$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8e324e0-c7d2-3aff-8302-5b5d3f0bd159.roa File: d8e324e0-c7d2-3aff-8302-5b5d3f0bd159.roa (raw, json) Hash identifier: Ry78gZy5ra1pqAQtb+kya0cX44eoh5rdGT7l6mXFxDc= Subject key identifier: 54:D1:03:6F:34:27:6E:91:9E:90:A9:E0:B2:26:6D:1E:76:E8:8C:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFB72D0FD5EFB533EE931A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8e324e0-c7d2-3aff-8302-5b5d3f0bd159.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 2603:3009:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:72:d0:fd:5e:fb:53:3e:e9:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=2a19f78d-ac71-48c0-b163-2e4970ee3f26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:93:51:b6:be:5b:e4:68:a0:8b:db:2b:36:df: 6e:f4:09:81:41:fb:a4:d4:f4:31:c0:f3:10:09:16: fc:36:96:3a:b6:28:2f:46:22:f9:df:b7:c3:90:c8: ad:9b:e0:32:6f:1d:73:c4:35:05:d0:b6:51:92:77: af:7c:95:c7:80:2a:14:06:65:a9:7f:56:2c:c6:3a: 3f:fd:69:42:ac:7c:95:d7:c3:b2:55:d9:37:68:cb: ed:c5:d5:cc:74:15:33:6c:3e:c9:b6:9b:1d:fb:c7: d1:03:75:73:80:a0:aa:12:d9:79:c1:16:50:74:b5: 9c:d9:48:50:98:59:c9:14:76:19:b3:b9:aa:5b:55: d3:fe:69:5e:37:35:6b:ee:2f:ad:0d:51:97:13:c2: 21:4c:44:f2:6a:c2:87:8e:7c:83:69:d3:86:37:38: 55:ff:71:2d:7a:e8:08:c8:a4:a5:ba:aa:e0:3a:63: 97:f5:5c:f8:9b:a0:77:9c:d8:f3:50:1a:9a:3d:3d: 00:9a:93:0f:df:5d:0b:bc:3b:9d:ec:2c:f2:8d:13: 88:b0:35:a2:c6:f9:6f:af:9d:a6:9f:41:29:65:f9: 32:22:10:c7:7d:c3:10:74:dd:09:01:85:98:af:af: 9b:96:a0:37:4b:13:c0:4b:36:44:99:6b:3a:2e:e0: 6a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D1:03:6F:34:27:6E:91:9E:90:A9:E0:B2:26:6D:1E:76:E8:8C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d8e324e0-c7d2-3aff-8302-5b5d3f0bd159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2603:3009:800::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:97:50:ad:08:dc:38:49:68:75:8b:1d:82:88:98:45:7f:4d: c0:1f:01:9f:c5:3a:a5:30:41:a2:26:d9:e7:c1:e4:cc:17:07: 78:e1:ef:c4:dd:37:7a:a6:0b:01:63:66:3b:58:08:0c:e6:2f: b1:4f:ac:0b:03:65:b3:c2:7a:fd:f6:4a:97:a9:76:86:dd:c6: c4:37:7e:b4:05:ba:0b:fd:51:0c:74:2b:53:23:96:b9:42:a0: 2f:f6:6a:aa:76:26:25:e2:a5:84:18:92:7c:3e:96:8a:7f:a6: 28:89:69:8c:16:17:32:6f:ca:ac:d8:43:25:6e:99:9f:ed:76: c5:e6:35:b5:27:ed:54:ce:9c:bc:7e:52:09:cc:7f:be:1d:13: fb:8f:71:a0:bf:83:22:6f:f1:44:6b:2e:3f:69:7c:d5:80:d6: 1d:11:3b:a3:32:eb:40:aa:75:bc:30:9e:c4:65:12:81:03:6d: 5a:e9:e2:f5:90:7d:99:ff:92:2f:f8:4c:a1:9c:6e:4e:79:e7: 00:f7:93:a0:ca:4a:10:fa:43:50:be:b9:43:1c:0b:0e:56:2b: 14:7c:f7:95:ca:96:c4:f9:00:16:9b:d6:30:22:ad:54:46:f3: ae:79:2a:e9:7f:36:28:44:44:93:eb:7a:ab:ac:39:6b:54:b5: 90:28:f0:b0 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEpc+3LQ/V77Uz7pMaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk MmExOWY3OGQtYWM3MS00OGMwLWIxNjMtMmU0OTcwZWUzZjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JNRtr5b5Gigi9srNt9u9AmBQfuk1PQxwPMQ CRb8NpY6tigvRiL537fDkMitm+Aybx1zxDUF0LZRknevfJXHgCoUBmWpf1Ysxjo/ /WlCrHyV18OyVdk3aMvtxdXMdBUzbD7Jtpsd+8fRA3VzgKCqEtl5wRZQdLWc2UhQ mFnJFHYZs7mqW1XT/mleNzVr7i+tDVGXE8IhTETyasKHjnyDadOGNzhV/3EteugI yKSluqrgOmOX9Vz4m6B3nNjzUBqaPT0AmpMP310LvDud7CzyjROIsDWixvlvr52m n0EpZfkyIhDHfcMQdN0JAYWYr6+blqA3SxPASzZEmWs6LuBqQwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFFTRA280J26RnpCp4LImbR526IwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDhlMzI0ZTAtYzdkMi0z YWZmLTgzMDItNWI1ZDNmMGJkMTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwCQgw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAs5dQrQjcOElodYsdgoiYRX9NwB8Bn8U6pTBBoibZ58HkzBcHeOHv xN03eqYLAWNmO1gIDOYvsU+sCwNls8J6/fZKl6l2ht3GxDd+tAW6C/1RDHQrUyOW uUKgL/ZqqnYmJeKlhBiSfD6Win+mKIlpjBYXMm/KrNhDJW6Zn+12xeY1tSftVM6c vH5SCcx/vh0T+49xoL+DIm/xRGsuP2l81YDWHRE7ozLrQKp1vDCexGUSgQNtWuni 9ZB9mf+SL/hMoZxuTnnnAPeToMpKEPpDUL65QxwLDlYrFHz3lcqWxPkAFpvWMCKt VEbzrnkq6X82KEREk+t6q6w5a1S1kCjwsA== -----END CERTIFICATE-----Generated at Sun Jul 20 17:30:00 2025 by rpki-client