$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aea9f575-3ff8-33e0-806a-426481c90531.roa File: aea9f575-3ff8-33e0-806a-426481c90531.roa (raw, json) Hash identifier: Qiv9PGAY0SV3MUN8cRNi9nXWq60hE57GH2QtNJIwdZo= Subject key identifier: 12:E3:E9:4B:26:09:26:D5:A5:BA:85:D7:58:EC:C3:E1:1F:6E:4C:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFC537880E84C940D1827C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aea9f575-3ff8-33e0-806a-426481c90531.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33287 IP address blocks: 2001:559:c42c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:53:78:80:e8:4c:94:0d:18:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=600f3b6e-a913-445b-82b4-95b5c4d94a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e5:8b:cf:cb:c0:e4:f2:84:db:61:2a:e2:26: 72:21:1d:6e:e8:e9:3f:ac:1a:79:54:06:de:7f:53: cf:bc:cc:16:d8:74:ea:50:60:a9:d8:3a:5a:24:87: 7f:33:6a:1f:18:e1:b7:7e:c1:fa:40:86:76:c0:35: a2:25:f2:80:7c:04:2e:09:40:da:2e:f0:fe:bd:53: c1:aa:24:16:15:ca:0d:1e:f7:5f:2b:ca:ec:23:cd: b9:94:85:ea:04:ed:7b:f3:a6:49:f6:c6:19:3b:37: 52:24:a0:60:48:36:a2:7d:44:ad:b6:28:9a:dc:b7: 21:b6:aa:bc:73:b5:ac:b2:63:49:be:3d:d8:10:30: d5:46:c6:ab:6b:4f:0c:fd:a4:f7:d2:3d:25:ca:ac: 11:dd:97:84:55:5e:bd:c9:e9:33:72:c0:62:f8:33: c6:25:5c:dc:c1:50:b7:f4:f6:d9:bc:e9:2b:94:d6: 36:bb:07:64:a0:99:ba:23:b5:ec:6c:19:bc:fd:66: 60:38:6a:d7:4d:c1:41:97:2d:49:43:d3:8e:ce:a9: c3:65:f4:3a:c0:eb:19:e0:fc:0a:f9:7c:72:e9:68: 22:4d:8f:c2:35:7a:b9:58:d1:7e:94:5a:07:af:fb: 39:23:26:a3:58:86:ab:2c:72:8e:7d:74:b4:1a:62: 95:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E3:E9:4B:26:09:26:D5:A5:BA:85:D7:58:EC:C3:E1:1F:6E:4C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aea9f575-3ff8-33e0-806a-426481c90531.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c42c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:72:57:d5:60:84:0a:0a:5e:58:88:d6:7d:b5:35:48:0f:91: 59:85:eb:bf:b8:ec:cb:ff:20:c7:0c:da:18:ee:9b:2b:0e:3c: aa:9d:38:aa:a0:6c:5a:a6:fd:04:45:90:54:62:39:92:24:1a: b1:93:ba:be:66:36:a9:30:7f:26:2a:60:54:61:16:5e:0d:8e: fb:2c:26:b3:b0:b7:cf:54:f6:4a:86:4f:ad:02:06:eb:c1:fd: a3:08:65:98:0d:29:7a:8c:dd:58:12:d0:42:00:c4:0e:9a:1e: 03:77:4a:57:1a:d1:0b:f2:9d:6e:7c:05:52:e1:7f:d7:24:10: 73:c7:fe:3a:66:9e:67:a0:9e:1a:c1:dd:d1:5d:64:76:a4:29: 98:44:f5:6f:29:8a:f1:ce:ed:be:78:ea:31:5e:54:1e:e4:17: 72:16:f0:c2:fd:94:4a:88:3d:4f:8b:ed:b4:2b:6f:6d:a3:c4: eb:ea:58:63:10:ce:f0:4f:ac:ad:22:81:93:57:61:f5:24:bf: 96:24:b2:66:af:a1:ea:73:c6:dc:e0:22:40:3c:9d:6a:c4:a3: 8c:d1:c7:f9:1d:b8:be:85:ce:3d:a9:59:46:fa:47:06:42:15: 78:fa:99:5e:51:89:96:9b:74:6a:d1:8f:4a:fd:64:a1:f7:f9: 1a:79:f5:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/FN4gOhMlA0YJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NjAwZjNiNmUtYTkxMy00NDViLTgyYjQtOTViNWM0ZDk0YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+WLz8vA5PKE22Eq4iZyIR1u6Ok/rBp5VAbe f1PPvMwW2HTqUGCp2DpaJId/M2ofGOG3fsH6QIZ2wDWiJfKAfAQuCUDaLvD+vVPB qiQWFcoNHvdfK8rsI825lIXqBO1786ZJ9sYZOzdSJKBgSDaifUSttiia3Lchtqq8 c7WssmNJvj3YEDDVRsara08M/aT30j0lyqwR3ZeEVV69yekzcsBi+DPGJVzcwVC3 9PbZvOkrlNY2uwdkoJm6I7XsbBm8/WZgOGrXTcFBly1JQ9OOzqnDZfQ6wOsZ4PwK +Xxy6WgiTY/CNXq5WNF+lFoHr/s5IyajWIarLHKOfXS0GmKV4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBLj6UsmCSbVpbqF11jsw+EfbkwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWVhOWY1NzUtM2ZmOC0z M2UwLTgwNmEtNDI2NDgxYzkwNTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcQs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKNyV9VghAoKXliI1n21NUgPkVmF67+47Mv/IMcM2hjumysOPKqd OKqgbFqm/QRFkFRiOZIkGrGTur5mNqkwfyYqYFRhFl4NjvssJrOwt89U9kqGT60C BuvB/aMIZZgNKXqM3VgS0EIAxA6aHgN3Slca0QvynW58BVLhf9ckEHPH/jpmnmeg nhrB3dFdZHakKZhE9W8pivHO7b546jFeVB7kF3IW8ML9lEqIPU+L7bQrb22jxOvq WGMQzvBPrK0igZNXYfUkv5YksmavoepzxtzgIkA8nWrEo4zRx/kduL6Fzj2pWUb6 RwZCFXj6mV5RiZabdGrRj0r9ZKH3+Rp59Qw= -----END CERTIFICATE-----Generated at Wed Jul 2 15:02:00 2025 by rpki-client