$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64c8df1d-9f75-309e-b307-d0306049f9a5.roa File: 64c8df1d-9f75-309e-b307-d0306049f9a5.roa (raw, json) Hash identifier: T/cnxQ2U6hHAwpicr1Zub+/oTeyx9dYlQvPs1qhbVzs= Subject key identifier: 3A:4E:F1:08:F1:91:A5:42:83:8A:98:58:94:62:5A:CB:DF:77:79:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBEA96C7260EEF2F1F2380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64c8df1d-9f75-309e-b307-d0306049f9a5.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7015 IP address blocks: 2001:559:8258::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:ea:96:c7:26:0e:ef:2f:1f:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=378bdf56-2205-4c00-8c9b-09c7161db8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e9:7d:e7:ba:39:87:7e:65:f7:74:b8:b3:24: 7f:db:66:a9:8f:43:8a:ec:62:02:d8:44:ea:a9:eb: b8:dd:37:ff:7f:39:37:fe:f2:3c:e8:09:99:3f:00: b6:2c:8e:14:23:cc:7c:77:29:d5:c2:3d:12:49:4b: da:7a:88:57:d5:b2:91:64:2b:5d:3d:89:72:5f:e2: c8:b0:22:d4:0b:d9:20:fb:76:a0:f0:59:f4:57:13: 5d:09:d7:7e:46:74:9b:a9:9c:b1:5c:f4:82:f1:73: 21:04:b7:f0:72:72:d9:a8:c5:1e:e5:77:44:12:ff: c1:0d:95:59:a9:94:f4:e0:2e:b1:f9:f0:3e:ee:9a: f8:e8:b7:af:68:f8:04:e5:87:64:00:b0:2e:7c:56: 49:82:59:6e:ef:d0:db:84:11:49:75:87:71:ab:13: e4:97:bd:45:c8:43:43:94:90:fc:f4:98:4a:11:a6: f2:58:7b:b3:04:f1:d7:0c:79:b5:b4:40:f3:0a:56: 15:da:e5:68:1c:72:b8:21:6c:39:6c:11:aa:d8:0b: 45:79:37:8a:60:ad:57:67:e0:0d:9a:4f:7a:0d:9c: c3:35:6d:b2:eb:de:9d:86:fc:64:07:cc:99:85:1d: 6f:c5:2f:1f:f9:98:dc:87:9d:18:1b:53:e3:0e:56: b4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4E:F1:08:F1:91:A5:42:83:8A:98:58:94:62:5A:CB:DF:77:79:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64c8df1d-9f75-309e-b307-d0306049f9a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8258::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:22:6c:4d:5e:4d:c1:23:9a:2a:98:a0:68:c1:31:1f:70:2d: 17:f0:79:f3:6a:ab:61:4e:3c:71:3d:38:63:6c:87:14:fe:a6: 3f:62:3a:87:c7:72:1e:34:72:c2:ac:5c:95:87:5e:86:05:75: b3:b0:e7:a5:62:f9:ed:4b:b4:4d:09:c1:17:b8:c9:e9:e4:3d: 31:55:50:fd:b3:cc:14:28:ca:92:11:11:79:e8:69:4f:c4:d9: 7d:f2:d7:57:c3:27:37:3f:36:00:38:08:33:9d:a2:c1:94:84: b5:8e:a0:8e:b2:e3:d8:44:87:3e:86:8f:ad:7c:74:7e:13:19: 64:bf:14:34:59:8b:3d:a8:7b:6a:03:75:93:14:5f:c8:e6:7d: 64:92:1f:55:df:70:c4:3f:6e:b2:5c:3c:0f:e4:4e:7f:03:b8: 20:7b:25:9c:21:ee:06:58:5c:b6:98:29:cc:9f:f6:23:83:06: b6:b0:a9:73:d0:4c:72:b1:1a:57:c5:64:76:e0:9e:aa:ff:a8: c1:01:57:f3:6c:fe:e9:aa:58:83:42:83:f8:f3:2c:37:cc:7d: 2d:33:e5:b3:df:8b:0e:46:cc:cb:36:dd:4a:b2:f7:c3:97:7b: d3:a3:42:a8:6f:91:25:fe:59:17:3f:86:15:7d:65:3c:c4:a1: 16:69:b6:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc++qWxyYO7y8fI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk Mzc4YmRmNTYtMjIwNS00YzAwLThjOWItMDljNzE2MWRiOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsul957o5h35l93S4syR/22apj0OK7GIC2ETq qeu43Tf/fzk3/vI86AmZPwC2LI4UI8x8dynVwj0SSUvaeohX1bKRZCtdPYlyX+LI sCLUC9kg+3ag8Fn0VxNdCdd+RnSbqZyxXPSC8XMhBLfwcnLZqMUe5XdEEv/BDZVZ qZT04C6x+fA+7pr46LevaPgE5YdkALAufFZJgllu79DbhBFJdYdxqxPkl71FyEND lJD89JhKEabyWHuzBPHXDHm1tEDzClYV2uVoHHK4IWw5bBGq2AtFeTeKYK1XZ+AN mk96DZzDNW2y696dhvxkB8yZhR1vxS8f+Zjch50YG1PjDla09QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDpO8QjxkaVCg4qYWJRiWsvfd3k1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjRjOGRmMWQtOWY3NS0z MDllLWIzMDctZDAzMDYwNDlmOWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJIibE1eTcEjmiqYoGjBMR9wLRfwefNqq2FOPHE9OGNshxT+pj9i OofHch40csKsXJWHXoYFdbOw56Vi+e1LtE0JwRe4yenkPTFVUP2zzBQoypIREXno aU/E2X3y11fDJzc/NgA4CDOdosGUhLWOoI6y49hEhz6Gj618dH4TGWS/FDRZiz2o e2oDdZMUX8jmfWSSH1XfcMQ/brJcPA/kTn8DuCB7JZwh7gZYXLaYKcyf9iODBraw qXPQTHKxGlfFZHbgnqr/qMEBV/Ns/umqWINCg/jzLDfMfS0z5bPfiw5GzMs23Uqy 98OXe9OjQqhvkSX+WRc/hhV9ZTzEoRZptok= -----END CERTIFICATE-----Generated at Tue Jul 1 09:35:15 2025 by rpki-client