$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a152fc20-35a2-3841-9b6b-5249fb6529c8.roa File: a152fc20-35a2-3841-9b6b-5249fb6529c8.roa (raw, json) Hash identifier: vFZy56e8QR3zkI+kDORGRwhR97lKFGDd63kIM6TYuTA= Subject key identifier: AF:7F:65:90:40:39:0B:2C:B1:30:CB:99:2B:20:D1:4E:1C:D3:A6:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC4EB20E27A4DF40B8A6A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a152fc20-35a2-3841-9b6b-5249fb6529c8.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 2001:559:86bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:4e:b2:0e:27:a4:df:40:b8:a6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=fdb5bb68-3fd8-4c9c-8ec0-172881b8d6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c5:9d:5d:8b:31:13:dc:23:e7:b1:43:d5:6a: 08:e1:cc:42:48:d4:86:e8:d4:03:1b:d3:fa:29:da: fd:d1:03:3e:2f:a6:e6:77:be:89:c0:3b:8f:1b:8f: 7e:b1:94:58:ea:e6:ce:38:37:ec:77:6e:29:3a:e9: 9d:67:7a:f5:19:8b:e6:6b:f4:54:3b:b9:81:13:e4: e4:8d:39:25:83:2e:67:33:cc:ac:89:23:ea:ca:43: ca:62:4f:5b:b6:0d:5d:a9:22:ae:f3:71:c3:62:19: 16:61:3a:eb:37:fa:3f:99:71:f7:e4:20:7f:1f:7c: c6:d0:1c:28:2e:4e:5b:52:a0:42:65:2b:17:5d:e0: 41:fa:0e:0e:07:9c:3d:78:2e:d8:37:4b:fc:a2:e1: ce:bd:a4:2e:00:79:7c:72:1c:a7:19:ab:44:10:37: f8:5d:13:e9:7f:c5:a6:bc:d4:74:c0:83:df:e1:2b: 01:ff:d5:bf:7a:82:d1:c3:7a:e6:2c:d9:b3:46:b5: e2:d9:8a:c8:80:98:3c:1d:bd:3c:ba:71:25:8a:da: 61:7b:09:f2:ed:67:8f:62:d7:de:ef:71:02:91:87: cd:21:df:17:ab:b9:e7:5a:7d:4b:0c:ee:ae:f6:b1: 07:13:44:06:9f:93:35:47:f0:ca:05:74:02:67:8f: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7F:65:90:40:39:0B:2C:B1:30:CB:99:2B:20:D1:4E:1C:D3:A6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a152fc20-35a2-3841-9b6b-5249fb6529c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:86bc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:bc:b2:67:40:ba:32:f1:93:10:fa:08:e9:69:d9:4c:28:ad: 9e:1e:fa:fe:96:78:e3:ab:1f:db:1e:02:3f:02:15:4c:6a:43: f0:5c:75:7e:34:9d:6a:c0:d9:0d:42:50:18:50:6d:8b:c0:63: 91:ca:61:94:f5:ab:4a:41:09:e6:05:16:0e:11:f3:65:3c:7d: c3:33:9b:de:1d:86:0e:19:87:cf:9a:d1:4b:9f:a7:d7:1c:69: e4:0e:9c:27:64:0b:10:24:d3:f8:13:85:17:72:21:35:72:62: a6:1d:40:c0:8b:78:c2:49:b4:bd:57:95:a7:01:09:89:9e:4c: cb:df:7a:93:cb:51:0f:50:b2:58:48:a1:aa:9c:32:40:99:dc: 3c:ce:5d:eb:94:d8:1d:d5:c7:04:b3:c9:45:ea:f5:57:52:d0: 66:d8:61:77:69:09:91:18:9d:f4:02:6d:09:ab:35:06:68:66: b0:11:f5:c6:ed:47:a5:b8:7e:44:ec:27:bc:5d:24:53:5e:85: c8:3e:bd:f7:c7:7f:bf:b4:5c:22:a1:5f:1a:9c:be:8e:0a:04: 8f:85:21:e7:cc:cb:ae:56:c5:89:9c:f1:d9:82:28:fa:10:ac: 13:17:04:99:51:fc:5e:81:32:ae:69:95:d4:c4:ad:59:63:f2: 19:5c:01:7d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/E6yDiek30C4pqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZmRiNWJiNjgtM2ZkOC00YzljLThlYzAtMTcyODgxYjhkNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsWdXYsxE9wj57FD1WoI4cxCSNSG6NQDG9P6 Kdr90QM+L6bmd76JwDuPG49+sZRY6ubOODfsd24pOumdZ3r1GYvma/RUO7mBE+Tk jTklgy5nM8ysiSPqykPKYk9btg1dqSKu83HDYhkWYTrrN/o/mXH35CB/H3zG0Bwo Lk5bUqBCZSsXXeBB+g4OB5w9eC7YN0v8ouHOvaQuAHl8chynGatEEDf4XRPpf8Wm vNR0wIPf4SsB/9W/eoLRw3rmLNmzRrXi2YrIgJg8Hb08unElitphewny7WePYtfe 73ECkYfNId8Xq7nnWn1LDO6u9rEHE0QGn5M1R/DKBXQCZ4/O5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK9/ZZBAOQsssTDLmSsg0U4c06anMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTE1MmZjMjAtMzVhMi0z ODQxLTliNmItNTI0OWZiNjUyOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYa8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABS8smdAujLxkxD6COlp2UworZ4e+v6WeOOrH9seAj8CFUxqQ/Bc dX40nWrA2Q1CUBhQbYvAY5HKYZT1q0pBCeYFFg4R82U8fcMzm94dhg4Zh8+a0Uuf p9ccaeQOnCdkCxAk0/gThRdyITVyYqYdQMCLeMJJtL1XlacBCYmeTMvfepPLUQ9Q slhIoaqcMkCZ3DzOXeuU2B3VxwSzyUXq9VdS0GbYYXdpCZEYnfQCbQmrNQZoZrAR 9cbtR6W4fkTsJ7xdJFNehcg+vffHf7+0XCKhXxqcvo4KBI+FIefMy65WxYmc8dmC KPoQrBMXBJlR/F6BMq5pldTErVlj8hlcAX0= -----END CERTIFICATE-----Generated at Mon Jun 30 19:24:23 2025 by rpki-client