$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b80965bc-6815-3468-ae56-5ace569e4a1d.roa File: b80965bc-6815-3468-ae56-5ace569e4a1d.roa (raw, json) Hash identifier: Qn3jZiXsjZl6FG9PtRM8Ggn9yrnliXIY7liMOf+OdmI= Subject key identifier: 60:FD:8D:45:3B:98:F4:D3:53:6E:AA:3E:1B:85:D7:A8:BE:85:07:46 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC6D26909BDC647AE9D780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b80965bc-6815-3468-ae56-5ace569e4a1d.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33657 IP address blocks: 2001:559:c0dc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:6d:26:90:9b:dc:64:7a:e9:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=f6b7b914-0786-4c1e-b46b-b451ff872d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7f:da:45:b2:57:4f:a7:09:0e:be:77:2a:7c: e2:6c:3a:83:e7:fd:bd:fb:fc:ca:e4:37:a3:99:b4: be:f7:75:d5:cd:d6:1e:81:75:a2:e0:a4:dc:8b:c6: bf:17:e2:1e:2e:a0:70:c7:7f:fd:37:67:cb:2a:d0: 4b:04:20:ba:5d:8d:07:a3:89:aa:0d:18:aa:b1:1e: 7e:a3:52:25:98:15:b3:45:3a:35:a4:d4:42:77:ac: cb:38:1d:3f:97:8d:ef:02:4c:b6:23:e9:39:92:25: 40:fc:06:6c:9a:4b:00:ef:29:e9:c9:cf:6b:10:85: 5b:83:50:3f:9b:88:bc:65:70:82:8b:09:fc:4d:71: 5d:8e:e8:ff:fb:41:7b:6f:18:69:30:eb:b4:c3:35: 88:a8:9c:0d:dc:bb:5a:6d:d2:a9:16:f8:46:73:07: aa:c8:e9:74:52:2f:e5:7a:70:8c:29:a2:da:8d:8f: e1:35:91:8b:6b:90:cc:68:2e:f0:d0:2c:f1:49:69: 1b:d8:5b:fd:15:d0:fe:2d:4c:d1:d6:d3:2a:cb:db: 9d:c4:f6:13:e8:e4:a1:1c:7c:ea:a7:81:ee:49:13: b4:e4:44:98:9a:4b:34:a3:7f:bb:54:77:ea:b5:43: 92:2e:04:b8:d7:66:6f:f8:8e:07:e4:ff:ab:21:4f: f1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FD:8D:45:3B:98:F4:D3:53:6E:AA:3E:1B:85:D7:A8:BE:85:07:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b80965bc-6815-3468-ae56-5ace569e4a1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c0dc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:69:2c:af:3d:11:ca:1f:a4:84:3f:89:5d:32:24:b4:13:04: 82:9e:62:01:0b:bf:d9:81:03:1a:c2:76:36:90:e8:bb:9b:e6: 99:0b:5a:8f:88:12:ba:11:ec:ac:8d:24:fc:51:50:6c:21:20: 76:b1:71:cb:fd:ac:fa:fc:c3:48:b5:ff:52:14:31:f9:f3:1b: 6c:24:73:8f:a3:20:96:5f:de:b4:6c:d7:81:8b:ba:1a:fa:8a: fa:c6:a1:8f:6b:53:e6:61:9c:4f:a6:0d:5c:41:5f:43:eb:0d: c8:55:31:64:3e:8a:f5:42:e5:5a:7c:23:2c:7f:45:03:61:57: 02:02:ec:8c:ef:39:33:4c:03:fe:a7:91:74:9d:6b:93:1b:ad: 2d:43:28:47:a4:07:af:78:04:82:a5:92:88:03:1d:f2:7a:d7: bc:70:77:de:1a:27:0c:a3:59:83:b2:01:bc:f8:54:bd:1b:86: 15:54:83:c0:7f:d1:14:ea:54:f1:e6:c0:ba:26:93:3d:77:ca: 45:58:a9:f3:2c:e9:7c:a7:8d:6a:fd:3f:44:b2:3e:d1:1b:c1: db:5f:a0:58:b1:d8:48:3b:8d:6e:11:2d:80:07:26:f0:da:d5: 0b:4f:c5:99:5c:9b:b2:d6:cd:06:b4:b4:d3:a9:28:a5:cd:a0: 7b:0e:1e:9d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/G0mkJvcZHrp14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZjZiN2I5MTQtMDc4Ni00YzFlLWI0NmItYjQ1MWZmODcyZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3/aRbJXT6cJDr53KnzibDqD5/29+/zK5Dej mbS+93XVzdYegXWi4KTci8a/F+IeLqBwx3/9N2fLKtBLBCC6XY0Ho4mqDRiqsR5+ o1IlmBWzRTo1pNRCd6zLOB0/l43vAky2I+k5kiVA/AZsmksA7ynpyc9rEIVbg1A/ m4i8ZXCCiwn8TXFdjuj/+0F7bxhpMOu0wzWIqJwN3LtabdKpFvhGcweqyOl0Ui/l enCMKaLajY/hNZGLa5DMaC7w0CzxSWkb2Fv9FdD+LUzR1tMqy9udxPYT6OShHHzq p4HuSRO05ESYmks0o3+7VHfqtUOSLgS412Zv+I4H5P+rIU/xnwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGD9jUU7mPTTU26qPhuF16i+hQdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjgwOTY1YmMtNjgxNS0z NDY4LWFlNTYtNWFjZTU2OWU0YTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcDc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIxpLK89EcofpIQ/iV0yJLQTBIKeYgELv9mBAxrCdjaQ6Lub5pkL Wo+IEroR7KyNJPxRUGwhIHaxccv9rPr8w0i1/1IUMfnzG2wkc4+jIJZf3rRs14GL uhr6ivrGoY9rU+ZhnE+mDVxBX0PrDchVMWQ+ivVC5Vp8Iyx/RQNhVwIC7IzvOTNM A/6nkXSda5MbrS1DKEekB694BIKlkogDHfJ617xwd94aJwyjWYOyAbz4VL0bhhVU g8B/0RTqVPHmwLomkz13ykVYqfMs6XynjWr9P0SyPtEbwdtfoFix2Eg7jW4RLYAH JvDa1QtPxZlcm7LWzQa0tNOpKKXNoHsOHp0= -----END CERTIFICATE-----Generated at Sun Jul 20 22:35:54 2025 by rpki-client