$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9d7439b-54c7-3caa-8c96-52be7c480c9f.roa File: e9d7439b-54c7-3caa-8c96-52be7c480c9f.roa (raw, json) Hash identifier: aPx/S4ap8+tY7gLR/OWUyjA7ipW4GZMcfpiNRiQ5Zwk= Subject key identifier: BC:E0:92:F9:68:ED:4E:07:03:BD:F0:02:F8:00:B6:36:8F:3F:82:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDC1C5AD433AAC0BCEDCB0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9d7439b-54c7-3caa-8c96-52be7c480c9f.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33657 IP address blocks: 2001:559:842c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:c1:c5:ad:43:3a:ac:0b:ce:dc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=ea629086-7e5b-40f3-a523-c16031bb0cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e3:08:84:79:81:bc:ee:5b:8f:5e:a5:8f:4d: 80:b6:89:c2:a7:b1:f2:48:36:76:59:22:d8:63:6e: e5:c5:05:a0:1f:23:a4:44:35:6b:50:34:68:63:f6: 23:5d:60:49:2c:bd:29:c3:2b:62:67:27:0c:c8:78: ca:55:a1:72:d7:98:f3:76:ef:77:c7:4e:81:6c:3d: dd:c8:09:aa:c5:42:6b:57:f2:bb:73:88:6d:79:0f: e5:e1:c7:47:2d:07:a1:4f:9c:3d:62:7f:c6:07:b4: 96:d8:1e:cc:e3:7f:7a:64:f2:f9:12:61:1e:e3:a6: b1:54:f3:74:c2:ff:00:c9:89:90:5c:bf:df:70:18: 3e:de:99:03:d3:bc:9b:a6:53:b9:4d:8c:55:21:26: aa:61:09:ef:79:e5:3d:08:65:2e:94:54:46:6a:90: 1b:72:b4:ee:b4:42:eb:e4:5e:61:c2:4d:52:65:18: 5a:13:4e:bc:52:1b:7e:70:19:c5:75:f6:48:92:88: d4:54:1c:f9:5f:e2:02:0a:ad:3b:f6:d8:d6:96:d4: cc:7d:8b:34:87:42:37:8f:75:f7:59:b0:08:a1:df: 2e:1d:9b:03:76:11:aa:97:4d:26:d2:8b:d6:7a:53: 0f:76:ea:cf:d4:ad:55:d6:98:f5:47:b2:87:45:2b: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E0:92:F9:68:ED:4E:07:03:BD:F0:02:F8:00:B6:36:8F:3F:82:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e9d7439b-54c7-3caa-8c96-52be7c480c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:842c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:e2:49:32:c0:ca:1e:f6:32:3c:97:f5:bd:02:fd:cf:09:cf: d5:db:5c:27:f5:4d:eb:28:2c:fd:5a:f5:c4:f7:6c:5d:65:c1: fc:f0:5a:95:5d:87:20:68:5f:cf:f8:cf:79:c4:be:61:5d:55: 62:a6:86:f4:02:64:35:de:f3:36:24:18:92:f8:c1:f7:fd:f0: e6:f4:64:32:ed:8c:7e:0c:db:14:57:25:4c:36:5d:f9:0a:e8: 91:00:5a:72:09:c3:88:38:ba:6e:76:86:20:57:36:01:50:01: 44:fc:0b:5f:a9:f3:24:92:ea:e9:06:db:3e:96:c3:d4:57:3d: 8f:88:37:1b:a0:eb:ab:16:9b:58:26:d9:3b:b4:53:59:c5:6c: ef:8b:ed:92:e0:45:b3:28:2b:8f:aa:54:36:99:06:c9:2d:af: ae:07:6f:5c:27:c8:c2:53:d7:f6:38:0f:7d:58:67:aa:ed:99: 72:e5:df:82:2e:91:08:19:b9:89:ad:ac:9b:86:a2:f6:52:94: ca:42:89:c0:b2:db:3f:6f:ee:3c:2a:10:f7:88:85:d5:68:1b: 11:cb:f1:d1:6f:67:c6:46:80:08:39:ea:9f:77:1a:90:cc:e0: a3:1f:77:16:c1:cc:85:cf:0d:8f:58:7b:4d:31:2e:fd:6c:3d: 8b:73:2d:a6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/cHFrUM6rAvO3LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZWE2MjkwODYtN2U1Yi00MGYzLWE1MjMtYzE2MDMxYmIwY2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheMIhHmBvO5bj16lj02AtonCp7HySDZ2WSLY Y27lxQWgHyOkRDVrUDRoY/YjXWBJLL0pwytiZycMyHjKVaFy15jzdu93x06BbD3d yAmqxUJrV/K7c4hteQ/l4cdHLQehT5w9Yn/GB7SW2B7M4396ZPL5EmEe46axVPN0 wv8AyYmQXL/fcBg+3pkD07ybplO5TYxVISaqYQnveeU9CGUulFRGapAbcrTutELr 5F5hwk1SZRhaE068Uht+cBnFdfZIkojUVBz5X+ICCq079tjWltTMfYs0h0I3j3X3 WbAIod8uHZsDdhGql00m0ovWelMPdurP1K1V1pj1R7KHRSvQaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLzgkvlo7U4HA73wAvgAtjaPP4JKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTlkNzQzOWItNTRjNy0z Y2FhLThjOTYtNTJiZTdjNDgwYzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYQs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAN3iSTLAyh72MjyX9b0C/c8Jz9XbXCf1TesoLP1a9cT3bF1lwfzw WpVdhyBoX8/4z3nEvmFdVWKmhvQCZDXe8zYkGJL4wff98Ob0ZDLtjH4M2xRXJUw2 XfkK6JEAWnIJw4g4um52hiBXNgFQAUT8C1+p8ySS6ukG2z6Ww9RXPY+INxug66sW m1gm2Tu0U1nFbO+L7ZLgRbMoK4+qVDaZBsktr64Hb1wnyMJT1/Y4D31YZ6rtmXLl 34IukQgZuYmtrJuGovZSlMpCicCy2z9v7jwqEPeIhdVoGxHL8dFvZ8ZGgAg56p93 GpDM4KMfdxbBzIXPDY9Ye00xLv1sPYtzLaY= -----END CERTIFICATE-----Generated at Sun Jul 20 17:20:59 2025 by rpki-client