$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28476f09-459d-3de2-b999-0c7cf09fdfec.roa File: 28476f09-459d-3de2-b999-0c7cf09fdfec.roa (raw, json) Hash identifier: 6PQJGX8uH1ZNAWZ0JKc5SqRzc9Tmmw6Ec5RMgLB7hi8= Subject key identifier: 6E:92:97:14:5D:7D:08:EB:89:36:FB:0E:41:E3:49:E4:24:57:64:14 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBECEE53245B4B5C98AE18 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28476f09-459d-3de2-b999-0c7cf09fdfec.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7015 IP address blocks: 2001:559:849e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:ec:ee:53:24:5b:4b:5c:98:ae:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=3af2525a-ada5-4da0-9b7f-9334207a1a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e4:1c:1c:a0:9e:4d:44:f2:10:ba:1c:37:d7: 3c:5b:27:ff:13:dc:39:ec:e5:7f:70:99:16:99:ba: e8:3f:a4:53:9b:b6:7d:10:a0:ea:85:7e:7b:77:a7: 4e:78:f1:8d:8d:58:d4:c5:5f:4f:a7:82:75:55:88: af:59:ba:8c:20:1f:d9:82:9b:9f:10:a1:1f:91:f9: da:bd:f3:4e:3c:5a:78:c2:f4:64:53:2e:2a:75:f4: a9:f7:21:74:c7:7a:ae:0f:27:20:f5:80:f3:b8:11: 49:33:da:a6:78:57:e5:77:ef:af:67:f5:af:a8:18: 85:ef:65:5e:96:23:bc:58:26:ff:75:14:8d:5b:be: d3:b7:0b:af:1d:ef:52:ad:74:37:b1:7d:9a:d6:10: 1f:f5:10:4c:f2:28:49:94:9d:7a:80:41:50:66:8f: 3d:f7:b1:6c:9d:d9:d5:a5:87:51:5a:af:a3:28:df: 1d:15:45:1c:22:30:86:ed:cd:33:1b:9b:ca:31:7f: dc:70:20:49:bb:4b:d1:ed:14:5d:13:c7:0e:f4:44: 1b:e1:fe:3f:0c:f0:07:82:56:48:e1:c6:41:73:0c: 2f:22:be:b7:c4:bb:52:00:25:8d:d9:b0:3f:e6:6f: e7:9d:25:9e:fc:c5:5f:ef:f3:8f:b1:60:ad:fa:a5: 7d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:92:97:14:5D:7D:08:EB:89:36:FB:0E:41:E3:49:E4:24:57:64:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28476f09-459d-3de2-b999-0c7cf09fdfec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:849e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:c1:e1:80:79:3e:29:bd:17:21:ea:37:cd:d3:2a:5b:d1:ad: 37:77:7e:dc:b0:c5:06:81:48:1f:57:ef:3a:34:ba:48:3e:4f: 63:70:58:20:cf:51:99:ed:9e:95:d1:96:84:25:75:2c:4a:9c: 8a:3c:78:f1:e3:f9:ef:98:d1:e1:a4:b5:85:5d:52:3f:de:42: 96:fa:38:b8:84:70:63:c5:7a:67:25:e2:13:a6:07:b3:1d:4e: df:fc:5f:3d:d5:68:a0:ff:57:eb:c3:23:07:a4:f0:1d:45:94: ed:a4:6c:b7:04:15:87:2f:33:3a:d9:3a:fc:44:88:e4:51:d0: ad:1a:45:fc:08:56:92:13:4a:de:c8:cd:27:4d:9d:cc:33:7d: 21:56:95:2b:2a:00:b6:b9:56:6f:ac:26:47:36:81:6c:4d:83: 1a:c8:9c:06:0b:42:aa:0f:8d:a3:3c:7a:93:a1:85:71:f6:b9: b9:3d:a2:ec:64:cf:cb:0a:ae:2e:cb:45:91:2a:4b:8f:64:95: bc:09:0b:e4:e7:6f:6f:e8:06:b7:05:e0:da:ce:97:f5:e9:be: fa:6d:c2:51:96:74:ec:97:07:c1:89:42:a8:f4:f4:87:68:99: b4:f1:39:57:3f:b5:04:1b:69:a6:7d:98:10:bd:d4:92:36:d7: fd:be:e1:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc++zuUyRbS1yYrhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk M2FmMjUyNWEtYWRhNS00ZGEwLTliN2YtOTMzNDIwN2ExYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+QcHKCeTUTyELocN9c8Wyf/E9w57OV/cJkW mbroP6RTm7Z9EKDqhX57d6dOePGNjVjUxV9Pp4J1VYivWbqMIB/ZgpufEKEfkfna vfNOPFp4wvRkUy4qdfSp9yF0x3quDycg9YDzuBFJM9qmeFfld++vZ/WvqBiF72Ve liO8WCb/dRSNW77TtwuvHe9SrXQ3sX2a1hAf9RBM8ihJlJ16gEFQZo8997FsndnV pYdRWq+jKN8dFUUcIjCG7c0zG5vKMX/ccCBJu0vR7RRdE8cO9EQb4f4/DPAHglZI 4cZBcwwvIr63xLtSACWN2bA/5m/nnSWe/MVf7/OPsWCt+qV9KQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFG6SlxRdfQjriTb7DkHjSeQkV2QUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg0NzZmMDktNDU5ZC0z ZGUyLWI5OTktMGM3Y2YwOWZkZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYSe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACvB4YB5Pim9FyHqN83TKlvRrTd3ftywxQaBSB9X7zo0ukg+T2Nw WCDPUZntnpXRloQldSxKnIo8ePHj+e+Y0eGktYVdUj/eQpb6OLiEcGPFemcl4hOm B7MdTt/8Xz3VaKD/V+vDIwek8B1FlO2kbLcEFYcvMzrZOvxEiORR0K0aRfwIVpIT St7IzSdNncwzfSFWlSsqALa5Vm+sJkc2gWxNgxrInAYLQqoPjaM8epOhhXH2ubk9 ouxkz8sKri7LRZEqS49klbwJC+Tnb2/oBrcF4NrOl/XpvvptwlGWdOyXB8GJQqj0 9IdombTxOVc/tQQbaaZ9mBC91JI21/2+4Ro= -----END CERTIFICATE-----Generated at Mon Jun 30 18:21:12 2025 by rpki-client