$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a481812b-efbe-3096-b314-d26fd41e8c30.roa File: a481812b-efbe-3096-b314-d26fd41e8c30.roa (raw, json) Hash identifier: lsPEVWSlP4Fe+mZD0DODUTwN3Dh3UiSich3J58aLrYE= Subject key identifier: B1:BD:A5:4C:20:80:8F:0E:0E:B2:C6:B7:5D:1A:19:6B:50:AF:72:02 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBE3DEB8A05BD09720CE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a481812b-efbe-3096-b314-d26fd41e8c30.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 7015 IP address blocks: 2001:559:8f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:e3:de:b8:a0:5b:d0:97:20:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=399edecb-48ed-45b1-9e2a-41134fc3887a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:72:f0:df:f5:80:b5:64:99:30:54:3d:9c: a0:02:59:03:93:8e:31:b1:24:8b:2f:8d:e0:2f:0e: 53:13:04:ed:be:97:6e:bb:dd:77:50:60:6b:ad:4e: c4:22:96:3b:66:91:ba:b7:af:b8:f2:80:01:7c:3e: ac:b6:68:2d:d3:f7:59:56:7a:d4:ce:b0:b7:a5:ac: d8:15:1a:9c:36:68:de:ba:52:d5:3f:5e:7e:5b:69: d5:08:58:2c:d4:cf:04:dc:10:07:58:dd:8b:0a:bd: 2a:1d:b9:2a:b7:d6:6f:3d:93:31:6a:97:80:52:70: f6:e8:dd:83:f8:8a:7a:7f:f7:43:41:94:40:f0:4e: e9:ff:5d:8a:bd:e6:d9:23:71:31:d3:8b:14:ae:c9: 10:c2:4f:1a:61:05:44:20:f4:87:ac:1d:c8:2d:3a: 3e:15:3e:87:b7:28:80:0b:cd:6b:76:7e:6f:b8:2d: 1f:7f:c3:22:19:11:d7:0a:f6:50:6c:9f:f2:df:d5: 53:c2:57:e1:f0:87:9c:c4:0f:74:2f:f8:76:be:80: 4a:52:ab:c2:0b:29:f9:8d:41:38:7c:95:4b:e4:93: c9:86:9d:5a:45:c7:18:59:76:1f:78:6b:7d:12:3f: 03:a6:f9:7d:e0:fc:c2:08:4f:73:e4:30:46:d6:d3: 34:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BD:A5:4C:20:80:8F:0E:0E:B2:C6:B7:5D:1A:19:6B:50:AF:72:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a481812b-efbe-3096-b314-d26fd41e8c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8f::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:95:ac:8a:a6:81:1f:77:39:d4:a5:01:5f:0b:4e:1d:79:0d: 9f:fe:e3:17:4b:c7:ff:5e:dd:2d:07:c3:8a:c0:12:26:5f:9b: 3f:35:e5:13:34:55:21:54:c5:72:cf:3d:18:38:15:61:41:67: 59:bf:ff:dd:98:e2:fa:de:75:17:38:8d:42:73:ab:0f:b6:da: 5e:e4:5c:58:d0:c3:60:e3:a6:78:22:1c:5b:c3:41:1e:b2:ba: 4c:68:12:fd:8d:96:55:f2:e0:51:ad:d8:30:28:9c:53:82:9f: e5:70:15:de:9f:a8:f6:9c:a8:7f:00:ce:8a:86:22:d3:82:4f: 61:3c:44:9a:67:6c:00:fb:ab:0d:52:a5:55:6f:67:2c:ec:c8: a2:dd:ff:df:ce:46:16:5f:57:80:e3:1c:9f:79:e0:29:ef:20: 53:57:7a:27:90:ef:0f:74:c9:43:8d:06:07:b3:1f:08:93:63: 5d:3e:73:75:d3:32:e7:86:19:33:05:2e:ed:10:d9:78:52:b2: 7a:1c:9d:36:dd:ca:14:d6:c1:6e:81:30:0f:bf:fd:b6:e4:5d: b7:9e:8e:74:e9:99:64:88:19:8e:f6:72:2f:94:09:f0:37:88: 46:ed:15:e3:48:e2:60:2a:04:b8:6b:12:cb:1a:16:1e:b1:38: 9b:5e:e8:76 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc++PeuKBb0JcgzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk Mzk5ZWRlY2ItNDhlZC00NWIxLTllMmEtNDExMzRmYzM4ODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrdy8N/1gLVkmTBUPZygAlkDk44xsSSLL43g Lw5TEwTtvpduu913UGBrrU7EIpY7ZpG6t6+48oABfD6stmgt0/dZVnrUzrC3pazY FRqcNmjeulLVP15+W2nVCFgs1M8E3BAHWN2LCr0qHbkqt9ZvPZMxapeAUnD26N2D +Ip6f/dDQZRA8E7p/12KvebZI3Ex04sUrskQwk8aYQVEIPSHrB3ILTo+FT6HtyiA C81rdn5vuC0ff8MiGRHXCvZQbJ/y39VTwlfh8IecxA90L/h2voBKUqvCCyn5jUE4 fJVL5JPJhp1aRccYWXYfeGt9Ej8Dpvl94PzCCE9z5DBG1tM0mQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLG9pUwggI8ODrLGt10aGWtQr3ICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTQ4MTgxMmItZWZiZS0z MDk2LWIzMTQtZDI2ZmQ0MWU4YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQCP MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB2VrIqmgR93OdSlAV8LTh15DZ/+4xdLx/9e3S0Hw4rAEiZfmz81 5RM0VSFUxXLPPRg4FWFBZ1m//92Y4vredRc4jUJzqw+22l7kXFjQw2DjpngiHFvD QR6yukxoEv2NllXy4FGt2DAonFOCn+VwFd6fqPacqH8AzoqGItOCT2E8RJpnbAD7 qw1SpVVvZyzsyKLd/9/ORhZfV4DjHJ954CnvIFNXeieQ7w90yUONBgezHwiTY10+ c3XTMueGGTMFLu0Q2XhSsnocnTbdyhTWwW6BMA+//bbkXbeejnTpmWSIGY72ci+U CfA3iEbtFeNI4mAqBLhrEssaFh6xOJte6HY= -----END CERTIFICATE-----Generated at Tue Jul 1 16:54:52 2025 by rpki-client