$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7c41ef0-6311-3a6f-be85-55f711b5db59.roa File: c7c41ef0-6311-3a6f-be85-55f711b5db59.roa (raw, json) Hash identifier: yaDcERxkpsf34BpPDaPYR8boLxpqT+8K0103j4hL4Wk= Subject key identifier: 59:65:9E:95:B5:30:58:D0:DF:18:1D:C4:F9:E2:C4:BE:FC:51:9C:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDE7E2FFBF261195813A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7c41ef0-6311-3a6f-be85-55f711b5db59.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 397601 IP address blocks: 2001:559:86d2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:e7:e2:ff:bf:26:11:95:81:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=b1e1aeb6-c9e2-4cd2-9864-1175c2007cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:07:43:a9:33:f8:07:3a:07:a2:e4:4c:b0:8f: 8b:57:64:4f:07:66:39:ba:d7:7e:23:b0:a0:38:59: 38:c1:fc:87:13:bb:02:71:17:6b:9a:7e:46:d8:18: 64:06:b5:b5:c4:7c:be:60:8e:9e:90:c4:01:7e:77: 9a:e8:46:c8:d2:57:06:7b:c9:fd:8b:6a:a7:78:cc: 3f:15:ad:50:fc:41:ba:09:7a:0b:bb:78:93:54:fe: 51:cc:ed:96:ad:e4:3f:34:c3:df:17:74:3b:47:2a: ef:73:75:6f:a5:f0:af:af:16:22:81:67:79:68:61: a0:40:c4:22:4c:ab:56:01:68:73:96:8e:7c:7c:6c: b5:f1:f9:f1:d5:20:59:09:15:5d:f2:8b:6d:2e:a9: 39:5d:f0:7a:ca:04:09:dc:01:44:6a:54:8f:9f:75: 8b:88:7e:7d:18:ea:6f:db:d0:f2:1b:59:bd:d4:bc: ae:45:7d:3f:a3:7b:1d:7c:ce:b4:f7:ea:60:2f:2c: 71:b2:84:7f:8d:5a:8e:f7:85:60:58:62:4a:3b:43: 60:58:63:b4:5f:25:70:23:e6:19:d2:72:b2:a9:4b: 6e:4b:56:5a:1a:af:00:72:3f:45:28:4e:40:ba:2d: 7c:0d:60:e7:9b:1b:1c:f3:a9:03:10:bb:79:70:f1: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:65:9E:95:B5:30:58:D0:DF:18:1D:C4:F9:E2:C4:BE:FC:51:9C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c7c41ef0-6311-3a6f-be85-55f711b5db59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:86d2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:db:98:da:7c:68:95:b6:14:9c:3c:98:54:81:e7:e8:6e:b2: d1:ee:19:f9:c3:54:d8:ea:63:a8:b8:0f:9f:9d:3a:14:cf:7a: 63:f0:85:94:31:a6:71:1b:43:9d:5c:f5:9a:9f:f8:0d:53:6f: e4:63:06:7d:66:58:2d:49:7c:ca:e4:65:93:e9:af:ce:37:00: 89:63:39:66:5a:f1:a0:75:c6:94:5d:99:a6:9a:dc:b6:f0:1a: 91:61:62:71:78:fb:e9:a8:3f:70:86:aa:94:49:0c:d3:e2:1b: 24:0e:11:59:23:37:cf:20:11:26:76:81:f8:28:e2:7a:dd:43: 65:1d:3a:ba:6e:db:ca:92:75:a0:41:ea:4a:3f:cf:22:8b:8c: 92:20:e5:e9:b1:b0:04:54:a1:2d:72:c9:6b:d3:5a:90:f2:2a: 3e:49:de:81:3a:51:d7:ca:d8:74:5b:45:10:eb:b5:3e:89:c1: 7a:2b:da:4d:86:ea:e0:19:79:03:56:32:b5:5d:6c:66:65:19: c6:56:a3:8a:fb:b4:a0:b4:37:8f:d3:cc:5a:9a:58:e2:eb:f2: 18:3a:80:88:e1:10:56:12:04:34:43:c2:89:2e:a1:6b:f4:19: d9:1f:b0:1c:6a:d8:33:ea:ed:fe:26:51:5d:92:f5:84:99:44: 86:26:87:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/efi/78mEZWBOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YjFlMWFlYjYtYzllMi00Y2QyLTk4NjQtMTE3NWMyMDA3Y2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgdDqTP4BzoHouRMsI+LV2RPB2Y5utd+I7Cg OFk4wfyHE7sCcRdrmn5G2BhkBrW1xHy+YI6ekMQBfnea6EbI0lcGe8n9i2qneMw/ Fa1Q/EG6CXoLu3iTVP5RzO2WreQ/NMPfF3Q7Ryrvc3VvpfCvrxYigWd5aGGgQMQi TKtWAWhzlo58fGy18fnx1SBZCRVd8ottLqk5XfB6ygQJ3AFEalSPn3WLiH59GOpv 29DyG1m91LyuRX0/o3sdfM609+pgLyxxsoR/jVqO94VgWGJKO0NgWGO0XyVwI+YZ 0nKyqUtuS1ZaGq8Acj9FKE5Aui18DWDnmxsc86kDELt5cPECCQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFllnpW1MFjQ3xgdxPnixL78UZziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzdjNDFlZjAtNjMxMS0z YTZmLWJlODUtNTVmNzExYjVkYjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYbS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB3bmNp8aJW2FJw8mFSB5+hustHuGfnDVNjqY6i4D5+dOhTPemPw hZQxpnEbQ51c9Zqf+A1Tb+RjBn1mWC1JfMrkZZPpr843AIljOWZa8aB1xpRdmaaa 3LbwGpFhYnF4++moP3CGqpRJDNPiGyQOEVkjN88gESZ2gfgo4nrdQ2UdOrpu28qS daBB6ko/zyKLjJIg5emxsARUoS1yyWvTWpDyKj5J3oE6UdfK2HRbRRDrtT6JwXor 2k2G6uAZeQNWMrVdbGZlGcZWo4r7tKC0N4/TzFqaWOLr8hg6gIjhEFYSBDRDwoku oWv0GdkfsBxq2DPq7f4mUV2S9YSZRIYmh7U= -----END CERTIFICATE-----Generated at Sun Jul 20 17:24:33 2025 by rpki-client