$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98500f5f-0951-3c59-aa5a-d53710385eb4.roa File: 98500f5f-0951-3c59-aa5a-d53710385eb4.roa (raw, json) Hash identifier: upqHn55/f5KGtAVqydExDoW/ZhuUL2nMIDSNBhxJbDA= Subject key identifier: B8:B3:E0:1D:3C:F4:4D:B2:75:88:80:12:46:B2:8E:7E:EA:20:FD:F8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC67440E21FE6AA3E8C660 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98500f5f-0951-3c59-aa5a-d53710385eb4.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33657 IP address blocks: 2001:559:5c7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:67:44:0e:21:fe:6a:a3:e8:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=aa9f9fac-89fa-4435-ba1f-dd8987927d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:96:a3:90:59:de:a3:40:5b:33:3c:83:f7:a5: 9d:ec:9f:b5:ff:4f:e1:a6:64:fc:f0:cd:20:33:26: 4d:7b:97:bd:27:d0:e1:7a:bd:a9:7b:24:e8:a3:ca: bc:3c:23:bd:77:fc:fc:70:50:8d:61:88:d4:52:85: df:50:54:87:a6:67:0c:38:e4:f4:67:cd:ca:ff:7a: b1:03:9e:e4:44:e1:86:44:d8:5d:cc:d4:86:b7:7e: 44:92:8e:c7:b1:2b:ef:2c:af:93:1f:bb:a5:b3:b9: 73:c4:75:8a:9a:92:9d:23:01:9a:66:d3:4f:00:12: a0:08:35:ca:90:7d:7a:fa:a9:a7:91:ed:cb:82:a9: e4:62:e3:df:56:1c:d8:5c:c7:57:73:93:43:63:62: 6e:21:f0:a7:aa:bb:2e:51:ca:43:4d:78:1a:7d:97: a0:fa:b7:db:ad:8c:23:6b:49:3e:f1:d5:a6:ad:91: b9:2b:9a:94:fb:27:31:de:9d:5a:11:dd:df:03:61: cd:51:8e:a6:33:68:33:d7:8e:6d:df:7a:34:4b:a6: bb:83:e3:32:a8:46:64:d3:18:ff:88:6a:66:b3:b0: c5:e7:6d:08:f0:9e:f7:0c:d6:74:34:fb:d4:66:a8: 1a:42:12:2a:8c:34:41:4d:f7:fb:07:26:20:a9:48: 1a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B3:E0:1D:3C:F4:4D:B2:75:88:80:12:46:B2:8E:7E:EA:20:FD:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98500f5f-0951-3c59-aa5a-d53710385eb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:5c7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:29:47:a0:68:e6:87:06:cf:89:55:9b:b0:dd:98:94:40:a0: 6b:28:a2:e8:f5:51:97:59:e8:25:30:cc:63:7e:97:72:cd:dc: 70:52:e9:0a:eb:d1:c9:61:ea:35:be:a6:29:49:a0:e6:48:44: 57:00:12:74:08:3e:41:ba:39:7e:df:5a:2f:7e:47:64:75:45: 4c:7b:8c:cc:ee:47:8a:d5:80:c4:bc:cf:8d:17:a3:d5:96:e3: 6a:25:54:ef:6e:89:3c:b2:8d:6b:2d:fa:e2:65:e3:cf:ea:b1: 34:a5:03:2f:66:b0:9f:0f:b4:18:df:3a:70:11:59:ad:f5:24: 71:5c:6e:29:ce:e5:02:ab:89:d9:5b:ba:ea:ba:27:16:1a:7e: 59:00:53:98:7d:be:e8:9f:90:97:a4:53:9b:5e:f2:8b:ac:60: 1b:bd:de:09:64:eb:ff:24:f4:0c:7d:d9:d5:c3:f4:31:5a:fe: e5:2e:a0:47:8e:6b:45:5b:38:25:07:d6:fa:87:25:a3:71:a2: 6d:81:2b:92:ef:7e:85:91:a7:30:27:a7:de:a6:ce:15:7a:8f: 68:d1:81:76:4f:1b:70:cd:cb:e9:07:c0:36:30:b7:2f:b6:c1: 3e:67:e2:e7:0e:62:51:81:f4:31:76:75:46:4b:6e:fc:ac:40: bb:78:3f:07 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/GdEDiH+aqPoxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YWE5ZjlmYWMtODlmYS00NDM1LWJhMWYtZGQ4OTg3OTI3ZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5ajkFneo0BbMzyD96Wd7J+1/0/hpmT88M0g MyZNe5e9J9Dher2peyToo8q8PCO9d/z8cFCNYYjUUoXfUFSHpmcMOOT0Z83K/3qx A57kROGGRNhdzNSGt35Eko7HsSvvLK+TH7uls7lzxHWKmpKdIwGaZtNPABKgCDXK kH16+qmnke3LgqnkYuPfVhzYXMdXc5NDY2JuIfCnqrsuUcpDTXgafZeg+rfbrYwj a0k+8dWmrZG5K5qU+ycx3p1aEd3fA2HNUY6mM2gz145t33o0S6a7g+MyqEZk0xj/ iGpms7DF520I8J73DNZ0NPvUZqgaQhIqjDRBTff7ByYgqUgaZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLiz4B089E2ydYiAEkayjn7qIP34MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTg1MDBmNWYtMDk1MS0z YzU5LWFhNWEtZDUzNzEwMzg1ZWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQXH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANEpR6Bo5ocGz4lVm7DdmJRAoGsoouj1UZdZ6CUwzGN+l3LN3HBS 6Qrr0clh6jW+pilJoOZIRFcAEnQIPkG6OX7fWi9+R2R1RUx7jMzuR4rVgMS8z40X o9WW42olVO9uiTyyjWst+uJl48/qsTSlAy9msJ8PtBjfOnARWa31JHFcbinO5QKr idlbuuq6JxYaflkAU5h9vuifkJekU5te8ousYBu93glk6/8k9Ax92dXD9DFa/uUu oEeOa0VbOCUH1vqHJaNxom2BK5LvfoWRpzAnp96mzhV6j2jRgXZPG3DNy+kHwDYw ty+2wT5n4ucOYlGB9DF2dUZLbvysQLt4Pwc= -----END CERTIFICATE-----Generated at Tue Jul 1 07:00:01 2025 by rpki-client