$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/643b9106-d1b1-3686-8adf-744187e0444d.roa File: 643b9106-d1b1-3686-8adf-744187e0444d.roa (raw, json) Hash identifier: 7c6ZHXMN3iGxb7KfqzIdBVkeA09gA2sdzaxLGhi4lvI= Subject key identifier: 31:C0:4E:32:DC:C5:2E:C8:A3:37:6F:65:CD:34:E8:1C:85:8B:FC:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC4D98B1FFD68860E18AF4 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/643b9106-d1b1-3686-8adf-744187e0444d.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 2001:559:856d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:4d:98:b1:ff:d6:88:60:e1:8a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=95bda587-61ca-4d8d-a3db-5357cd5352b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d9:40:45:ba:1c:9d:1f:f3:d2:a8:c9:3c:c3: 55:92:21:0d:b3:9a:90:ac:ea:77:d1:81:c1:d2:63: 07:04:eb:0f:36:99:18:2f:9d:7a:c7:d9:ad:55:92: c1:0a:fc:44:9e:dd:89:af:3d:29:37:e5:06:6c:71: 8e:13:52:89:ec:1b:84:b6:7e:cb:8d:9d:6c:8a:09: 00:90:26:70:f8:2a:90:f6:a2:d7:d0:8b:63:62:22: fd:f4:34:8a:77:11:38:5f:c0:e0:78:1c:cf:05:e4: b2:e1:42:27:65:8d:6e:47:9f:05:a8:3a:c9:ae:7b: eb:c5:68:51:5b:b0:a0:35:9d:c7:77:73:04:1b:7c: 2d:b5:95:82:89:17:0a:55:96:f7:57:2f:ea:45:05: 1f:14:58:27:90:8b:14:14:85:17:6c:20:3f:87:77: 24:06:2d:d9:18:17:df:84:a9:cd:76:0a:a2:83:83: 65:d2:5e:5b:8e:10:44:0f:a4:6e:33:0e:a6:cb:d0: be:1e:9b:a5:b7:8e:14:be:52:db:97:1a:a8:db:1f: 5e:60:d3:6e:44:59:fa:ef:31:bd:d8:b4:ab:85:a9: cd:20:c4:60:cf:eb:af:21:84:5d:47:fe:46:30:e9: fd:f3:0b:f4:af:30:aa:5f:43:2b:31:1f:e6:1a:37: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C0:4E:32:DC:C5:2E:C8:A3:37:6F:65:CD:34:E8:1C:85:8B:FC:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/643b9106-d1b1-3686-8adf-744187e0444d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:856d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3b:b4:c6:b6:0f:f7:4f:9a:d1:0a:d9:da:c3:76:ef:10:d8: 35:f1:a9:ba:d5:55:b0:8a:df:ed:b7:74:03:eb:b2:2f:c1:ce: 26:c1:5e:73:b9:bd:f0:3e:f9:b3:f4:f2:4d:b1:27:6a:5f:40: 18:9a:20:9a:c9:df:71:d9:76:6d:0a:45:a2:76:3f:4e:95:bd: f4:c7:c5:c2:e3:f4:83:6e:13:40:1a:4f:fd:d4:04:21:4b:3f: 31:16:e1:6f:b4:49:5b:06:63:89:35:91:18:e1:2f:ae:b2:e2: 9a:51:7d:d8:24:5e:66:8f:dc:d1:2a:33:a8:81:13:98:c0:e5: 54:b8:e7:bf:27:97:e2:b3:30:d1:e2:70:d0:13:ba:e4:74:84: c0:d2:fe:b7:68:ff:10:17:55:56:a8:56:2b:02:62:02:a3:17: cc:77:79:b5:44:67:58:da:8b:fc:53:da:84:3b:03:63:27:b5: c3:e5:ef:c1:aa:43:f6:47:3e:4a:b1:d9:14:b5:96:d5:d5:1e: f5:d9:70:b9:23:48:6c:51:b2:7b:41:ee:2b:71:63:dc:49:9d: b0:70:7c:5b:5b:4c:e9:89:75:dd:21:63:d7:d7:f2:ec:a8:c6: 55:cd:c7:2b:6c:24:2a:6e:85:10:e6:39:2c:4d:61:a2:b0:4b: 78:46:b5:ff -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/E2Ysf/WiGDhivQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk OTViZGE1ODctNjFjYS00ZDhkLWEzZGItNTM1N2NkNTM1MmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9lARbocnR/z0qjJPMNVkiENs5qQrOp30YHB 0mMHBOsPNpkYL516x9mtVZLBCvxEnt2Jrz0pN+UGbHGOE1KJ7BuEtn7LjZ1sigkA kCZw+CqQ9qLX0ItjYiL99DSKdxE4X8DgeBzPBeSy4UInZY1uR58FqDrJrnvrxWhR W7CgNZ3Hd3MEG3wttZWCiRcKVZb3Vy/qRQUfFFgnkIsUFIUXbCA/h3ckBi3ZGBff hKnNdgqig4Nl0l5bjhBED6RuMw6my9C+Hpult44UvlLblxqo2x9eYNNuRFn67zG9 2LSrhanNIMRgz+uvIYRdR/5GMOn98wv0rzCqX0MrMR/mGjfT3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDHATjLcxS7IozdvZc006ByFi/xaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQzYjkxMDYtZDFiMS0z Njg2LThhZGYtNzQ0MTg3ZTA0NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYVt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEc7tMa2D/dPmtEK2drDdu8Q2DXxqbrVVbCK3+23dAPrsi/BzibB XnO5vfA++bP08k2xJ2pfQBiaIJrJ33HZdm0KRaJ2P06VvfTHxcLj9INuE0AaT/3U BCFLPzEW4W+0SVsGY4k1kRjhL66y4ppRfdgkXmaP3NEqM6iBE5jA5VS4578nl+Kz MNHicNATuuR0hMDS/rdo/xAXVVaoVisCYgKjF8x3ebVEZ1jai/xT2oQ7A2MntcPl 78GqQ/ZHPkqx2RS1ltXVHvXZcLkjSGxRsntB7itxY9xJnbBwfFtbTOmJdd0hY9fX 8uyoxlXNxytsJCpuhRDmOSxNYaKwS3hGtf8= -----END CERTIFICATE-----Generated at Wed Jul 2 05:32:38 2025 by rpki-client