$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/958b86d6-e09c-3c4a-85b5-f06d6ac3afde.roa File: 958b86d6-e09c-3c4a-85b5-f06d6ac3afde.roa (raw, json) Hash identifier: VFyz7bb3qUNaexEo/cP3ELTC14pt0V0s8r9YAb8HleY= Subject key identifier: 07:FC:88:28:D3:70:77:A5:FB:1F:13:8E:1D:C6:33:18:9F:28:28:DA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C05D88D8E8E9AFDF149F540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/958b86d6-e09c-3c4a-85b5-f06d6ac3afde.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33659 IP address blocks: 2601:81:8000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:d8:8d:8e:8e:9a:fd:f1:49:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=f8c9771b-eef1-46fa-985c-85ad8e4d3ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b8:04:28:6b:ea:cd:fc:f2:b6:a8:f3:a6:d7: 92:2b:1e:6a:48:3f:f2:f0:9c:30:a7:a2:03:61:da: 1e:47:df:28:52:ff:fd:0e:75:54:d2:6d:18:59:43: 1b:e7:c2:c1:dc:7e:8d:34:aa:0d:c5:64:08:ed:7e: df:c9:a9:d4:99:cf:80:00:27:8f:a8:03:37:04:66: 46:39:c5:66:fd:f1:22:62:97:25:dd:37:54:9d:f3: 35:b2:fc:c3:aa:2d:8f:27:98:5e:f8:4a:71:43:90: b5:3e:f6:70:b2:87:e9:4c:3f:2e:5d:56:c0:b1:a6: 88:51:92:3a:07:d2:8f:d3:40:e2:f0:2d:5c:a2:93: 12:f4:14:1b:73:33:0d:77:61:1b:c3:b0:d3:d2:ce: 99:be:a3:bc:78:9d:f1:83:8f:9c:ac:ba:c0:5b:66: 89:e1:95:91:49:b6:35:37:cf:d6:e9:56:9a:e2:df: 15:3e:c5:b2:04:08:05:3c:2c:1a:99:53:d4:8f:43: cb:64:74:c3:2c:6f:44:f9:cf:95:ca:bb:d2:3e:dc: 89:84:79:8f:77:a2:09:33:1e:89:46:cd:87:7a:2e: 13:b1:a6:c4:88:c7:75:c9:df:bd:7e:e2:1a:3d:40: 0e:da:9c:56:df:05:1e:e5:7f:7b:57:8f:0d:bf:bf: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:FC:88:28:D3:70:77:A5:FB:1F:13:8E:1D:C6:33:18:9F:28:28:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/958b86d6-e09c-3c4a-85b5-f06d6ac3afde.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:81:8000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:71:9e:7f:54:34:f1:25:e1:0f:f1:36:ad:4a:88:00:27:4c: 38:50:25:d2:e3:d1:e9:0e:7a:5e:3b:30:e3:58:19:97:76:68: 16:5b:96:b3:2b:c5:b8:29:b9:ba:fb:c9:cb:04:dc:72:d7:c6: 60:07:93:51:9c:a0:57:22:fc:a2:4f:bf:04:1d:a5:fd:b5:f2: ad:0b:2f:e8:ee:2c:c4:d5:c9:57:3d:93:57:51:00:75:f8:3c: b2:ce:bd:0f:71:75:9a:a1:01:2f:07:19:a6:f0:6f:65:5f:c3: 8d:71:0f:70:34:8c:b6:91:79:ec:b6:c8:d9:da:2a:b7:77:33: 37:06:24:5e:2d:0d:a4:aa:a9:5c:6e:0d:dd:67:32:ce:5d:80: 6a:27:22:e9:34:b0:6b:98:5d:31:bc:7d:cb:dd:97:c4:5e:a4: 91:f1:61:c9:91:ac:8b:28:fe:0c:a2:85:63:9e:a9:81:f1:fd: f9:d1:b6:04:48:3a:37:03:94:64:e2:03:92:bb:bd:26:95:61: 8e:23:5d:ca:2f:1f:53:b6:ee:a2:b3:bf:27:48:43:ce:eb:47: 08:88:96:65:a6:3f:6c:c6:2a:6a:f5:97:0c:58:b5:31:b2:e1: 8a:16:ff:12:89:68:4b:47:14:95:bd:52:52:6d:e0:2c:ac:bb: c0:f7:b4:05 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEoMBdiNjo6a/fFJ9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk ZjhjOTc3MWItZWVmMS00NmZhLTk4NWMtODVhZDhlNGQzYWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLgEKGvqzfzytqjzpteSKx5qSD/y8Jwwp6ID YdoeR98oUv/9DnVU0m0YWUMb58LB3H6NNKoNxWQI7X7fyanUmc+AACePqAM3BGZG OcVm/fEiYpcl3TdUnfM1svzDqi2PJ5he+EpxQ5C1PvZwsofpTD8uXVbAsaaIUZI6 B9KP00Di8C1copMS9BQbczMNd2Ebw7DT0s6ZvqO8eJ3xg4+crLrAW2aJ4ZWRSbY1 N8/W6Vaa4t8VPsWyBAgFPCwamVPUj0PLZHTDLG9E+c+VyrvSPtyJhHmPd6IJMx6J Rs2Hei4TsabEiMd1yd+9fuIaPUAO2pxW3wUe5X97V48Nv7+ntwIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFAf8iCjTcHel+x8Tjh3GMxifKCjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTU4Yjg2ZDYtZTA5Yy0z YzRhLTg1YjUtZjA2ZDZhYzNhZmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAgYAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAA3Gef1Q08SXhD/E2rUqIACdMOFAl0uPR6Q56Xjsw41gZl3ZoFluW syvFuCm5uvvJywTcctfGYAeTUZygVyL8ok+/BB2l/bXyrQsv6O4sxNXJVz2TV1EA dfg8ss69D3F1mqEBLwcZpvBvZV/DjXEPcDSMtpF57LbI2doqt3czNwYkXi0NpKqp XG4N3Wcyzl2Aaici6TSwa5hdMbx9y92XxF6kkfFhyZGsiyj+DKKFY56pgfH9+dG2 BEg6NwOUZOIDkru9JpVhjiNdyi8fU7buorO/J0hDzutHCIiWZaY/bMYqavWXDFi1 MbLhihb/EoloS0cUlb1SUm3gLKy7wPe0BQ== -----END CERTIFICATE-----Generated at Tue Jun 3 04:50:27 2025 by rpki-client