$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14c9cd0-c784-3111-8e81-a63f1a3f50d1.roa File: d14c9cd0-c784-3111-8e81-a63f1a3f50d1.roa (raw, json) Hash identifier: iFgKVdRmBLF1c39ET/pqujeAR8wO2N5YKSe6b57R6rw= Subject key identifier: 68:B0:5D:7A:6F:B7:7D:57:B3:B6:E8:42:57:2F:85:FB:2E:2C:43:37 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCD51A549E2E2D67ADED00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14c9cd0-c784-3111-8e81-a63f1a3f50d1.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 19047 IP address blocks: 2001:559:0:f::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:d5:1a:54:9e:2e:2d:67:ad:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=bc59b5d3-f6c5-4a93-a62e-3ace52b4b38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:74:3c:55:f9:9b:2c:4c:5c:13:b5:6c:14: 3e:35:5d:89:7c:d8:04:5c:c8:bd:cd:63:b6:e9:e7: 3c:7e:10:92:c4:48:3c:eb:00:72:05:1f:5a:5d:05: c4:3b:6d:25:f5:03:14:0c:79:e9:8c:b3:3c:b7:52: 08:8c:c6:f9:6c:4a:f6:8c:ea:0d:79:07:14:ac:03: 12:39:b0:90:d3:d4:99:f4:7e:96:0c:0d:91:3e:1f: 83:07:ad:0d:ce:77:cf:76:1d:1b:14:43:76:44:4f: f8:bc:c7:ad:bb:5d:bb:df:f7:14:80:ca:6d:79:4c: c4:5e:70:76:0b:f5:34:22:1e:28:67:82:23:a9:19: 22:03:f5:f7:79:b3:f7:61:da:14:f6:44:52:97:be: f2:9e:9e:74:fd:18:72:ce:10:42:5e:d1:85:3b:f8: 1d:a7:1e:7c:18:b5:5f:6e:69:78:30:da:c1:2d:31: 67:58:1d:1e:dc:d2:5f:31:2a:34:93:de:30:1f:e1: 76:0c:32:bd:ed:35:0b:56:fb:47:4e:fd:72:36:b8: 35:f6:13:f0:e1:72:21:e8:5a:c5:ab:4c:45:09:95: 1c:40:f9:58:68:14:92:84:ec:49:9f:67:0c:c6:e3: d2:5c:1d:cd:e6:56:72:96:ac:a2:4c:93:cf:7e:27: a9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:B0:5D:7A:6F:B7:7D:57:B3:B6:E8:42:57:2F:85:FB:2E:2C:43:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d14c9cd0-c784-3111-8e81-a63f1a3f50d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:0:f::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e8:e5:7e:f2:a2:8c:22:73:c4:d7:27:ad:60:55:ef:70:b3: 59:42:15:c5:26:77:df:9e:71:75:2e:a4:e1:15:61:51:af:ec: e8:b5:3e:3b:e2:c6:6a:9d:da:ef:dc:e3:56:f3:85:06:dc:54: 09:47:b0:8c:69:46:71:94:5a:b4:9c:07:d9:04:ed:42:85:88: 77:ee:6c:8e:c4:d9:43:ff:a2:a0:7f:42:01:04:fc:d1:6a:7d: a4:24:2b:b0:4e:37:bc:38:18:34:35:3c:72:99:8d:f6:b8:b5: dd:9f:d4:c7:d9:8e:3a:3e:ca:d7:24:70:f5:53:ac:97:28:67: 23:06:14:20:e5:93:ec:90:e8:a6:d3:1e:d7:99:01:42:08:f7: 1d:13:43:84:f4:d5:9a:f8:57:f2:8f:d1:21:e7:de:83:47:ee: 25:c2:44:b4:8b:47:3d:ef:e3:c0:7c:cc:b3:82:ba:15:68:de: 62:8c:f4:d7:48:95:3b:60:ae:52:fc:ee:db:0c:a3:21:45:33: be:80:5c:99:31:c2:d4:d7:b8:94:be:13:6c:fa:0a:bd:48:82: 25:89:32:96:75:bb:91:6f:9e:bf:08:10:b3:6e:c5:dc:19:58: d2:14:6a:d7:3e:9b:96:00:53:bf:62:5b:45:29:17:a2:2d:12: 31:c1:e9:f0 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEpc/NUaVJ4uLWet7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YmM1OWI1ZDMtZjZjNS00YTkzLWE2MmUtM2FjZTUyYjRiMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoZ0PFX5myxMXBO1bBQ+NV2JfNgEXMi9zWO2 6ec8fhCSxEg86wByBR9aXQXEO20l9QMUDHnpjLM8t1IIjMb5bEr2jOoNeQcUrAMS ObCQ09SZ9H6WDA2RPh+DB60NznfPdh0bFEN2RE/4vMetu1273/cUgMpteUzEXnB2 C/U0Ih4oZ4IjqRkiA/X3ebP3YdoU9kRSl77ynp50/RhyzhBCXtGFO/gdpx58GLVf bml4MNrBLTFnWB0e3NJfMSo0k94wH+F2DDK97TULVvtHTv1yNrg19hPw4XIh6FrF q0xFCZUcQPlYaBSShOxJn2cMxuPSXB3N5lZylqyiTJPPfiep+wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFGiwXXpvt31Xs7boQlcvhfsuLEM3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE0YzljZDAtYzc4NC0z MTExLThlODEtYTYzZjFhM2Y1MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA AA8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAXujlfvKijCJzxNcnrWBV73CzWUIVxSZ3355xdS6k4RVhUa/s 6LU+O+LGap3a79zjVvOFBtxUCUewjGlGcZRatJwH2QTtQoWId+5sjsTZQ/+ioH9C AQT80Wp9pCQrsE43vDgYNDU8cpmN9ri13Z/Ux9mOOj7K1yRw9VOslyhnIwYUIOWT 7JDoptMe15kBQgj3HRNDhPTVmvhX8o/RIefeg0fuJcJEtItHPe/jwHzMs4K6FWje Yoz010iVO2CuUvzu2wyjIUUzvoBcmTHC1Ne4lL4TbPoKvUiCJYkylnW7kW+evwgQ s27F3BlY0hRq1z6blgBTv2JbRSkXoi0SMcHp8A== -----END CERTIFICATE-----Generated at Sun Jul 20 21:19:12 2025 by rpki-client