$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed660cd-30b5-3753-9f14-75d344c2e59e.roa File: aed660cd-30b5-3753-9f14-75d344c2e59e.roa (raw, json) Hash identifier: ssMcLkVtBi+w/8XNKSimhczDg8tBgZKExK9D4mgOaXo= Subject key identifier: 4D:33:F0:69:A3:20:DD:7A:EB:20:AD:AE:27:43:75:80:5C:FD:8C:51 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFBDE410A6BD12FC2CEF740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed660cd-30b5-3753-9f14-75d344c2e59e.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33668 IP address blocks: 2001:559:81ed::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fb:de:41:0a:6b:d1:2f:c2:ce:f7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=af346059-da4f-4572-ba0f-39634a16288d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:7c:fc:91:e6:71:88:b0:ff:c6:f8:ad:bb: aa:ef:02:6c:94:a8:a6:c1:6c:76:7d:fa:f2:ed:d6: 0e:70:eb:c3:55:ab:90:d8:e6:f6:75:c7:7e:c6:57: f8:b3:e6:75:47:b3:b0:bb:fd:ca:9b:c2:91:2f:12: 74:d1:57:fc:7e:11:14:28:96:d0:57:d7:9e:d9:c7: c6:5b:2f:7e:a5:57:db:2d:83:f4:27:8a:16:42:1c: 7e:4b:de:91:2d:57:21:cf:51:3d:4d:30:83:11:50: f1:79:47:53:d6:2e:a1:e6:2c:6e:4b:a6:41:34:d8: 7c:d1:35:d6:4d:3e:2e:8e:86:f5:19:39:68:9e:b7: 5a:5e:91:9b:8d:e9:b2:0c:d2:64:4a:8e:72:07:55: 43:ec:f4:8d:df:1c:d3:2b:18:05:53:23:97:fd:a1: 12:3e:e4:c0:df:0e:f1:15:dd:fc:af:58:29:27:5b: ec:6d:04:93:e9:6a:82:5e:b6:8b:47:e0:1c:f8:ec: b7:4f:13:56:33:90:ae:05:a7:29:bb:5c:86:e7:97: 07:55:d5:aa:f2:db:15:ca:b4:d9:0e:96:39:91:3b: 24:28:93:87:85:2f:46:8c:7d:84:05:75:98:aa:07: ba:02:83:18:d1:f4:4a:a4:26:ed:23:25:08:7e:75: 00:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:33:F0:69:A3:20:DD:7A:EB:20:AD:AE:27:43:75:80:5C:FD:8C:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aed660cd-30b5-3753-9f14-75d344c2e59e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:81ed::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:7f:92:5f:16:23:55:c9:80:90:f3:a6:6b:30:2c:3e:ce:31: fd:1f:c5:b7:68:dd:f4:0d:ca:e8:e5:13:65:b4:7a:8a:28:2c: 23:4b:3c:72:8b:00:d9:58:b1:d4:b8:12:00:c1:59:de:96:fc: cd:ac:6b:84:2c:01:41:70:86:63:63:11:ea:7b:63:37:99:5e: 86:4a:a1:e0:5b:e3:3d:2e:b1:da:ec:c1:03:77:05:f3:ef:82: 41:87:4e:1e:da:30:be:54:37:43:4c:a9:14:f5:3b:b6:20:fd: ee:9c:91:cb:b5:12:93:07:00:27:09:9d:33:51:d1:b2:28:e1: e9:ff:bc:a2:34:ef:bf:33:67:68:65:f9:6e:25:95:36:76:bb: 20:09:54:1a:a7:b2:e8:83:f1:5d:ca:48:28:b8:87:1e:6f:fb: de:fe:df:58:87:14:20:b3:42:1b:ac:ed:fe:83:96:cc:7d:66: 73:af:67:f4:be:cd:4c:fa:8c:35:65:43:62:cf:01:b6:76:db: 8d:00:e1:03:32:38:f3:cc:cb:26:79:7b:eb:17:17:01:7a:98: e7:f5:16:2a:21:45:4d:1d:79:25:3a:3c:a7:45:0a:12:99:5e: 2b:e0:87:46:39:2b:85:03:4c:b5:ec:5e:10:a6:18:4b:a9:8e: 3c:64:ee:10 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc+95BCmvRL8LO90AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk YWYzNDYwNTktZGE0Zi00NTcyLWJhMGYtMzk2MzRhMTYyODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymR8/JHmcYiw/8b4rbuq7wJslKimwWx2ffry 7dYOcOvDVauQ2Ob2dcd+xlf4s+Z1R7Owu/3Km8KRLxJ00Vf8fhEUKJbQV9ee2cfG Wy9+pVfbLYP0J4oWQhx+S96RLVchz1E9TTCDEVDxeUdT1i6h5ixuS6ZBNNh80TXW TT4ujob1GTlonrdaXpGbjemyDNJkSo5yB1VD7PSN3xzTKxgFUyOX/aESPuTA3w7x Fd38r1gpJ1vsbQST6WqCXraLR+Ac+Oy3TxNWM5CuBacpu1yG55cHVdWq8tsVyrTZ DpY5kTskKJOHhS9GjH2EBXWYqge6AoMY0fRKpCbtIyUIfnUAkwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE0z8GmjIN166yCtridDdYBc/YxRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWVkNjYwY2QtMzBiNS0z NzUzLTlmMTQtNzVkMzQ0YzJlNTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYHt MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM1/kl8WI1XJgJDzpmswLD7OMf0fxbdo3fQNyujlE2W0eoooLCNL PHKLANlYsdS4EgDBWd6W/M2sa4QsAUFwhmNjEep7YzeZXoZKoeBb4z0usdrswQN3 BfPvgkGHTh7aML5UN0NMqRT1O7Yg/e6ckcu1EpMHACcJnTNR0bIo4en/vKI0778z Z2hl+W4llTZ2uyAJVBqnsuiD8V3KSCi4hx5v+97+31iHFCCzQhus7f6Dlsx9ZnOv Z/S+zUz6jDVlQ2LPAbZ2240A4QMyOPPMyyZ5e+sXFwF6mOf1FiohRU0deSU6PKdF ChKZXivgh0Y5K4UDTLXsXhCmGEupjjxk7hA= -----END CERTIFICATE-----Generated at Tue Jul 1 10:26:18 2025 by rpki-client