$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64c3d2de-3da2-3065-bd8a-245db0649a8a.roa File: 64c3d2de-3da2-3065-bd8a-245db0649a8a.roa (raw, json) Hash identifier: dnT13epTfHGZeUGZicMC56sHX2r+GdonwwR7+60ae2U= Subject key identifier: AD:7A:4F:EF:91:A3:40:2B:5A:89:4F:F1:E9:49:83:82:63:43:41:C7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC7B2CE66CD0FEABD496C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64c3d2de-3da2-3065-bd8a-245db0649a8a.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33659 IP address blocks: 2001:559:835b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:7b:2c:e6:6c:d0:fe:ab:d4:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=951f3b43-a371-483f-94b6-03ab6378545c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:3d:13:62:30:b9:47:16:fa:a3:5a:74:26: 70:81:2d:43:08:6b:e8:68:79:f0:1f:74:43:07:73: ba:d4:8e:c6:86:c7:2c:54:f9:f7:8a:b2:2c:b1:7d: c9:4c:74:cf:e3:f8:6a:c3:ab:6a:46:b9:7a:f2:85: aa:b4:f4:e5:15:86:07:c8:2e:0f:f6:4b:d8:b1:b0: 1c:ec:0d:f7:fc:a1:03:15:e8:a9:c8:96:7c:12:a1: 48:be:e5:20:98:9a:13:2a:18:07:c9:d3:65:6a:fb: a7:67:3e:52:90:b9:8d:8d:46:b1:ed:ff:a4:d6:af: 1d:57:f8:f5:9d:b2:68:51:3d:bb:b3:c1:70:5c:75: 26:24:4b:ca:40:e8:66:15:4c:45:41:90:72:6d:64: df:af:a2:1a:74:3f:24:83:7d:b7:44:fc:cd:c7:30: 1b:39:16:11:86:89:51:78:73:4f:78:6a:f4:c9:2f: cc:74:06:51:4c:35:68:2f:fc:02:78:27:0e:c4:2b: 66:bf:2d:0b:9f:12:f8:25:6e:5e:dd:83:d3:e8:79: e7:b6:7b:fe:55:5f:bd:75:63:e6:6c:8c:72:b2:04: 35:8a:1c:7b:fc:f6:a0:44:8d:32:d2:b2:f0:71:b0: f5:65:bc:a7:63:43:e9:3a:bc:0d:7e:5a:dc:f1:0e: 81:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:7A:4F:EF:91:A3:40:2B:5A:89:4F:F1:E9:49:83:82:63:43:41:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64c3d2de-3da2-3065-bd8a-245db0649a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:835b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:05:1e:7a:80:5d:54:00:71:46:dd:d9:8d:54:16:ae:b4:19: 84:a4:63:2b:a1:ba:b5:4c:4c:40:59:99:a3:e8:b2:01:87:a5: 03:20:03:e6:cd:58:08:c3:02:f5:9b:11:52:4d:09:74:0f:a0: 41:e0:ab:64:bb:4c:ea:52:4a:75:08:0d:e6:68:55:73:1f:88: 4a:49:66:f7:76:d8:e9:31:76:7e:be:e4:4b:a9:62:88:2c:00: 6e:15:46:86:5a:95:b1:7f:7b:50:ba:79:f1:67:90:a4:ef:d2: a3:5d:cd:5f:e2:46:53:a7:5d:01:44:d6:e9:8d:7e:b9:eb:a0: 17:45:d5:e8:eb:86:e1:54:15:91:c7:7b:d4:eb:7f:92:c6:21: e7:47:b1:7a:a1:43:36:d6:78:fe:8b:48:16:93:82:87:8e:da: dc:14:47:09:8f:7d:6c:99:19:fd:95:73:d5:50:d0:94:90:64: 7d:e4:f2:ef:fb:6e:1b:ae:70:27:42:fa:31:c1:70:bc:91:ec: bf:2c:20:fd:56:b2:f5:fa:c4:25:17:3c:60:f9:b5:49:41:9c: 70:a3:f3:0b:d4:64:26:c8:a7:4b:f2:f2:00:c2:a8:cc:85:73: 01:35:36:7a:84:a9:45:c0:11:58:f7:8b:86:59:82:8d:99:ff: 97:2e:24:b4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/Hss5mzQ/qvUlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk OTUxZjNiNDMtYTM3MS00ODNmLTk0YjYtMDNhYjYzNzg1NDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9E9E2IwuUcW+qNadCZwgS1DCGvoaHnwH3RD B3O61I7GhscsVPn3irIssX3JTHTP4/hqw6tqRrl68oWqtPTlFYYHyC4P9kvYsbAc 7A33/KEDFeipyJZ8EqFIvuUgmJoTKhgHydNlavunZz5SkLmNjUax7f+k1q8dV/j1 nbJoUT27s8FwXHUmJEvKQOhmFUxFQZBybWTfr6IadD8kg323RPzNxzAbORYRholR eHNPeGr0yS/MdAZRTDVoL/wCeCcOxCtmvy0LnxL4JW5e3YPT6Hnntnv+VV+9dWPm bIxysgQ1ihx7/PagRI0y0rLwcbD1ZbynY0PpOrwNflrc8Q6BtwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK16T++Ro0ArWolP8elJg4JjQ0HHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjRjM2QyZGUtM2RhMi0z MDY1LWJkOGEtMjQ1ZGIwNjQ5YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYNb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANUFHnqAXVQAcUbd2Y1UFq60GYSkYyuhurVMTEBZmaPosgGHpQMg A+bNWAjDAvWbEVJNCXQPoEHgq2S7TOpSSnUIDeZoVXMfiEpJZvd22Okxdn6+5Eup YogsAG4VRoZalbF/e1C6efFnkKTv0qNdzV/iRlOnXQFE1umNfrnroBdF1ejrhuFU FZHHe9Trf5LGIedHsXqhQzbWeP6LSBaTgoeO2twURwmPfWyZGf2Vc9VQ0JSQZH3k 8u/7bhuucCdC+jHBcLyR7L8sIP1WsvX6xCUXPGD5tUlBnHCj8wvUZCbIp0vy8gDC qMyFcwE1NnqEqUXAEVj3i4ZZgo2Z/5cuJLQ= -----END CERTIFICATE-----Generated at Tue Jul 1 03:59:07 2025 by rpki-client