$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8d80f5e-b0ed-3f39-b2d3-35f0fc9db962.roa File: d8d80f5e-b0ed-3f39-b2d3-35f0fc9db962.roa (raw, json) Hash identifier: ZhV0U00PAWjcFCGICtsJY75kQNRc9ZzdkQRlBbtZum4= Subject key identifier: D8:72:AD:DF:88:04:91:36:AF:46:9C:9B:3E:12:89:88:BC:F7:90:CC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC64BB3066E77300017480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8d80f5e-b0ed-3f39-b2d3-35f0fc9db962.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33657 IP address blocks: 2001:559:db::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:64:bb:30:66:e7:73:00:01:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=f95042e3-64f4-4176-879c-8f518a48ce0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:eb:25:f1:9c:ee:92:e2:94:bf:64:1d:5d:3a: ad:b3:4f:ed:1a:ac:57:02:90:18:19:5d:e5:a6:20: a5:51:9c:a2:fd:04:12:ce:af:86:1e:74:51:e3:15: 59:92:7b:ca:8b:9c:e7:05:63:3a:eb:31:83:55:3d: 60:44:56:ff:17:2b:f8:17:ec:d7:11:0e:cc:c2:b8: 79:c3:95:28:11:57:56:a1:17:a3:13:29:cf:90:33: e9:ee:26:b0:c3:cb:b3:5e:26:af:40:79:2f:e2:29: 29:26:6f:26:b5:4b:2c:33:9f:d0:c0:a8:8f:79:88: f9:bf:1a:36:bf:fb:27:df:35:28:1b:f2:50:9f:a2: db:c7:24:2e:80:78:2d:c6:8c:a8:0e:e7:74:a6:44: be:49:b0:6c:1d:1f:a3:84:77:b7:c1:ce:3e:38:1b: 55:de:f8:50:50:74:38:a9:66:a2:14:0c:16:1e:10: 5b:27:3f:7a:da:45:66:9b:6d:6b:75:c2:41:1b:e3: 3d:8a:be:ff:e7:1c:d1:e9:c3:c3:62:80:43:fc:3b: 21:2f:7b:ff:73:bb:a7:17:f3:7d:54:be:bd:bf:45: 46:57:d8:f8:aa:35:2f:81:d7:8c:29:ce:be:f3:ca: 48:55:38:86:1c:35:b3:5e:ff:89:49:3c:5f:3a:3c: d7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:72:AD:DF:88:04:91:36:AF:46:9C:9B:3E:12:89:88:BC:F7:90:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8d80f5e-b0ed-3f39-b2d3-35f0fc9db962.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:db::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:f1:41:a7:b6:62:98:47:16:02:8c:30:23:03:6a:4f:ba:44: 8e:39:ce:23:82:bc:bc:b3:2e:ae:6b:f3:db:8a:cc:8b:bf:60: 41:5a:13:5b:71:8a:aa:a8:f6:86:2f:70:09:b0:02:8f:f1:0f: 66:6a:5f:81:6b:a5:17:86:8c:33:e7:97:68:03:00:6e:5c:1c: d3:de:08:9b:d5:52:2d:2c:c3:a3:44:87:18:02:b4:ef:14:c4: ec:9b:73:42:aa:b6:88:39:48:71:de:c1:a7:4d:36:1e:5d:4c: 80:eb:66:dd:40:65:d2:f3:1d:7b:08:76:e2:dd:18:ca:c0:ce: 52:2b:c4:93:68:25:80:0f:84:97:6e:1a:22:b8:17:50:e7:cb: da:40:9d:3a:cb:2d:17:27:63:53:e5:f0:5d:8b:b5:3b:c3:89: c0:83:06:4f:aa:74:b8:0e:a7:22:50:07:9c:99:de:1c:df:4b: e3:81:f5:c9:82:ac:81:83:02:cf:40:85:5a:ec:28:65:9c:d6: f8:b5:d3:3b:03:59:38:3f:d0:78:16:34:a5:c0:cf:70:40:1a: 89:64:cc:21:1b:ba:37:5d:c3:aa:89:e6:d6:59:bb:c0:cd:e7: ed:1a:9a:20:7a:4e:8a:69:3c:12:f9:a7:59:15:a2:6a:0e:f0: df:d3:48:30 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/GS7MGbncwABdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk Zjk1MDQyZTMtNjRmNC00MTc2LTg3OWMtOGY1MThhNDhjZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOsl8ZzukuKUv2QdXTqts0/tGqxXApAYGV3l piClUZyi/QQSzq+GHnRR4xVZknvKi5znBWM66zGDVT1gRFb/Fyv4F+zXEQ7Mwrh5 w5UoEVdWoRejEynPkDPp7iaww8uzXiavQHkv4ikpJm8mtUssM5/QwKiPeYj5vxo2 v/sn3zUoG/JQn6LbxyQugHgtxoyoDud0pkS+SbBsHR+jhHe3wc4+OBtV3vhQUHQ4 qWaiFAwWHhBbJz962kVmm21rdcJBG+M9ir7/5xzR6cPDYoBD/DshL3v/c7unF/N9 VL69v0VGV9j4qjUvgdeMKc6+88pIVTiGHDWzXv+JSTxfOjzX9QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNhyrd+IBJE2r0acmz4SiYi895DMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhkODBmNWUtYjBlZC0z ZjM5LWIyZDMtMzVmMGZjOWRiOTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQDb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMLxQae2YphHFgKMMCMDak+6RI45ziOCvLyzLq5r89uKzIu/YEFa E1txiqqo9oYvcAmwAo/xD2ZqX4FrpReGjDPnl2gDAG5cHNPeCJvVUi0sw6NEhxgC tO8UxOybc0Kqtog5SHHewadNNh5dTIDrZt1AZdLzHXsIduLdGMrAzlIrxJNoJYAP hJduGiK4F1Dny9pAnTrLLRcnY1Pl8F2LtTvDicCDBk+qdLgOpyJQB5yZ3hzfS+OB 9cmCrIGDAs9AhVrsKGWc1vi10zsDWTg/0HgWNKXAz3BAGolkzCEbujddw6qJ5tZZ u8DN5+0amiB6ToppPBL5p1kVomoO8N/TSDA= -----END CERTIFICATE-----Generated at Sun Jul 20 17:22:02 2025 by rpki-client