$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d845853e-507f-35f5-bdc8-6a9eb1a99922.roa File: d845853e-507f-35f5-bdc8-6a9eb1a99922.roa (raw, json) Hash identifier: zBpL/2dTU1shJ68oxyH04fVvg4JzByzLfPeLlxAcGuY= Subject key identifier: 94:E5:74:37:03:24:26:A7:F6:DB:C4:2C:8C:5E:9A:0D:F5:67:FD:BC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC6503D6E915228A3EC980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d845853e-507f-35f5-bdc8-6a9eb1a99922.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33657 IP address blocks: 2001:559:171::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:65:03:d6:e9:15:22:8a:3e:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=1cce4646-d628-4be7-aaca-f4e1d912214c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:48:a3:06:10:04:46:e9:9b:6e:52:34:3a:8d: bf:cd:6f:5a:f3:7c:16:96:db:f5:c9:51:e3:f6:72: 01:c4:e0:49:84:c4:7e:1f:3e:7c:70:39:a7:fc:38: 79:1b:1a:ef:08:75:a8:44:7e:44:b8:10:b8:c8:46: db:dd:39:dd:37:cd:60:f3:56:f2:43:93:0d:c0:15: c6:17:fc:c1:1e:8a:db:2d:5f:60:70:aa:57:a2:8c: 09:52:6b:26:f8:c5:20:fa:cd:79:6a:8f:2f:65:83: f5:e8:3d:5e:bb:72:2b:f9:dc:ae:1f:96:f3:d9:fe: 23:cf:d5:d5:12:c6:2f:c5:04:07:b1:1f:b0:a5:ab: 02:bb:a4:cb:e3:72:c5:9f:33:6d:82:36:ac:1d:d8: 94:db:4b:43:53:b0:a4:63:c7:18:15:03:58:cb:61: 7a:2e:d0:f8:de:0d:d6:5b:94:17:ad:a9:65:40:82: 9f:be:9e:34:55:ac:65:17:9e:2e:bf:f4:10:47:7e: 47:3a:c5:f4:a2:21:0f:69:d6:b3:70:e0:8d:b1:61: b2:c1:20:74:0d:9d:97:3e:ed:20:83:50:fc:79:07: 18:e4:e3:78:e6:b3:12:91:d4:0c:5f:42:36:b9:14: da:03:c3:09:01:98:64:bb:d9:5d:51:8f:ba:3f:d4: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E5:74:37:03:24:26:A7:F6:DB:C4:2C:8C:5E:9A:0D:F5:67:FD:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d845853e-507f-35f5-bdc8-6a9eb1a99922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:171::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:78:3c:4d:10:b6:6a:f0:1c:1f:f4:64:22:36:94:ea:df:db: 4f:57:88:61:13:a5:29:e5:26:df:b1:fc:1f:87:8f:89:4d:40: 62:a2:31:32:48:21:17:3d:c7:cf:c5:b5:7d:3e:58:71:d6:3d: 75:de:10:ee:c7:d8:f2:b4:3e:78:28:61:d0:13:93:57:e0:bd: d6:44:c4:b2:c5:9d:ea:ca:0f:5c:30:15:dc:27:0c:89:9b:d0: 10:17:2c:7e:ad:87:d5:42:9c:94:a3:c8:d9:ce:85:4b:4c:64: 5d:f8:03:a7:71:13:08:48:0b:c9:c5:9d:44:87:26:43:14:80: 63:25:5e:82:a3:80:2e:fa:5a:b1:60:30:9e:10:8b:16:6f:fa: e4:97:1a:94:d2:26:9f:1d:3b:41:7b:d2:f0:12:77:c2:7c:17: d9:9e:c4:5f:48:bb:b4:81:5e:f6:2b:0f:73:5b:0a:10:0d:89: 3d:a2:85:3d:68:40:52:75:12:ec:4e:b1:22:8f:3a:9b:9c:00: a4:96:a8:1c:0e:61:26:44:be:1e:50:02:2b:63:b7:33:08:b1: 03:b1:5f:15:85:4d:5c:cf:ab:fe:92:a6:cf:42:65:01:8e:ed: 0f:ce:11:83:6e:f0:0a:86:a7:a4:7b:e0:67:b5:4d:a7:0a:bf: cf:df:16:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/GUD1ukVIoo+yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MWNjZTQ2NDYtZDYyOC00YmU3LWFhY2EtZjRlMWQ5MTIyMTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0ijBhAERumbblI0Oo2/zW9a83wWltv1yVHj 9nIBxOBJhMR+Hz58cDmn/Dh5GxrvCHWoRH5EuBC4yEbb3TndN81g81byQ5MNwBXG F/zBHorbLV9gcKpXoowJUmsm+MUg+s15ao8vZYP16D1eu3Ir+dyuH5bz2f4jz9XV EsYvxQQHsR+wpasCu6TL43LFnzNtgjasHdiU20tDU7CkY8cYFQNYy2F6LtD43g3W W5QXrallQIKfvp40VaxlF54uv/QQR35HOsX0oiEPadazcOCNsWGywSB0DZ2XPu0g g1D8eQcY5ON45rMSkdQMX0I2uRTaA8MJAZhku9ldUY+6P9S5UwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJTldDcDJCan9tvELIxemg31Z/28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDg0NTg1M2UtNTA3Zi0z NWY1LWJkYzgtNmE5ZWIxYTk5OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQFx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACJ4PE0QtmrwHB/0ZCI2lOrf209XiGETpSnlJt+x/B+Hj4lNQGKi MTJIIRc9x8/FtX0+WHHWPXXeEO7H2PK0PngoYdATk1fgvdZExLLFnerKD1wwFdwn DImb0BAXLH6th9VCnJSjyNnOhUtMZF34A6dxEwhIC8nFnUSHJkMUgGMlXoKjgC76 WrFgMJ4QixZv+uSXGpTSJp8dO0F70vASd8J8F9mexF9Iu7SBXvYrD3NbChANiT2i hT1oQFJ1EuxOsSKPOpucAKSWqBwOYSZEvh5QAitjtzMIsQOxXxWFTVzPq/6Sps9C ZQGO7Q/OEYNu8AqGp6R74Ge1TacKv8/fFtE= -----END CERTIFICATE-----Generated at Sun Jul 20 17:25:03 2025 by rpki-client