$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f24e24c6-e7ce-3739-8062-e1f0057d728d.roa File: f24e24c6-e7ce-3739-8062-e1f0057d728d.roa (raw, json) Hash identifier: 2FOI6ppJPdujcQ0CLgAY8s6BFmRGYTOgkOmA4Il0sys= Subject key identifier: D4:7A:A4:12:C0:C2:0C:D9:DE:0E:F2:16:05:1D:4B:20:78:61:78:22 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A5CFD17736D3E70CA5789AD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f24e24c6-e7ce-3739-8062-e1f0057d728d.roa Signing time: Mon 30 Jun 2025 13:01:03 +0000 ROA not before: Mon 30 Jun 2025 13:01:03 +0000 ROA not after: Sun 28 Sep 2025 13:01:03 +0000 asID: 33651 IP address blocks: 2001:559:8278::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5c:fd:17:73:6d:3e:70:ca:57:89:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 30 13:01:03 2025 GMT Not After : Sep 28 13:01:03 2025 GMT Subject: CN=db699f48-5f4f-4dab-9c73-f69b5f86d2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:0f:48:be:b7:9a:2e:5d:b7:e2:51:85:81: 68:30:3f:a7:1b:42:28:3f:ff:b1:c9:2e:c2:ba:24: d5:a6:08:b3:ff:a0:f2:c4:3a:0c:58:a4:70:13:bb: 48:08:65:03:12:43:53:b0:89:ec:72:fc:b3:ab:b9: 84:e7:3e:01:8d:69:f4:9c:76:40:40:4a:b5:3b:a3: 18:78:42:dc:8f:22:62:d8:60:19:cf:b3:6a:32:78: 55:b6:f6:cf:aa:01:7a:e6:15:d0:a7:91:c7:22:03: 64:59:fd:d6:69:39:8e:1a:08:96:ff:33:4b:21:13: 65:7b:60:a8:e0:ca:59:02:34:6c:b8:17:42:4f:e6: 45:c0:ff:0b:42:7b:bc:d7:96:78:dc:b5:53:19:49: 17:06:98:49:fe:7e:4f:da:fe:e0:ca:76:30:b2:2d: f8:b3:6a:9e:c6:c7:81:02:20:44:36:9d:6b:fa:73: e2:bc:1a:1b:78:79:ef:99:95:d1:85:13:0b:dc:4a: 6b:f8:66:df:0e:f1:62:1d:11:1b:fa:ac:08:b0:9e: 57:95:a5:ef:1f:7d:b9:27:23:f0:90:09:d2:21:c4: 42:14:84:a5:e9:b3:44:a9:0e:37:c0:c2:cd:9e:a6: 94:22:09:59:42:d1:7c:99:44:0c:2a:85:71:c7:a0: 8e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7A:A4:12:C0:C2:0C:D9:DE:0E:F2:16:05:1D:4B:20:78:61:78:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f24e24c6-e7ce-3739-8062-e1f0057d728d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8278::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:26:65:8c:4d:a0:01:af:14:5a:c4:ce:a2:ec:72:2a:a2:92: 86:6f:67:e3:40:8b:ae:9f:33:0c:40:9a:86:6b:de:a4:41:4e: 17:78:17:1f:37:32:51:f3:a2:14:ce:54:28:fb:2b:55:56:d3: 38:14:23:43:68:64:1d:b1:73:01:6f:95:57:46:92:d9:38:09: 67:a2:b9:25:b7:0b:23:56:05:62:fd:c9:c8:dd:8a:92:da:e8: ea:fc:c3:70:85:94:20:3c:1f:1e:2d:9f:8f:2d:15:75:13:73: 0d:be:d9:19:f8:fc:33:80:c6:8c:c5:95:91:f9:5a:42:85:c6: 21:66:8a:9d:3f:a6:52:f9:3e:9f:4c:57:69:a6:89:2a:21:17: b4:cf:4f:b6:65:7f:7e:bb:60:13:21:08:e4:89:02:a5:b5:da: a9:3a:c3:9a:c9:d2:47:58:40:9b:ce:c5:3c:6f:0c:95:03:06: 8c:c1:99:79:dc:cb:c0:a7:ad:a1:db:25:6d:2e:85:bb:d0:26: 64:54:3e:49:2d:a6:08:a7:f5:60:31:49:c1:96:65:0d:a4:7b: f8:72:b3:e9:30:5a:a0:b0:34:cb:d5:b8:ac:7d:cc:eb:79:94: 4d:71:70:fc:19:57:50:22:54:31:64:78:84:f7:b7:86:3f:a6: 06:48:49:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEpc/RdzbT5wyleJrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk ZGI2OTlmNDgtNWY0Zi00ZGFiLTljNzMtZjY5YjVmODZkMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArewPSL63mi5dt+JRhYFoMD+nG0IoP/+xyS7C uiTVpgiz/6DyxDoMWKRwE7tICGUDEkNTsInscvyzq7mE5z4BjWn0nHZAQEq1O6MY eELcjyJi2GAZz7NqMnhVtvbPqgF65hXQp5HHIgNkWf3WaTmOGgiW/zNLIRNle2Co 4MpZAjRsuBdCT+ZFwP8LQnu815Z43LVTGUkXBphJ/n5P2v7gynYwsi34s2qexseB AiBENp1r+nPivBobeHnvmZXRhRML3Epr+GbfDvFiHREb+qwIsJ5XlaXvH325JyPw kAnSIcRCFISl6bNEqQ43wMLNnqaUIglZQtF8mUQMKoVxx6COHwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNR6pBLAwgzZ3g7yFgUdSyB4YXgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjI0ZTI0YzYtZTdjZS0z NzM5LTgwNjItZTFmMDA1N2Q3MjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJ4 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJMmZYxNoAGvFFrEzqLsciqikoZvZ+NAi66fMwxAmoZr3qRBThd4 Fx83MlHzohTOVCj7K1VW0zgUI0NoZB2xcwFvlVdGktk4CWeiuSW3CyNWBWL9ycjd ipLa6Or8w3CFlCA8Hx4tn48tFXUTcw2+2Rn4/DOAxozFlZH5WkKFxiFmip0/plL5 Pp9MV2mmiSohF7TPT7Zlf367YBMhCOSJAqW12qk6w5rJ0kdYQJvOxTxvDJUDBozB mXncy8CnraHbJW0uhbvQJmRUPkktpgin9WAxScGWZQ2ke/hys+kwWqCwNMvVuKx9 zOt5lE1xcPwZV1AiVDFkeIT3t4Y/pgZISRc= -----END CERTIFICATE-----Generated at Tue Jul 1 00:33:53 2025 by rpki-client