhFLVHTMI4sd1CwKiLhZD1mqKSvBkt+qe6 RfXBhCPnr5TIxSKM+9JyiSLL6lBbA9gC6BWnNvFfS2zWo4SLxEaqoRHTaS2gW4Ik xk/iI1npi5J6v0FVJEZxvS0Eu7+kaizGPmzVPRkKDWOEHSpZM7o+DSEubXXsQyL+ AbVEnxS+f4mxjnuPR6OQy3Rdqj5+tINJjCkBOxpaZHiINVAiMEGUZ2KSd79sXRlY BlJMuhBohMANh/mMMIbtiO+G0/yvLx0GDtAtCrXpkNw7qghjZvhDKAzcRhxuPIrb KOdXj3wzkCF7XVYQ1uIDJCuVVwGsqb/jOrA= -----END CERTIFICATE-----Generated at Sun Jul 20 21:08:10 2025 by rpki-client