$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0970f4f-4c97-35a5-88b0-27922914f186.roa File: c0970f4f-4c97-35a5-88b0-27922914f186.roa (raw, json) Hash identifier: YDUg/xKT8x+DIAd3Bcmls+Gb8tbUTysgEUoT/LQoy5I= Subject key identifier: 52:43:24:D9:CA:98:EF:CB:5E:BE:0F:28:5D:F7:70:CB:40:4D:EF:EF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBE837188DDFDBFB017F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0970f4f-4c97-35a5-88b0-27922914f186.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7015 IP address blocks: 2001:559:72e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:e8:37:18:8d:df:db:fb:01:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=c16be638-a0a4-4129-add8-c5672a0d81f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ed:b1:15:04:22:66:f3:7b:52:ae:e3:38:f3: b7:40:a2:54:ab:62:1c:5b:0f:55:f0:ed:7d:99:05: 08:3b:19:5f:50:43:26:d8:32:69:5f:5b:4b:d0:fd: d3:b7:b6:c4:4a:3e:ef:5d:b5:57:94:0c:9f:60:f8: c8:79:1d:72:df:2b:e0:ad:88:54:5f:43:c5:1b:41: ad:31:46:da:a1:8a:c3:a1:4f:a6:a8:7f:61:40:09: 4c:ec:0d:a1:df:cf:68:87:f9:7b:68:b0:c5:91:09: 50:ee:d8:ce:33:38:24:38:78:c3:69:f1:47:c9:60: 23:25:30:68:b1:d4:1a:d8:f6:44:d1:16:93:cc:bd: d2:0f:ff:fd:21:18:33:a2:53:64:9e:eb:13:a7:ea: 0f:2b:7e:c2:f5:31:71:77:a8:76:90:04:2f:27:8f: 48:6d:01:55:a0:4d:c1:01:91:55:6b:19:28:46:e4: f6:c4:b6:7b:b4:5e:d6:9b:38:67:7b:02:13:0f:83: 72:1f:9c:d6:00:5d:e8:4d:40:6c:e3:d9:f1:23:f3: 52:65:a5:19:dc:b5:f7:cf:07:c1:36:29:86:4a:20: 78:62:dd:51:94:8b:31:53:3d:e2:da:80:e5:c1:1d: 7c:14:0f:7a:46:7b:39:b0:be:cb:f6:94:dd:4d:86: ce:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:24:D9:CA:98:EF:CB:5E:BE:0F:28:5D:F7:70:CB:40:4D:EF:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0970f4f-4c97-35a5-88b0-27922914f186.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:72e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:cc:ec:50:7d:a4:17:58:5d:18:23:97:85:e5:3f:01:5d:44: 5a:ab:fc:75:d6:3d:a3:7c:54:8e:ee:9f:33:70:4e:83:ba:e6: 59:9a:4e:76:84:16:2e:d2:b6:5b:05:74:92:05:49:dc:df:f3: e0:51:c8:07:6d:ed:61:66:a1:69:c3:4d:a0:1a:1e:bc:69:d8: 7b:19:dc:53:fd:51:b3:9b:9c:29:86:c5:db:f2:51:f5:97:c4: 98:e8:90:c6:1d:6a:9a:43:05:a5:bf:ee:0a:7f:b4:cb:49:f4: 27:8c:f7:73:5d:12:94:7c:17:06:23:f8:ea:17:46:bb:40:6e: b8:8d:20:0a:61:92:d4:26:48:b1:4f:50:42:03:00:d1:69:65: 44:75:8a:9e:6b:df:07:37:88:81:ef:bc:87:6d:11:db:39:8a: 5d:fc:4c:8e:de:39:d6:22:9b:86:57:d1:2b:b0:04:40:4d:f3: b0:22:62:1f:f0:b3:40:1f:7f:f9:64:60:ea:2e:47:3c:0c:6f: e8:2c:09:df:fb:d9:d7:16:81:5c:61:02:28:ae:e4:77:68:89: f3:dd:ef:e7:40:3d:c7:21:1d:f3:7b:33:48:75:72:0c:60:1e: 04:e8:d6:ff:d0:7b:fc:e3:54:dd:b9:d7:6b:87:ae:8f:fe:26: cf:6e:ea:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc++g3GI3f2/sBf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YzE2YmU2MzgtYTBhNC00MTI5LWFkZDgtYzU2NzJhMGQ4MWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+2xFQQiZvN7Uq7jOPO3QKJUq2IcWw9V8O19 mQUIOxlfUEMm2DJpX1tL0P3Tt7bESj7vXbVXlAyfYPjIeR1y3yvgrYhUX0PFG0Gt MUbaoYrDoU+mqH9hQAlM7A2h389oh/l7aLDFkQlQ7tjOMzgkOHjDafFHyWAjJTBo sdQa2PZE0RaTzL3SD//9IRgzolNknusTp+oPK37C9TFxd6h2kAQvJ49IbQFVoE3B AZFVaxkoRuT2xLZ7tF7WmzhnewITD4NyH5zWAF3oTUBs49nxI/NSZaUZ3LX3zwfB NimGSiB4Yt1RlIsxUz3i2oDlwR18FA96Rns5sL7L9pTdTYbO+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJDJNnKmO/LXr4PKF33cMtATe/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzA5NzBmNGYtNGM5Ny0z NWE1LTg4YjAtMjc5MjI5MTRmMTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQcu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAXM7FB9pBdYXRgjl4XlPwFdRFqr/HXWPaN8VI7unzNwToO65lma TnaEFi7StlsFdJIFSdzf8+BRyAdt7WFmoWnDTaAaHrxp2HsZ3FP9UbObnCmGxdvy UfWXxJjokMYdappDBaW/7gp/tMtJ9CeM93NdEpR8FwYj+OoXRrtAbriNIAphktQm SLFPUEIDANFpZUR1ip5r3wc3iIHvvIdtEds5il38TI7eOdYim4ZX0SuwBEBN87Ai Yh/ws0Aff/lkYOouRzwMb+gsCd/72dcWgVxhAiiu5HdoifPd7+dAPcchHfN7M0h1 cgxgHgTo1v/Qe/zjVN2512uHro/+Js9u6p8= -----END CERTIFICATE-----Generated at Sun Jul 20 21:38:46 2025 by rpki-client