$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3447d742-8d33-30c8-8046-5c2a93f8bc23.roa File: 3447d742-8d33-30c8-8046-5c2a93f8bc23.roa (raw, json) Hash identifier: 3ZqfrC4HDD776T0qQEFyUx802vMdiEixGwO8cwfx7Kk= Subject key identifier: 50:90:A5:67:35:65:E2:7F:DC:DB:85:09:EE:B0:07:01:04:03:11:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBA1ED23FC5A934197A080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3447d742-8d33-30c8-8046-5c2a93f8bc23.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 21508 IP address blocks: 2001:559:c3de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:a1:ed:23:fc:5a:93:41:97:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=53dfa9df-20a8-4b8a-be07-6a37d4033c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:16:6d:c0:b9:ea:15:9b:3c:a0:1f:75:cf: d9:d5:b8:1d:d0:55:c6:7b:9b:9c:dc:78:25:29:c2: 1f:33:74:b1:8f:fd:e2:a0:fb:dd:89:f2:6d:7f:9f: 74:f6:36:4a:1e:5d:fa:fe:db:62:fa:95:39:d1:a9: e2:ce:b1:44:f0:fd:67:c4:4d:12:c2:c3:c9:eb:97: 8f:4e:c4:3b:e9:8c:1a:fd:4e:4b:4a:40:26:4c:72: 2b:82:17:0b:ff:1f:14:84:07:eb:d8:6e:7d:e9:0d: 11:69:da:50:a6:5c:00:16:76:e2:b1:ad:e2:4c:be: a9:c5:76:30:e2:2a:79:b4:96:ee:0a:32:36:46:c0: cc:ea:d0:f6:43:c3:ce:4b:e4:9c:1a:24:ca:9c:fd: 8a:77:c8:2c:84:26:aa:b0:6b:c0:cb:e2:e0:d7:d3: 5e:ab:02:52:92:c3:5e:e7:e0:65:ea:53:47:19:8a: 4f:dc:a0:4d:9a:6e:0b:68:97:c1:a8:98:c7:b1:f6: a9:f0:4f:57:92:76:fb:a0:0d:fa:46:a3:37:86:39: 74:13:6d:6f:46:2f:b1:bc:cb:31:36:d0:bf:2f:42: 72:1f:07:86:25:a2:52:10:b2:5f:cc:82:fa:d2:8d: 32:31:d0:3a:d2:d9:1a:20:0c:f2:d8:fc:5f:df:f7: 21:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:90:A5:67:35:65:E2:7F:DC:DB:85:09:EE:B0:07:01:04:03:11:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3447d742-8d33-30c8-8046-5c2a93f8bc23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3de::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:bb:40:0d:9b:16:0c:1c:62:7c:c3:e2:a2:4f:25:9a:2e:48: 5e:5b:82:81:b3:29:1e:c5:55:ff:ac:19:7c:c9:69:ba:44:ee: 95:48:8a:a9:3b:67:25:e7:ac:48:51:24:d0:e2:5b:3b:8c:84: 2c:22:29:78:f1:30:06:38:82:92:16:54:4b:52:f8:69:7f:49: 83:ce:1f:9f:e6:cd:24:e0:09:4e:6a:f1:79:c3:24:9a:30:b5: 06:c2:7d:8e:5e:36:f9:8e:0c:96:6e:98:7a:9d:4b:33:61:79: 3b:c3:88:72:7a:79:ae:2d:d6:45:31:d8:eb:91:8b:4f:b1:81: a6:ef:cb:f9:95:39:73:c2:61:40:08:6a:82:a8:e5:72:ae:a3: 7a:e0:37:8a:af:75:66:6a:6a:d2:e9:a6:ff:ba:ba:1a:b0:c7: be:3c:fb:fc:0f:29:36:e0:09:e3:d5:fb:3c:d0:f1:5e:6a:e6: 69:1a:ed:b9:d2:05:c4:f6:e8:97:83:e3:cc:43:06:c7:23:d8: 18:b0:ae:eb:b1:47:af:f4:c2:d1:28:25:d7:9e:3d:16:8d:a8: b0:b1:42:1c:3a:c4:0b:38:b6:7d:1e:51:40:47:8e:1e:f9:24: c6:a4:67:b5:47:dd:fb:24:da:64:a6:6e:c0:66:dc:db:95:d1: ff:ca:91:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc+6HtI/xak0GXoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NTNkZmE5ZGYtMjBhOC00YjhhLWJlMDctNmEzN2Q0MDMzYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKIWbcC56hWbPKAfdc/Z1bgd0FXGe5uc3Hgl KcIfM3Sxj/3ioPvdifJtf5909jZKHl36/tti+pU50anizrFE8P1nxE0SwsPJ65eP TsQ76Ywa/U5LSkAmTHIrghcL/x8UhAfr2G596Q0RadpQplwAFnbisa3iTL6pxXYw 4ip5tJbuCjI2RsDM6tD2Q8POS+ScGiTKnP2Kd8gshCaqsGvAy+Lg19NeqwJSksNe 5+Bl6lNHGYpP3KBNmm4LaJfBqJjHsfap8E9Xknb7oA36RqM3hjl0E21vRi+xvMsx NtC/L0JyHweGJaJSELJfzIL60o0yMdA60tkaIAzy2Pxf3/ch/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFCQpWc1ZeJ/3NuFCe6wBwEEAxEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzQ0N2Q3NDItOGQzMy0z MGM4LTgwNDYtNWMyYTkzZjhiYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA+7QA2bFgwcYnzD4qJPJZouSF5bgoGzKR7FVf+sGXzJabpE7pVI iqk7ZyXnrEhRJNDiWzuMhCwiKXjxMAY4gpIWVEtS+Gl/SYPOH5/mzSTgCU5q8XnD JJowtQbCfY5eNvmODJZumHqdSzNheTvDiHJ6ea4t1kUx2OuRi0+xgabvy/mVOXPC YUAIaoKo5XKuo3rgN4qvdWZqatLppv+6uhqwx748+/wPKTbgCePV+zzQ8V5q5mka 7bnSBcT26JeD48xDBscj2BiwruuxR6/0wtEoJdeePRaNqLCxQhw6xAs4tn0eUUBH jh75JMakZ7VH3fsk2mSmbsBm3NuV0f/KkbU= -----END CERTIFICATE-----Generated at Tue Jul 1 20:15:45 2025 by rpki-client