$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d0d5881-9195-3123-8dc8-5f399820409e.roa File: 3d0d5881-9195-3123-8dc8-5f399820409e.roa (raw, json) Hash identifier: RldjEBhwcWxljhURwg0XPWSB3w0G+tMK5xZWlGlap+g= Subject key identifier: 27:42:0C:98:81:35:4E:81:C6:EE:0A:F6:3E:48:DB:A4:E2:33:FA:4F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD46A656AEA4AE8C693C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d0d5881-9195-3123-8dc8-5f399820409e.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7015 IP address blocks: 2001:559:500::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:46:a6:56:ae:a4:ae:8c:69:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=2958f2a1-ee14-4cc7-8547-497b8e22d21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:f1:bc:92:6c:b3:c5:4c:b7:cf:22:47:a6: 05:bf:92:0f:68:c9:e2:a2:b1:a8:db:42:96:c5:07: 63:bd:e0:ac:ce:2e:e0:eb:25:35:52:08:9f:03:a0: 0d:80:a4:5e:39:c4:41:fe:94:82:3d:7e:16:be:57: 6e:b2:d0:60:f6:6c:07:f4:75:e3:5a:54:ce:ad:d4: c1:d5:90:0e:dc:2d:27:6d:fd:36:7d:c1:a3:1d:50: 2f:2a:ec:8d:68:f1:51:04:ca:3b:10:c4:19:d3:3c: 8c:cf:7e:ae:bc:6b:9e:aa:dd:5f:7f:83:58:f4:21: 77:4e:03:38:2f:6f:6f:3c:35:b5:16:8a:c2:c6:52: 0b:96:ee:0b:78:e8:e8:14:fb:65:40:ec:7d:6c:35: f4:eb:c8:e2:f5:50:89:28:da:b7:1f:d2:8b:f8:56: aa:fd:a8:84:25:07:ff:89:34:46:48:76:d4:8d:46: cc:83:7a:dd:86:51:66:b7:98:a4:e3:6f:99:10:53: d0:4c:f3:6a:06:2b:86:06:3a:3d:53:74:89:7c:d9: f8:94:e9:22:80:40:69:93:62:b6:80:cb:1d:c4:68: f1:cc:75:64:03:21:3b:f4:9b:26:dd:87:52:ca:91: f8:3e:c0:69:96:c3:27:b7:8e:ea:45:96:d8:b5:11: da:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:42:0C:98:81:35:4E:81:C6:EE:0A:F6:3E:48:DB:A4:E2:33:FA:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d0d5881-9195-3123-8dc8-5f399820409e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:500::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:dd:e3:99:c1:29:c7:48:cf:e4:82:2d:09:c8:d7:93:61:9b: eb:26:fd:79:35:63:61:99:b1:20:52:7c:a9:17:31:3f:71:45: cf:d3:42:8a:cb:5f:7e:57:b1:17:e8:f5:ac:76:d6:cf:56:ee: 40:b1:6c:43:eb:c9:ca:0b:26:28:2d:b5:79:8b:8e:52:ac:13: 35:47:93:4c:f0:3f:65:b1:89:28:fb:1d:00:81:16:83:74:9b: b4:77:31:ba:dc:06:8e:b4:97:09:8d:1d:78:a3:f1:7e:48:57: e4:5f:f3:db:b8:1e:15:88:b4:6f:cd:5b:27:41:03:5e:91:3e: c4:e9:e0:21:b6:7a:ed:54:ec:9b:84:01:82:4a:4b:b7:71:8d: 65:cf:1f:24:cf:be:d1:67:9d:92:25:d8:9b:f0:01:89:0b:a6: d4:12:19:3c:9e:c0:09:6c:41:c8:1a:d6:91:a8:76:b9:f9:1d: c7:1f:fb:1a:b9:de:10:34:63:7b:12:ac:5f:32:49:66:81:e7: e1:8f:78:84:df:c3:4f:f0:2d:ee:03:f0:5f:77:b4:11:fb:67: 6a:18:b9:ac:c6:98:5b:63:3b:74:12:5a:21:30:50:02:a8:a9: 34:cd:4f:1f:62:05:6c:71:b3:6f:2f:7c:a2:43:15:50:9c:7e: 7c:55:24:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/UamVq6kroxpPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk Mjk1OGYyYTEtZWUxNC00Y2M3LTg1NDctNDk3YjhlMjJkMjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1rxvJJss8VMt88iR6YFv5IPaMniorGo20KW xQdjveCszi7g6yU1UgifA6ANgKReOcRB/pSCPX4WvldustBg9mwH9HXjWlTOrdTB 1ZAO3C0nbf02fcGjHVAvKuyNaPFRBMo7EMQZ0zyMz36uvGueqt1ff4NY9CF3TgM4 L29vPDW1ForCxlILlu4LeOjoFPtlQOx9bDX068ji9VCJKNq3H9KL+Faq/aiEJQf/ iTRGSHbUjUbMg3rdhlFmt5ik42+ZEFPQTPNqBiuGBjo9U3SJfNn4lOkigEBpk2K2 gMsdxGjxzHVkAyE79Jsm3YdSypH4PsBplsMnt47qRZbYtRHaAQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCdCDJiBNU6Bxu4K9j5I26TiM/pPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2QwZDU4ODEtOTE5NS0z MTIzLThkYzgtNWYzOTk4MjA0MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQUA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH7d45nBKcdIz+SCLQnI15Nhm+sm/Xk1Y2GZsSBSfKkXMT9xRc/T QorLX35XsRfo9ax21s9W7kCxbEPrycoLJigttXmLjlKsEzVHk0zwP2WxiSj7HQCB FoN0m7R3MbrcBo60lwmNHXij8X5IV+Rf89u4HhWItG/NWydBA16RPsTp4CG2eu1U 7JuEAYJKS7dxjWXPHyTPvtFnnZIl2JvwAYkLptQSGTyewAlsQcga1pGodrn5Hccf +xq53hA0Y3sSrF8ySWaB5+GPeITfw0/wLe4D8F93tBH7Z2oYuazGmFtjO3QSWiEw UAKoqTTNTx9iBWxxs28vfKJDFVCcfnxVJDk= -----END CERTIFICATE-----Generated at Tue Jul 1 22:39:54 2025 by rpki-client