$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb4dda0e-8f5a-3201-ae6d-31628a6d21a0.roa File: cb4dda0e-8f5a-3201-ae6d-31628a6d21a0.roa (raw, json) Hash identifier: G7pTp2nzSZmAlg3VrW2NhQRsbJSJP6DFCJAcJygK3Hs= Subject key identifier: 54:38:75:D0:03:E8:EB:3F:64:D7:D9:B4:2D:62:96:70:82:C7:8A:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBE7D01A8359D4B5338D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb4dda0e-8f5a-3201-ae6d-31628a6d21a0.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7015 IP address blocks: 2001:559:568::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:e7:d0:1a:83:59:d4:b5:33:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=394e0ce5-b306-47a2-b7e1-187aa6ba2815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2f:53:36:74:cb:d2:00:73:3a:cf:59:7f:cc: f8:eb:e1:84:a4:a7:ad:f3:7d:76:2c:30:17:80:9b: 31:f5:39:0e:3c:cf:e9:50:53:14:89:53:e4:36:96: 39:00:e5:e4:c2:6d:e9:b2:57:0f:3f:bb:63:7d:14: 34:01:90:83:ff:48:98:23:4e:63:03:01:3b:24:aa: cf:d2:c6:e2:ed:45:e2:cc:17:19:62:fb:24:a1:49: 48:a0:f0:0e:51:5e:df:df:54:51:07:b7:d4:ac:aa: 32:cb:19:e1:93:86:0a:11:ea:50:63:2e:6f:19:18: d9:a5:5e:d3:36:4f:82:6c:4a:2b:69:07:cd:e3:6c: 2f:75:00:50:e1:b5:13:b6:8b:65:14:0b:40:17:d1: 20:bd:60:d1:e6:98:0f:32:cf:4a:44:74:dc:a3:27: 59:9f:22:8b:9d:3f:b5:b0:a5:8c:8f:5b:b6:33:a7: 60:3b:51:3e:5d:2c:80:51:14:98:1a:11:b1:49:a6: 51:74:17:02:52:28:5d:35:96:45:44:61:33:a9:30: d2:d4:6a:90:39:f8:29:49:02:2f:f7:19:9a:c7:f3: 06:2d:b0:73:dd:f1:c3:a2:93:5d:f3:ed:82:ec:f3: f2:2c:2f:a7:a8:fd:ed:c8:cf:e4:c6:8a:5d:82:f3: 28:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:38:75:D0:03:E8:EB:3F:64:D7:D9:B4:2D:62:96:70:82:C7:8A:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb4dda0e-8f5a-3201-ae6d-31628a6d21a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:568::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f6:27:6e:4c:f5:31:60:c5:35:2b:39:d4:8d:88:7b:21:e7: 9b:9f:5c:0d:22:ed:d7:5a:e3:67:e0:30:01:55:83:1d:57:ae: 05:71:b6:e4:9b:cd:24:18:99:0f:06:41:7a:c5:63:2b:55:55: b6:7b:6e:c5:5f:8c:19:40:05:8a:59:53:ca:d9:99:2d:f7:a1: 59:53:f8:1d:88:70:6c:90:41:8c:10:73:1b:dd:50:2b:6c:33: 7b:01:f7:ea:03:30:ac:69:db:0f:1d:16:ea:db:be:fc:16:42: dc:8e:29:87:f9:06:e7:73:2b:01:e0:97:1b:9b:3c:f1:c5:93: 8a:18:7f:12:22:97:0a:f5:39:32:9a:dd:85:a8:67:0b:de:41: 97:f2:10:63:6d:dc:39:64:56:3a:81:ba:2d:83:44:90:11:58: 5b:87:36:6c:96:95:c9:eb:f4:fb:f0:91:79:28:69:0b:d0:1f: 51:2b:39:3c:47:82:fd:f3:71:8e:51:ea:bb:1f:74:f7:4c:d8: f3:db:e7:06:54:5e:8d:7b:18:1d:bd:a7:07:2a:c7:3c:39:5c: ca:98:5d:75:eb:13:ac:2e:55:83:94:23:37:63:8b:56:6e:54: 23:2a:6b:44:6c:a6:31:77:6d:f3:a9:96:8c:7d:bc:be:38:50: 81:96:48:2c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc++fQGoNZ1LUzjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk Mzk0ZTBjZTUtYjMwNi00N2EyLWI3ZTEtMTg3YWE2YmEyODE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi9TNnTL0gBzOs9Zf8z46+GEpKet8312LDAX gJsx9TkOPM/pUFMUiVPkNpY5AOXkwm3pslcPP7tjfRQ0AZCD/0iYI05jAwE7JKrP 0sbi7UXizBcZYvskoUlIoPAOUV7f31RRB7fUrKoyyxnhk4YKEepQYy5vGRjZpV7T Nk+CbEoraQfN42wvdQBQ4bUTtotlFAtAF9EgvWDR5pgPMs9KRHTcoydZnyKLnT+1 sKWMj1u2M6dgO1E+XSyAURSYGhGxSaZRdBcCUihdNZZFRGEzqTDS1GqQOfgpSQIv 9xmax/MGLbBz3fHDopNd8+2C7PPyLC+nqP3tyM/kxopdgvMoiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFQ4ddAD6Os/ZNfZtC1ilnCCx4q7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2I0ZGRhMGUtOGY1YS0z MjAxLWFlNmQtMzE2MjhhNmQyMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQVo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABT2J25M9TFgxTUrOdSNiHsh55ufXA0i7dda42fgMAFVgx1XrgVx tuSbzSQYmQ8GQXrFYytVVbZ7bsVfjBlABYpZU8rZmS33oVlT+B2IcGyQQYwQcxvd UCtsM3sB9+oDMKxp2w8dFurbvvwWQtyOKYf5BudzKwHglxubPPHFk4oYfxIilwr1 OTKa3YWoZwveQZfyEGNt3DlkVjqBui2DRJARWFuHNmyWlcnr9PvwkXkoaQvQH1Er OTxHgv3zcY5R6rsfdPdM2PPb5wZUXo17GB29pwcqxzw5XMqYXXXrE6wuVYOUIzdj i1ZuVCMqa0RspjF3bfOplox9vL44UIGWSCw= -----END CERTIFICATE-----Generated at Sun Jul 20 17:27:41 2025 by rpki-client