$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/879c0180-c3aa-3028-9524-1f7d1872e106.roa File: 879c0180-c3aa-3028-9524-1f7d1872e106.roa (raw, json) Hash identifier: 33H8nQWRtU50nJ2RKOuoeAOQyWkgY65FDT3CwWBtTn8= Subject key identifier: 3B:29:B7:A4:C4:A3:92:A1:05:AC:04:43:2D:26:1D:3F:D3:3D:4B:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCD1C25BD7A19E3EECEB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/879c0180-c3aa-3028-9524-1f7d1872e106.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22909 IP address blocks: 2001:559:c035::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:d1:c2:5b:d7:a1:9e:3e:ec:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=3b301ce2-acb5-460f-8d9d-ac19037c3e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:66:3b:46:75:00:7e:57:4b:1c:d6:b2:76: 1a:d2:e2:c1:4c:b4:d2:4f:20:cb:da:3a:f2:d3:a1: 87:07:77:8c:8c:f5:9a:78:79:7e:1c:d0:a4:30:57: 43:b6:6d:3b:36:f0:0f:87:79:91:a8:bd:2f:7e:ee: 0a:a1:e6:b2:5e:b9:9d:d5:5c:f6:d6:b1:61:d8:ac: 46:68:4b:5c:74:a0:4d:9b:10:3b:08:f7:00:5a:68: 51:f0:ca:59:84:6d:23:ae:8f:82:a6:25:89:a6:1d: 80:f2:7c:48:e3:ac:18:e2:0d:8a:75:86:58:aa:86: 6c:49:8f:8f:c4:b0:92:69:12:13:57:e3:38:2d:a1: 3c:85:a9:32:0e:6c:21:55:28:5c:a1:a3:58:9a:32: f2:ee:9f:c3:15:1d:6e:32:00:56:ca:5f:0b:13:87: 41:a9:a7:54:c4:a2:e2:a9:8a:1b:f9:b1:66:d8:37: c6:4d:db:96:1c:41:c3:fe:24:83:82:84:bf:7d:91: 89:12:bc:0c:cd:7e:bf:a7:fc:a1:83:a3:1f:02:10: 09:01:4c:00:45:b9:a8:9d:6f:64:46:e6:ec:62:74: 98:f4:e4:ec:d2:24:d4:49:f5:f4:aa:57:7d:62:6e: 55:97:2c:be:e8:b5:53:74:14:b7:a8:10:d0:1f:25: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:29:B7:A4:C4:A3:92:A1:05:AC:04:43:2D:26:1D:3F:D3:3D:4B:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/879c0180-c3aa-3028-9524-1f7d1872e106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c035::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:76:a3:82:22:11:af:fe:a4:4a:be:26:b3:b9:af:cc:03:24: cc:05:1a:dd:e6:c2:9e:e2:3c:53:38:f9:bb:5d:c9:0f:2a:84: df:14:08:cf:8b:20:3f:0b:c7:6b:e4:47:74:2a:cc:ae:b0:5f: 94:ce:24:cc:50:61:9e:f6:17:b2:95:21:b2:8a:1a:c2:49:1c: 90:76:af:c9:a8:23:81:8f:6f:e1:ef:eb:bd:10:0d:63:1b:6b: 02:e7:0d:f4:28:5d:ff:1f:be:74:8c:05:fc:64:06:82:e7:fb: 30:13:45:8a:8d:f0:32:06:6c:70:60:6e:0c:4c:0e:67:c5:c4: 82:fb:62:98:7c:83:7e:d6:f7:2a:30:9f:bc:d7:aa:37:29:62: ab:df:0f:32:67:df:c6:49:b5:bd:23:66:8f:a4:90:d5:1d:ac: 1d:7e:07:8c:c2:03:29:27:17:c7:ef:05:a8:89:19:66:ad:43: 5c:37:16:be:ca:dd:85:44:36:c3:99:dc:eb:0d:40:33:48:fc: 80:e1:6f:aa:e7:36:83:3e:fe:c6:f3:1f:5b:5a:fc:5e:89:38: 91:bd:03:6c:ba:02:1f:31:e5:85:28:89:e6:88:4f:41:53:25: 1f:fe:fe:db:12:10:9c:e9:11:08:be:32:5c:34:65:1d:86:03: 7f:da:97:41 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/NHCW9ehnj7s64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk M2IzMDFjZTItYWNiNS00NjBmLThkOWQtYWMxOTAzN2MzZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uZmO0Z1AH5XSxzWsnYa0uLBTLTSTyDL2jry 06GHB3eMjPWaeHl+HNCkMFdDtm07NvAPh3mRqL0vfu4KoeayXrmd1Vz21rFh2KxG aEtcdKBNmxA7CPcAWmhR8MpZhG0jro+CpiWJph2A8nxI46wY4g2KdYZYqoZsSY+P xLCSaRITV+M4LaE8hakyDmwhVShcoaNYmjLy7p/DFR1uMgBWyl8LE4dBqadUxKLi qYob+bFm2DfGTduWHEHD/iSDgoS/fZGJErwMzX6/p/yhg6MfAhAJAUwARbmonW9k RubsYnSY9OTs0iTUSfX0qld9Ym5Vlyy+6LVTdBS3qBDQHyVa2wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDspt6TEo5KhBawEQy0mHT/TPUv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODc5YzAxODAtYzNhYS0z MDI4LTk1MjQtMWY3ZDE4NzJlMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMx2o4IiEa/+pEq+JrO5r8wDJMwFGt3mwp7iPFM4+btdyQ8qhN8U CM+LID8Lx2vkR3QqzK6wX5TOJMxQYZ72F7KVIbKKGsJJHJB2r8moI4GPb+Hv670Q DWMbawLnDfQoXf8fvnSMBfxkBoLn+zATRYqN8DIGbHBgbgxMDmfFxIL7Yph8g37W 9yown7zXqjcpYqvfDzJn38ZJtb0jZo+kkNUdrB1+B4zCAyknF8fvBaiJGWatQ1w3 Fr7K3YVENsOZ3OsNQDNI/IDhb6rnNoM+/sbzH1ta/F6JOJG9A2y6Ah8x5YUoieaI T0FTJR/+/tsSEJzpEQi+Mlw0ZR2GA3/al0E= -----END CERTIFICATE-----Generated at Tue Jul 1 13:12:59 2025 by rpki-client