$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628a939b-46a5-388f-b483-e30641717869.roa File: 628a939b-46a5-388f-b483-e30641717869.roa (raw, json) Hash identifier: kWjOsYtIcH+wNQN+49z7/N40o9LHfUiti6wNnLYOi9U= Subject key identifier: 22:CD:21:B4:89:DF:25:E2:55:9D:E3:E8:36:31:BB:86:BC:FD:D4:98 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC46459AC049666B941180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628a939b-46a5-388f-b483-e30641717869.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 2001:559:59a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:46:45:9a:c0:49:66:6b:94:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=4bbf85d6-ffcf-407e-bc21-c79bb49e6289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:51:fa:1e:81:98:45:fd:36:c1:22:2a:5b:b5: 19:79:b6:dc:40:de:f4:7f:8c:3c:8b:12:7b:f0:b3: 50:93:44:b3:d1:0f:ac:31:33:6f:40:1e:5e:a7:2f: 73:e0:83:4c:d2:3b:ca:33:bb:0b:6c:e2:ed:95:6c: 08:7c:a7:ab:44:ce:6c:b9:e4:68:3a:de:05:52:e7: 96:49:7e:e9:be:74:1a:89:00:bc:03:5a:7b:b1:b9: 9b:15:97:d0:3c:cc:f7:0f:36:0d:60:91:f2:16:b7: 31:be:fc:3a:81:b7:a6:1f:1c:d7:9c:2f:73:92:c9: 8a:b0:61:16:13:4d:74:a6:cb:5a:42:88:3e:31:b3: 5c:96:d6:69:68:30:15:79:0c:cd:57:b7:e3:48:13: 4a:20:3c:e1:e1:61:bb:a4:86:c6:3b:9e:e3:e2:37: a0:f6:2e:d7:28:aa:10:74:88:35:89:bc:07:21:ac: 85:f8:b9:bb:66:71:a3:8c:e3:db:12:9c:d8:7a:0a: 9b:1d:97:a8:c4:0b:db:f0:5c:ec:9d:87:0d:26:0c: f0:cc:de:c6:86:7a:cc:88:07:74:dc:93:85:0d:d9: f9:dc:ab:76:b2:d9:1b:91:38:a4:df:38:e9:e1:29: e2:dd:1d:4d:24:52:17:05:ef:f3:69:0e:3f:e7:e8: b9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:CD:21:B4:89:DF:25:E2:55:9D:E3:E8:36:31:BB:86:BC:FD:D4:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/628a939b-46a5-388f-b483-e30641717869.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:59a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:38:59:c3:51:80:e3:a8:8e:10:92:9e:9c:41:83:97:8a:43: 89:8f:fb:29:7e:54:84:cf:d9:cf:bc:ed:53:29:fe:39:71:25: c3:27:66:52:cd:9b:d1:03:d0:2a:26:15:9c:72:34:21:73:e3: 4b:5c:67:52:c1:3a:e8:f2:da:69:11:62:24:76:48:60:21:4f: 08:14:b7:f4:85:90:68:20:69:45:dc:4d:99:94:a0:97:02:3e: 88:a8:67:4d:84:08:87:05:b6:56:59:dc:19:00:0e:ec:76:55: b6:b1:c8:e0:dc:d7:df:84:d0:06:d6:41:07:b4:ce:d6:ad:09: 34:9b:4f:27:ac:2a:1f:0e:8c:e0:eb:26:0d:6d:35:ce:f1:cd: 93:00:6c:d0:5f:35:dd:c2:66:9b:bd:04:9c:7e:1d:39:0d:e9: 2d:f6:cc:2a:9a:41:98:53:b3:f4:40:71:d6:a8:fc:94:c5:01: 65:bd:b9:52:5e:b7:a5:2d:b0:ab:40:ae:88:83:a9:b2:c4:2f: fd:89:33:b8:f0:0a:e0:67:d8:35:dc:00:4e:14:a9:3d:a3:22: 51:25:3e:b4:3e:64:9c:d8:ef:e5:dc:5f:41:f2:64:04:29:2b: 31:63:0b:c8:37:b7:d2:5c:f2:70:ef:0e:4f:e7:2c:17:dc:76: 49:d0:0a:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/EZFmsBJZmuUEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NGJiZjg1ZDYtZmZjZi00MDdlLWJjMjEtYzc5YmI0OWU2Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1H6HoGYRf02wSIqW7UZebbcQN70f4w8ixJ7 8LNQk0Sz0Q+sMTNvQB5epy9z4INM0jvKM7sLbOLtlWwIfKerRM5sueRoOt4FUueW SX7pvnQaiQC8A1p7sbmbFZfQPMz3DzYNYJHyFrcxvvw6gbemHxzXnC9zksmKsGEW E010pstaQog+MbNcltZpaDAVeQzNV7fjSBNKIDzh4WG7pIbGO57j4jeg9i7XKKoQ dIg1ibwHIayF+Lm7ZnGjjOPbEpzYegqbHZeoxAvb8FzsnYcNJgzwzN7GhnrMiAd0 3JOFDdn53Kt2stkbkTik3zjp4Sni3R1NJFIXBe/zaQ4/5+i5GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCLNIbSJ3yXiVZ3j6DYxu4a8/dSYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjI4YTkzOWItNDZhNS0z ODhmLWI0ODMtZTMwNjQxNzE3ODY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL84WcNRgOOojhCSnpxBg5eKQ4mP+yl+VITP2c+87VMp/jlxJcMn ZlLNm9ED0ComFZxyNCFz40tcZ1LBOujy2mkRYiR2SGAhTwgUt/SFkGggaUXcTZmU oJcCPoioZ02ECIcFtlZZ3BkADux2VbaxyODc19+E0AbWQQe0ztatCTSbTyesKh8O jODrJg1tNc7xzZMAbNBfNd3CZpu9BJx+HTkN6S32zCqaQZhTs/RAcdao/JTFAWW9 uVJet6UtsKtAroiDqbLEL/2JM7jwCuBn2DXcAE4UqT2jIlElPrQ+ZJzY7+XcX0Hy ZAQpKzFjC8g3t9Jc8nDvDk/nLBfcdknQCvg= -----END CERTIFICATE-----Generated at Tue Jul 1 18:32:55 2025 by rpki-client