$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6e2ac47-84a3-37e5-90b5-4d97bd4b66b2.roa File: e6e2ac47-84a3-37e5-90b5-4d97bd4b66b2.roa (raw, json) Hash identifier: rsaJOeK+pISYP1E8X01EpQGKNkU15AkU5dh6bobu7cw= Subject key identifier: A4:F3:00:11:AA:88:E4:E7:B1:3A:11:D1:59:1D:2F:37:FD:25:D3:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC4EC1C8799E2CF7EAB5C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6e2ac47-84a3-37e5-90b5-4d97bd4b66b2.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 2001:559:86c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:4e:c1:c8:79:9e:2c:f7:ea:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=f3cb9490-c16d-4c1c-93ba-9fdf7ebb6ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:00:15:5d:fe:c9:b6:1e:3d:bb:44:e3:6d:6b: 33:03:d2:f1:90:36:e1:80:f8:3c:c1:d8:a1:d6:5a: 68:45:bc:fb:ae:6f:fd:65:40:49:bd:bf:ba:9d:d0: 53:a9:5c:dc:18:56:29:ee:3e:2d:7a:e8:01:8c:07: 7e:e4:2e:cb:fa:30:e3:22:c0:a5:5f:48:99:81:b4: f8:0c:11:bf:ba:f8:4f:1d:f0:1c:5b:16:f2:b8:df: 20:cb:a1:f1:75:9f:d2:6b:27:30:8f:6a:e0:9a:d6: 9d:30:6a:ca:3e:b6:b5:27:be:14:ff:d3:a1:69:03: 95:1f:2e:90:cf:1f:8a:8a:88:dc:25:a9:e5:fa:2d: e5:7e:d5:6a:e7:35:cd:6c:79:c0:e2:36:97:96:e1: d9:46:ae:e1:16:23:1e:aa:f7:7c:4d:f8:d5:40:73: 8d:b8:94:09:1a:f5:9d:24:d7:55:3d:5a:d7:27:53: 2f:a0:37:15:56:c3:23:8e:72:f6:06:72:16:5a:32: 9f:dc:6e:30:96:28:b6:44:55:43:ea:01:d6:a7:81: 30:6e:dd:32:b6:0b:ae:9c:61:1b:4f:77:64:ac:71: fb:1f:f6:81:ce:81:b9:29:54:0d:c0:45:38:a2:95: a4:dd:91:d0:65:16:8b:f1:68:7d:17:65:ae:fa:ea: f0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F3:00:11:AA:88:E4:E7:B1:3A:11:D1:59:1D:2F:37:FD:25:D3:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e6e2ac47-84a3-37e5-90b5-4d97bd4b66b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:86c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:13:14:f3:6f:6c:05:b9:b4:26:6a:61:62:ab:82:ae:4d:17: 57:38:5b:a3:83:cc:3a:bd:aa:47:15:d8:c8:ea:33:38:fd:aa: 47:f2:d9:02:57:3e:0e:f1:9a:03:fe:8b:44:80:6f:ae:ce:be: 36:b1:93:67:a9:fd:71:7e:dc:b9:3f:db:5f:c4:97:cc:6e:2b: 9c:eb:51:71:46:27:38:2e:71:33:f0:4c:b3:e3:82:3f:66:90: 15:88:56:3f:e7:f9:f4:a9:13:1b:3e:39:a8:f6:45:14:58:5a: d3:50:58:fc:36:31:5c:5a:f8:cb:38:1b:0d:6b:69:1a:cd:29: f0:44:af:f0:41:4b:61:1c:89:ee:56:06:17:da:99:78:3f:f0: 7e:72:51:be:5d:f1:4b:f8:8e:c5:f7:dd:0e:2f:e7:b6:07:8c: 5a:d6:97:2c:37:ea:ff:a0:12:cf:32:d1:60:88:4f:ed:60:07: d8:39:d3:3a:b9:6d:b9:08:b1:53:b8:67:01:90:ef:fd:20:a4: f2:78:4d:92:2e:eb:3a:1a:b9:89:80:36:63:32:a0:00:f8:65: 5a:a4:7c:04:22:48:29:ce:51:b1:b4:27:15:77:a2:1c:cb:c7: 1d:d3:99:ad:5e:26:75:28:b0:b8:16:43:f8:ed:12:53:b1:5e: aa:a5:cf:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/E7ByHmeLPfqtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZjNjYjk0OTAtYzE2ZC00YzFjLTkzYmEtOWZkZjdlYmI2ZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwAVXf7Jth49u0TjbWszA9LxkDbhgPg8wdih 1lpoRbz7rm/9ZUBJvb+6ndBTqVzcGFYp7j4teugBjAd+5C7L+jDjIsClX0iZgbT4 DBG/uvhPHfAcWxbyuN8gy6HxdZ/Saycwj2rgmtadMGrKPra1J74U/9OhaQOVHy6Q zx+KiojcJanl+i3lftVq5zXNbHnA4jaXluHZRq7hFiMeqvd8TfjVQHONuJQJGvWd JNdVPVrXJ1MvoDcVVsMjjnL2BnIWWjKf3G4wlii2RFVD6gHWp4Ewbt0ytguunGEb T3dkrHH7H/aBzoG5KVQNwEU4opWk3ZHQZRaL8Wh9F2Wu+urwzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKTzABGqiOTnsToR0VkdLzf9JdOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTZlMmFjNDctODRhMy0z N2U1LTkwYjUtNGQ5N2JkNGI2NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYbD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIkTFPNvbAW5tCZqYWKrgq5NF1c4W6ODzDq9qkcV2MjqMzj9qkfy 2QJXPg7xmgP+i0SAb67Ovjaxk2ep/XF+3Lk/21/El8xuK5zrUXFGJzgucTPwTLPj gj9mkBWIVj/n+fSpExs+Oaj2RRRYWtNQWPw2MVxa+Ms4Gw1raRrNKfBEr/BBS2Ec ie5WBhfamXg/8H5yUb5d8Uv4jsX33Q4v57YHjFrWlyw36v+gEs8y0WCIT+1gB9g5 0zq5bbkIsVO4ZwGQ7/0gpPJ4TZIu6zoauYmANmMyoAD4ZVqkfAQiSCnOUbG0JxV3 ohzLxx3Tma1eJnUosLgWQ/jtElOxXqqlz9A= -----END CERTIFICATE-----Generated at Sun Jul 20 17:11:03 2025 by rpki-client