$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8c77d1-dacd-3981-8351-2c4bb75b7351.roa File: df8c77d1-dacd-3981-8351-2c4bb75b7351.roa (raw, json) Hash identifier: G1RjGGgxRo6t39qMz0wUiQIAggXhC8uWe+OrjfD1kDU= Subject key identifier: DD:23:BE:D7:6F:3E:31:F6:C6:3A:EB:A0:C1:39:0B:2E:59:4A:35:9B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFDC462AC2FC57D15498500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8c77d1-dacd-3981-8351-2c4bb75b7351.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33657 IP address blocks: 2001:559:87d3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:c4:62:ac:2f:c5:7d:15:49:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=e9c4cddd-2bb0-49ee-8df4-f44d9857cfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d1:2b:e6:f0:6f:ee:fc:d1:0c:14:d7:a0:f2: e1:b4:0c:96:96:14:d1:a5:c9:a5:99:08:04:d0:3c: c9:a4:ee:95:1f:53:79:38:78:43:a4:d9:c1:15:6e: a6:ac:a2:cf:7a:d3:15:03:a8:53:8d:87:e5:5d:a8: cc:3a:ee:80:cb:e3:5c:ad:14:35:a7:d3:56:b2:9d: af:93:23:1a:29:98:bc:73:02:eb:76:81:a0:f4:9e: 10:90:c2:7c:da:15:b7:88:58:91:7d:c3:33:a1:d5: 66:32:5f:36:ea:17:51:8f:01:89:2a:27:7a:36:fa: 3f:18:f3:41:f5:69:94:10:96:35:d1:37:ce:e3:1c: 7c:02:67:be:8c:11:d0:8a:d2:89:ef:6b:e5:b0:c5: bb:69:30:3a:88:67:cc:c1:a1:53:02:1d:d3:04:6d: 33:65:32:8d:a0:26:b4:ff:bc:1d:b4:76:06:e3:20: a0:a7:e5:91:c3:3b:dc:ca:4e:9f:70:79:7a:94:bb: 7e:95:04:00:6d:fb:fb:81:57:75:30:91:2d:8a:d3: a3:e7:87:e9:91:1a:1c:a4:47:cb:7e:29:73:df:49: a0:0b:7a:0d:2e:90:5e:46:53:1c:a7:cb:88:e1:7e: 19:21:2d:10:35:1a:4b:52:ec:e2:e1:ad:d3:01:89: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:23:BE:D7:6F:3E:31:F6:C6:3A:EB:A0:C1:39:0B:2E:59:4A:35:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df8c77d1-dacd-3981-8351-2c4bb75b7351.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87d3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:35:7a:74:38:63:4c:25:7a:fd:27:25:df:84:4b:9e:35:ea: df:ab:34:79:fc:c3:61:a9:85:60:37:c1:78:90:5b:da:a3:79: 46:14:dd:ec:7d:e8:cd:b5:16:5d:9e:dd:f7:df:0a:c0:fa:52: bb:75:5d:54:c3:b0:6e:22:ad:8a:3c:65:bc:c2:d9:33:e3:2f: 8e:89:07:ff:16:c6:f2:46:cd:0b:45:8e:90:9f:15:2e:86:87: 85:c5:e1:0b:ed:cf:0a:fb:c6:e5:93:56:51:3a:13:5e:0e:2b: 76:54:3e:b1:f4:bc:53:80:4a:98:ea:12:71:d9:f8:e2:04:ef: 50:60:ff:81:7e:e6:20:e5:97:2f:cd:9b:b6:f2:05:d8:06:8e: 3e:91:d5:e5:e5:36:22:58:77:a2:d5:1c:68:99:4d:fa:2a:44: c3:be:45:59:e6:53:19:af:2e:3f:e2:89:65:8c:08:b0:e7:1c: e5:66:ae:ee:80:93:64:3a:20:8b:fd:0d:16:bc:2e:59:c7:7d: 65:7f:cf:de:4c:17:87:a1:26:ab:0c:61:2e:f2:1a:22:87:90: 62:b1:47:40:38:a9:b4:95:c9:fa:95:2d:4f:52:8d:04:74:a5: f6:77:d6:4b:d9:36:0d:67:2f:19:03:e1:4b:91:48:bf:99:05: 70:89:57:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/cRirC/FfRVJhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZTljNGNkZGQtMmJiMC00OWVlLThkZjQtZjQ0ZDk4NTdjZmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudEr5vBv7vzRDBTXoPLhtAyWlhTRpcmlmQgE 0DzJpO6VH1N5OHhDpNnBFW6mrKLPetMVA6hTjYflXajMOu6Ay+NcrRQ1p9NWsp2v kyMaKZi8cwLrdoGg9J4QkMJ82hW3iFiRfcMzodVmMl826hdRjwGJKid6Nvo/GPNB 9WmUEJY10TfO4xx8Ame+jBHQitKJ72vlsMW7aTA6iGfMwaFTAh3TBG0zZTKNoCa0 /7wdtHYG4yCgp+WRwzvcyk6fcHl6lLt+lQQAbfv7gVd1MJEtitOj54fpkRocpEfL filz30mgC3oNLpBeRlMcp8uI4X4ZIS0QNRpLUuzi4a3TAYmI5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN0jvtdvPjH2xjrroME5Cy5ZSjWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY4Yzc3ZDEtZGFjZC0z OTgxLTgzNTEtMmM0YmI3NWI3MzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYfT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJ41enQ4Y0wlev0nJd+ES5416t+rNHn8w2GphWA3wXiQW9qjeUYU 3ex96M21Fl2e3fffCsD6Urt1XVTDsG4irYo8ZbzC2TPjL46JB/8WxvJGzQtFjpCf FS6Gh4XF4Qvtzwr7xuWTVlE6E14OK3ZUPrH0vFOASpjqEnHZ+OIE71Bg/4F+5iDl ly/Nm7byBdgGjj6R1eXlNiJYd6LVHGiZTfoqRMO+RVnmUxmvLj/iiWWMCLDnHOVm ru6Ak2Q6IIv9DRa8LlnHfWV/z95MF4ehJqsMYS7yGiKHkGKxR0A4qbSVyfqVLU9S jQR0pfZ31kvZNg1nLxkD4UuRSL+ZBXCJVx0= -----END CERTIFICATE-----Generated at Mon Jun 30 17:54:28 2025 by rpki-client