$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7eca5c5b-1299-3c73-a589-e20b9139f135.roa File: 7eca5c5b-1299-3c73-a589-e20b9139f135.roa (raw, json) Hash identifier: pZwc52HbKAxa8es8OJFZ54h2yEFAn8aWxKgKQukMQ6I= Subject key identifier: EA:A2:B6:7B:64:10:0F:5F:11:A6:3E:9C:82:6F:A0:93:84:52:E5:D5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC51161A186CCFBB749C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7eca5c5b-1299-3c73-a589-e20b9139f135.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 2001:559:c1d2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:51:16:1a:18:6c:cf:bb:74:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=581da841-ef1d-400f-9d3c-2039b7215860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b5:88:1b:ef:05:e9:f7:9c:98:08:98:67:da: 24:7e:c3:1a:18:30:78:59:67:8c:17:1b:1a:d8:0b: 60:4b:d0:3c:49:e6:8f:2e:76:f6:45:3d:37:6b:da: d5:7f:56:82:59:5f:b3:3b:87:a2:63:65:50:79:89: b5:61:f3:93:4a:b9:6a:cf:b0:fe:54:e4:9b:b0:77: 17:e8:b5:e3:fd:77:87:58:76:0b:c0:e3:17:f6:23: c1:bb:61:9a:4b:ea:ac:8f:66:2f:3a:a2:32:ad:53: 1d:36:24:49:31:f5:a9:27:98:ea:c2:7b:76:1b:5e: 9f:36:d8:62:8d:a6:c5:1d:a6:31:8e:79:f0:dc:b8: df:22:ea:16:41:49:c6:36:cd:e6:4a:f3:fd:3a:19: 2e:e9:d6:b8:58:d0:d2:cb:58:e9:85:36:dd:07:85: 09:ff:f7:5c:cc:4b:08:cd:2e:84:b0:ba:6c:bc:4c: 61:1f:5f:82:b0:f7:4b:9b:6d:f0:50:d5:81:e7:f8: 39:82:a2:2f:08:4a:71:45:d5:1c:76:aa:a0:8b:97: 82:ab:e7:ed:aa:ab:ee:7e:62:8e:9a:4a:e3:80:40: 26:66:94:ad:5c:34:3d:08:02:d7:2d:4c:4f:15:cb: f7:6e:77:96:5d:4b:2c:19:ab:0f:32:71:3b:e3:90: 56:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:A2:B6:7B:64:10:0F:5F:11:A6:3E:9C:82:6F:A0:93:84:52:E5:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7eca5c5b-1299-3c73-a589-e20b9139f135.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c1d2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:05:2a:b3:e4:bb:6e:75:4a:08:65:e1:b7:0e:48:b6:13:56: f2:f0:9c:55:81:86:65:fd:2e:b0:d6:ae:cc:f6:8a:71:f8:56: 24:97:48:11:74:8e:49:a7:26:d7:89:60:4e:d7:e5:d3:92:dc: f8:c1:af:0b:69:62:71:2e:f1:84:96:61:57:cf:47:10:f2:97: b8:c4:e3:92:9a:d9:b5:98:a6:74:77:8b:06:50:67:f2:49:48: 41:92:d8:bc:28:97:7f:19:fc:a7:a0:ff:7b:57:07:ea:bc:c7: f2:a2:db:42:ea:cd:09:02:43:9c:a2:aa:f0:54:7e:c5:4b:36: cd:b5:4e:c9:35:17:07:22:f3:f8:18:4c:45:0a:36:18:98:d0: 97:9d:13:f0:64:4f:de:da:f5:7a:2e:39:ed:ad:aa:a5:87:ed: bc:61:34:9f:d7:06:f6:5a:64:4f:55:b9:93:c2:40:e3:26:ec: da:22:55:43:8f:af:6b:b6:fa:87:35:81:b1:41:b6:60:f3:7a: 66:61:ca:0a:a8:d2:1b:0f:c1:8b:2a:68:d6:2d:23:6f:76:a0: 64:be:f8:64:3f:0a:65:78:71:86:b7:ce:0e:32:a7:50:21:32: ad:cf:c8:47:01:8a:f2:4a:f1:c9:03:77:59:1e:f8:b7:2f:49: 52:53:38:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/FEWGhhsz7t0nIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NTgxZGE4NDEtZWYxZC00MDBmLTlkM2MtMjAzOWI3MjE1ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLWIG+8F6fecmAiYZ9okfsMaGDB4WWeMFxsa 2AtgS9A8SeaPLnb2RT03a9rVf1aCWV+zO4eiY2VQeYm1YfOTSrlqz7D+VOSbsHcX 6LXj/XeHWHYLwOMX9iPBu2GaS+qsj2YvOqIyrVMdNiRJMfWpJ5jqwnt2G16fNthi jabFHaYxjnnw3LjfIuoWQUnGNs3mSvP9Ohku6da4WNDSy1jphTbdB4UJ//dczEsI zS6EsLpsvExhH1+CsPdLm23wUNWB5/g5gqIvCEpxRdUcdqqgi5eCq+ftqqvufmKO mkrjgEAmZpStXDQ9CALXLUxPFcv3bneWXUssGasPMnE745BWdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOqitntkEA9fEaY+nIJvoJOEUuXVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2VjYTVjNWItMTI5OS0z YzczLWE1ODktZTIwYjkxMzlmMTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcHS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJsFKrPku251Sghl4bcOSLYTVvLwnFWBhmX9LrDWrsz2inH4ViSX SBF0jkmnJteJYE7X5dOS3PjBrwtpYnEu8YSWYVfPRxDyl7jE45Ka2bWYpnR3iwZQ Z/JJSEGS2Lwol38Z/Keg/3tXB+q8x/Ki20LqzQkCQ5yiqvBUfsVLNs21Tsk1Fwci 8/gYTEUKNhiY0JedE/BkT97a9XouOe2tqqWH7bxhNJ/XBvZaZE9VuZPCQOMm7Noi VUOPr2u2+oc1gbFBtmDzemZhygqo0hsPwYsqaNYtI292oGS++GQ/CmV4cYa3zg4y p1AhMq3PyEcBivJK8ckDd1ke+LcvSVJTOHQ= -----END CERTIFICATE-----Generated at Tue Jul 1 16:47:46 2025 by rpki-client