$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f55f0f-e312-3ed7-989f-9866e611930a.roa File: d4f55f0f-e312-3ed7-989f-9866e611930a.roa (raw, json) Hash identifier: h2U5n+se+YpcDBeVdALOv96oLA3g+UdjHdvkl7V3Njk= Subject key identifier: 29:0B:AA:BA:CF:68:BE:64:8E:B4:F2:C7:EE:5A:35:8A:5F:99:6D:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC44A914FDB6C603726700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f55f0f-e312-3ed7-989f-9866e611930a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 2001:559:40c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:44:a9:14:fd:b6:c6:03:72:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=35960af8-8244-4b54-b253-c80f19c0daf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a4:f1:a1:9f:18:37:1d:ab:6c:82:a0:20:0a: b4:4c:38:dc:b1:1d:7d:2f:7d:23:69:23:e0:c0:a9: df:0f:a4:b1:23:7a:3b:23:5d:2d:b3:fa:b5:8e:3c: 3e:65:e7:e9:27:cb:13:49:3f:14:4b:b5:61:0c:71: 62:b1:cd:a5:d2:dd:33:0b:51:bf:d0:97:f5:f0:be: ae:48:7a:c0:58:8f:19:1b:75:64:1e:ca:91:03:79: e4:02:db:bd:68:39:5d:47:a0:06:ef:25:c7:f3:a5: d6:ae:e8:e3:26:d1:4a:98:09:3f:7d:8d:66:14:c0: 87:f4:c7:d7:62:70:20:fd:09:97:32:f8:c8:b4:7a: 04:da:d2:98:00:c0:ae:fd:0c:36:ed:2a:8b:cd:df: 66:37:b3:f7:07:77:c2:b9:1b:5c:91:43:0f:f9:44: a2:ac:9b:90:fe:c2:b0:46:fc:bb:88:ef:93:b9:68: bd:65:fb:08:5d:69:0e:38:d4:56:da:a3:b8:a3:26: a4:c5:19:f2:41:45:b3:58:49:55:67:09:b6:bc:a7: 45:b4:31:f3:c2:2d:e5:e8:4e:3c:4a:08:40:4e:f5: 15:a3:65:77:44:34:8a:05:21:22:88:6c:1c:f7:b6: 0b:71:2c:75:98:8e:e3:e2:ed:58:bb:f7:1c:de:d6: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0B:AA:BA:CF:68:BE:64:8E:B4:F2:C7:EE:5A:35:8A:5F:99:6D:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f55f0f-e312-3ed7-989f-9866e611930a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:40c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:19:cf:32:b5:81:0b:82:a4:03:c6:63:85:91:c0:0d:60:7a: e1:4e:21:a6:9e:f7:6f:00:dd:ca:6c:2a:f0:48:dd:6b:44:90: ee:b4:18:81:6b:be:0f:da:6b:f5:1a:ef:fb:ed:85:01:62:35: d7:36:27:db:49:78:87:87:58:10:a5:9f:b4:63:50:23:29:49: 2b:bf:d8:c2:62:13:f9:6f:f0:6f:05:46:c3:6b:bc:cf:54:8d: 04:c8:58:46:3e:f1:bb:d5:0f:c7:0e:2c:89:63:c3:98:f1:c9: d3:06:70:63:f4:66:86:25:21:9d:f5:7c:e8:27:52:61:96:45: da:88:78:e9:e5:ff:44:20:5b:01:55:e3:29:2a:b2:52:ac:ac: 98:7a:f5:0c:ff:1e:58:40:97:a2:99:fd:b3:61:63:c8:b0:fc: 77:08:3c:dd:64:8d:25:fa:82:c2:02:d4:03:d9:a4:42:be:28: 7f:d7:4b:d4:26:19:47:20:ef:b4:b3:88:96:26:ef:59:d4:48: 65:75:be:a2:99:02:92:6b:30:98:47:06:60:db:88:70:3f:23: 33:74:b0:e9:b2:f3:19:1b:f7:50:ef:d6:ae:48:06:88:e3:40: 6f:a8:4e:f5:ff:6a:a8:55:52:c7:fd:24:d8:7d:15:c7:62:17: e8:de:bd:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/ESpFP22xgNyZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MzU5NjBhZjgtODI0NC00YjU0LWIyNTMtYzgwZjE5YzBkYWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaTxoZ8YNx2rbIKgIAq0TDjcsR19L30jaSPg wKnfD6SxI3o7I10ts/q1jjw+ZefpJ8sTST8US7VhDHFisc2l0t0zC1G/0Jf18L6u SHrAWI8ZG3VkHsqRA3nkAtu9aDldR6AG7yXH86XWrujjJtFKmAk/fY1mFMCH9MfX YnAg/QmXMvjItHoE2tKYAMCu/Qw27SqLzd9mN7P3B3fCuRtckUMP+USirJuQ/sKw Rvy7iO+TuWi9ZfsIXWkOONRW2qO4oyakxRnyQUWzWElVZwm2vKdFtDHzwi3l6E48 SghATvUVo2V3RDSKBSEiiGwc97YLcSx1mI7j4u1Yu/cc3tYt4QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCkLqrrPaL5kjrTyx+5aNYpfmW0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDRmNTVmMGYtZTMxMi0z ZWQ3LTk4OWYtOTg2NmU2MTE5MzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQQM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKEZzzK1gQuCpAPGY4WRwA1geuFOIaae928A3cpsKvBI3WtEkO60 GIFrvg/aa/Ua7/vthQFiNdc2J9tJeIeHWBCln7RjUCMpSSu/2MJiE/lv8G8FRsNr vM9UjQTIWEY+8bvVD8cOLIljw5jxydMGcGP0ZoYlIZ31fOgnUmGWRdqIeOnl/0Qg WwFV4ykqslKsrJh69Qz/HlhAl6KZ/bNhY8iw/HcIPN1kjSX6gsIC1APZpEK+KH/X S9QmGUcg77SziJYm71nUSGV1vqKZApJrMJhHBmDbiHA/IzN0sOmy8xkb91Dv1q5I BojjQG+oTvX/aqhVUsf9JNh9FcdiF+jevY4= -----END CERTIFICATE-----Generated at Sun Jul 20 17:16:52 2025 by rpki-client