$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf995de3-52af-308f-bbe2-a9715ee6890d.roa File: bf995de3-52af-308f-bbe2-a9715ee6890d.roa (raw, json) Hash identifier: Tv5IzAP2uw+jhmg9KnVivXBFQ6uBDubQm+ZiEkXniIw= Subject key identifier: 0E:B7:E3:84:97:16:A2:5C:45:06:0D:EA:3A:02:A5:6F:77:19:D4:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFCFBA4935A39C6D9EB8E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf995de3-52af-308f-bbe2-a9715ee6890d.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 22258 IP address blocks: 2001:559:545::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fc:fb:a4:93:5a:39:c6:d9:eb:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=4ac7056d-e762-4149-a179-36a4e0da8d62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:b3:6f:ba:6c:43:50:35:9d:70:6b:27:fa: 46:6b:c2:d6:ec:bb:a4:8f:80:a0:19:52:f2:ce:1a: 9c:ea:8d:cd:95:b9:26:6b:13:36:2f:b4:84:b5:c6: 09:ef:92:46:66:01:84:dd:b4:25:12:74:a0:73:bc: 37:f9:d1:a6:1f:fd:05:9f:e0:f4:e4:ea:06:4a:d0: 19:4c:0d:1e:1f:c1:3b:1d:a3:f6:1b:a6:b3:23:31: 9d:9a:f3:05:82:57:eb:62:03:44:94:12:9a:6e:c6: f2:e6:5b:f2:29:5c:03:d2:28:c7:a8:47:dd:57:5c: 20:81:3b:8f:b5:bb:05:c3:76:55:01:83:58:3a:8a: 3a:35:cf:2d:f7:c2:c1:82:e3:71:f9:bb:da:5a:04: d3:34:34:44:67:16:cd:76:3d:51:69:32:18:ef:96: 02:8e:db:53:55:2b:cb:0e:7f:b9:08:01:c5:49:21: 90:93:fc:db:65:04:1c:3b:26:d2:3b:8b:85:30:4f: e6:b4:1d:c2:e9:98:16:57:e6:d0:63:23:80:22:f2: 4f:db:3d:6a:72:d6:f1:b4:e7:64:1d:c4:4b:83:5e: 8f:8c:f7:2d:18:68:58:e3:94:1f:b1:1e:4e:13:6e: 0a:e7:05:09:f8:b3:91:f8:1d:98:a5:b7:4e:f2:8f: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B7:E3:84:97:16:A2:5C:45:06:0D:EA:3A:02:A5:6F:77:19:D4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bf995de3-52af-308f-bbe2-a9715ee6890d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:545::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:f1:42:08:b4:75:f1:63:21:cb:8c:d9:e4:c2:93:c3:29:e0: d8:c8:7f:4f:26:e2:07:94:1d:ec:4e:1d:7d:19:c1:42:12:6e: ff:97:6f:54:0c:c3:6f:79:da:d3:8e:a4:7f:bd:05:83:45:59: 88:86:c4:dd:f4:33:b9:11:8a:22:a1:3a:cd:b2:63:72:34:7c: e5:52:6c:f9:34:1a:f1:85:e7:f3:e0:93:08:8d:a4:2c:a2:f8: f8:a6:a5:cc:06:e2:38:5d:0b:ca:50:94:f8:0d:6e:6b:e0:aa: 23:3e:70:38:1d:11:75:fc:05:e2:56:fc:87:72:0e:f7:c6:5c: 0b:7c:40:e8:24:69:44:64:23:53:42:7e:1b:21:e8:97:8f:19: 96:c0:46:fa:16:90:8b:83:c4:b0:f8:ca:0e:e9:e8:52:2e:6f: 3e:2a:96:82:24:2d:49:0f:7e:a9:4e:36:5c:42:7a:e9:33:30: 8a:3e:bb:a1:0f:95:5b:0e:08:7f:35:af:5a:23:b5:c3:d9:8f: 89:57:f7:17:9f:15:a5:1f:98:39:42:71:08:df:43:87:91:38: 26:b5:8b:43:07:b9:cc:0a:d2:2d:21:e4:78:f0:f3:d4:e4:0c: 41:8c:b3:1d:72:1e:23:bc:95:c4:64:44:4f:15:36:6a:b9:b9: 05:5c:e7:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/Pukk1o5xtnrjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk NGFjNzA1NmQtZTc2Mi00MTQ5LWExNzktMzZhNGUwZGE4ZDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGOzb7psQ1A1nXBrJ/pGa8LW7Lukj4CgGVLy zhqc6o3NlbkmaxM2L7SEtcYJ75JGZgGE3bQlEnSgc7w3+dGmH/0Fn+D05OoGStAZ TA0eH8E7HaP2G6azIzGdmvMFglfrYgNElBKabsby5lvyKVwD0ijHqEfdV1wggTuP tbsFw3ZVAYNYOoo6Nc8t98LBguNx+bvaWgTTNDREZxbNdj1RaTIY75YCjttTVSvL Dn+5CAHFSSGQk/zbZQQcOybSO4uFME/mtB3C6ZgWV+bQYyOAIvJP2z1qctbxtOdk HcRLg16PjPctGGhY45QfsR5OE24K5wUJ+LOR+B2YpbdO8o8IvwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA6344SXFqJcRQYN6joCpW93GdRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmY5OTVkZTMtNTJhZi0z MDhmLWJiZTItYTk3MTVlZTY4OTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQVF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALHxQgi0dfFjIcuM2eTCk8Mp4NjIf08m4geUHexOHX0ZwUISbv+X b1QMw2952tOOpH+9BYNFWYiGxN30M7kRiiKhOs2yY3I0fOVSbPk0GvGF5/PgkwiN pCyi+PimpcwG4jhdC8pQlPgNbmvgqiM+cDgdEXX8BeJW/IdyDvfGXAt8QOgkaURk I1NCfhsh6JePGZbARvoWkIuDxLD4yg7p6FIubz4qloIkLUkPfqlONlxCeukzMIo+ u6EPlVsOCH81r1ojtcPZj4lX9xefFaUfmDlCcQjfQ4eROCa1i0MHucwK0i0h5Hjw 89TkDEGMsx1yHiO8lcRkRE8VNmq5uQVc5w4= -----END CERTIFICATE-----Generated at Mon Jun 30 17:33:01 2025 by rpki-client