$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870a5f84-f2a9-398e-b8bd-ce8847f3a76d.roa File: 870a5f84-f2a9-398e-b8bd-ce8847f3a76d.roa (raw, json) Hash identifier: FEIMGdws36k57gTTajuBQuKB6z4jXe5U/JBxzzgUTlY= Subject key identifier: 1C:6C:E5:A6:08:F0:5C:85:45:24:C1:03:20:55:DB:B8:5B:C8:41:3A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD5DD765B9912A1DF4DE40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870a5f84-f2a9-398e-b8bd-ce8847f3a76d.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7015 IP address blocks: 2001:559:c425::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:5d:d7:65:b9:91:2a:1d:f4:de:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=d36c5994-f6bc-4941-a959-215768c362bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:23:8b:91:4f:32:2e:c9:92:19:c0:b6:79:91: 19:26:7c:31:5e:1d:b0:18:17:d3:b6:3c:71:94:fe: f9:46:23:dd:f6:7e:c0:b9:ae:bf:3e:bf:3b:9b:47: 7b:78:fa:07:d0:b2:5b:87:b2:2c:c2:3c:b3:6f:e1: 57:e9:69:c0:d7:95:85:13:52:5a:8b:14:1a:d1:28: 95:93:91:3c:6a:71:d3:2d:69:06:91:62:52:4f:22: 41:bc:f5:ce:6c:26:3d:b1:51:76:ec:97:db:29:13: 18:16:f8:9f:4a:72:b8:fe:4e:77:e0:bb:fc:eb:a4: 99:16:8e:be:75:ff:df:b7:6d:3d:1a:28:e7:4d:07: 43:95:94:76:83:9c:43:0e:2d:55:73:98:38:9c:e5: 0a:d0:c3:ce:fd:5f:8b:77:a3:98:09:16:21:b1:e1: f7:ed:68:ba:65:1f:bc:35:ee:ba:be:fb:c9:d7:26: 3d:b8:89:7e:fd:45:ca:28:51:00:22:14:5b:0f:f5: 7f:c4:c0:66:d6:62:73:a3:f8:9b:59:31:eb:7e:8a: 44:2a:8e:c7:27:0d:d8:cc:eb:a4:81:4c:b5:e5:ee: a5:f3:02:ad:8b:3b:a9:2d:4f:dc:d9:ed:5a:44:50: 23:62:b5:5a:31:52:f2:df:f5:db:29:02:ca:3a:48: 3e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6C:E5:A6:08:F0:5C:85:45:24:C1:03:20:55:DB:B8:5B:C8:41:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/870a5f84-f2a9-398e-b8bd-ce8847f3a76d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c425::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:40:cc:c1:3f:0a:5a:c9:a8:1c:14:10:72:06:b2:8d:13:b5: 71:3f:05:ec:50:a3:d9:01:f1:b4:41:01:c4:b6:ce:b4:bf:48: f0:4e:89:a2:44:60:e6:00:a1:8d:2b:71:9a:eb:22:82:8c:a2: 70:67:aa:d1:5b:d3:39:06:6d:7f:26:ad:92:96:21:a9:74:c0: 37:08:0c:bc:07:33:b5:58:d8:e1:c8:a1:86:2b:b1:a7:5c:98: d8:69:98:dd:19:8c:04:a9:db:6b:cb:31:2e:86:42:23:92:df: 7d:af:c0:25:a0:e0:ac:e6:a6:b2:89:4f:a9:84:b3:28:25:ac: c9:2e:9d:88:2e:56:77:bf:7d:9f:f6:fd:91:23:32:53:16:44: d1:01:c1:e3:3e:e1:a0:4c:69:a5:25:1a:09:f7:56:46:f6:14: 25:bc:c9:4d:a9:55:cd:0b:3b:18:0a:0a:fe:14:ce:ff:0e:d0: ae:de:92:44:6a:4d:a9:33:9f:9b:2c:d9:ad:65:f5:59:e7:47: eb:d0:63:27:59:9c:13:47:18:93:32:23:d1:4a:75:21:7b:1f: 96:28:87:46:60:ed:f2:42:47:09:12:32:62:61:2d:30:79:d7: 2c:f9:c3:55:60:f5:60:c6:2f:70:3a:a2:b3:be:0e:00:6e:d1: 9d:26:13:cc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/V3XZbmRKh303kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZDM2YzU5OTQtZjZiYy00OTQxLWE5NTktMjE1NzY4YzM2MmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCOLkU8yLsmSGcC2eZEZJnwxXh2wGBfTtjxx lP75RiPd9n7Aua6/Pr87m0d7ePoH0LJbh7Iswjyzb+FX6WnA15WFE1JaixQa0SiV k5E8anHTLWkGkWJSTyJBvPXObCY9sVF27JfbKRMYFvifSnK4/k534Lv866SZFo6+ df/ft209GijnTQdDlZR2g5xDDi1Vc5g4nOUK0MPO/V+Ld6OYCRYhseH37Wi6ZR+8 Ne66vvvJ1yY9uIl+/UXKKFEAIhRbD/V/xMBm1mJzo/ibWTHrfopEKo7HJw3YzOuk gUy15e6l8wKtizupLU/c2e1aRFAjYrVaMVLy3/XbKQLKOkg+ZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBxs5aYI8FyFRSTBAyBV27hbyEE6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODcwYTVmODQtZjJhOS0z OThlLWI4YmQtY2U4ODQ3ZjNhNzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcQl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALhAzME/ClrJqBwUEHIGso0TtXE/BexQo9kB8bRBAcS2zrS/SPBO iaJEYOYAoY0rcZrrIoKMonBnqtFb0zkGbX8mrZKWIal0wDcIDLwHM7VY2OHIoYYr sadcmNhpmN0ZjASp22vLMS6GQiOS332vwCWg4KzmprKJT6mEsyglrMkunYguVne/ fZ/2/ZEjMlMWRNEBweM+4aBMaaUlGgn3Vkb2FCW8yU2pVc0LOxgKCv4Uzv8O0K7e kkRqTakzn5ss2a1l9VnnR+vQYydZnBNHGJMyI9FKdSF7H5Yoh0Zg7fJCRwkSMmJh LTB51yz5w1Vg9WDGL3A6orO+DgBu0Z0mE8w= -----END CERTIFICATE-----Generated at Tue Jul 1 14:29:05 2025 by rpki-client