$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28bc2f35-54cf-31ef-8432-48d52322a5df.roa File: 28bc2f35-54cf-31ef-8432-48d52322a5df.roa (raw, json) Hash identifier: OLPRcWW8S2mw2XHyK1pCcHTW6JdvszzhnDjrLvncvzk= Subject key identifier: 58:76:31:DE:B9:62:D0:85:67:D9:D9:F4:3E:9D:55:B5:C8:52:90:49 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB91BBA308D6C6BBF88A7B800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28bc2f35-54cf-31ef-8432-48d52322a5df.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36040 IP address blocks: 2001:559:0:74::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:ba:30:8d:6c:6b:bf:88:a7:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=df21d249-da01-43e2-8014-6b84154f19de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e8:6f:2d:69:0f:03:39:f5:29:91:f9:9f:65: 49:aa:50:e4:d3:cf:43:26:03:e3:85:9e:90:98:bf: 6f:8a:3f:12:bf:8e:15:e2:8f:d2:4b:e2:69:ec:18: e0:40:85:d5:15:21:51:3b:e9:14:6b:59:4e:8e:dd: 65:be:59:65:52:d5:f4:93:b5:b3:ae:98:3d:1c:38: cc:09:12:6c:40:fa:d6:bc:ac:4c:fb:f6:73:12:72: 6e:e0:bb:bf:47:2f:60:c2:1a:8c:68:d4:f5:d5:30: 0e:e6:8f:1b:ab:b6:1a:75:51:65:3b:a4:ff:80:df: 85:b5:71:63:ca:35:00:37:83:3b:fc:91:c1:58:ea: aa:59:86:9c:ab:04:36:ec:97:07:2b:9c:f0:9b:4c: 7a:d8:2a:89:7b:c3:56:e3:ae:92:70:5b:d2:67:3e: a5:30:ac:1d:37:3e:10:61:cf:db:9f:cf:1f:1d:6b: 49:63:f4:bd:6d:be:f1:cd:f2:9d:58:a4:55:db:cb: 2c:7a:57:c0:43:f3:9d:32:55:ba:62:b0:4f:8d:ca: f9:9d:08:74:04:cb:06:41:dd:6b:a9:3d:8a:17:c6: c1:be:b4:b7:02:ad:43:ba:20:c1:18:98:58:08:12: 83:0e:ee:d0:e2:86:f0:67:33:d5:80:fd:4d:3c:01: 20:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:76:31:DE:B9:62:D0:85:67:D9:D9:F4:3E:9D:55:B5:C8:52:90:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28bc2f35-54cf-31ef-8432-48d52322a5df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:0:74::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:5b:69:b3:b2:b6:ca:9b:ac:4a:b7:4b:da:a3:d6:23:64:cb: 81:d2:eb:fd:d4:68:52:25:20:f8:5b:4c:b6:55:dd:92:f1:34: 77:bc:b8:a5:ae:e6:ab:74:de:41:a6:3d:28:13:e4:3e:f3:d7: 6a:31:d1:08:e9:e0:5f:53:c2:ce:91:71:a4:4a:1e:c8:d2:69: 61:ca:b5:67:5b:ad:5d:57:4b:e4:6e:e8:39:28:c6:88:1a:11: 3e:80:70:aa:1e:98:b2:3e:83:6d:5d:1a:70:f2:69:e5:e4:2c: bf:f0:fd:79:cf:99:38:e5:a2:83:45:61:30:b3:25:aa:81:8f: 78:a2:0c:bf:cc:3e:f8:6f:71:61:e2:28:77:54:34:8a:d9:68: 66:82:08:d1:ed:23:92:44:1c:cb:2f:08:c7:30:5c:f4:67:81: e5:2e:b5:f4:70:ba:42:57:e5:71:9e:83:e3:dc:bd:c6:df:d2: 0a:11:7e:3a:c1:91:fa:12:e0:60:57:e1:30:cd:c5:11:18:ac: 4c:da:69:70:58:b5:f5:74:82:8e:57:dd:0f:89:4c:0c:73:b2: 0e:23:b9:b3:03:d9:99:89:ef:80:9f:45:2a:2a:6c:58:96:5c: ab:f6:cc:44:04:ba:c1:52:db:90:3e:39:e6:49:eb:19:2f:f4: 33:9e:37:28 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEq5G7owjWxrv4inuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZGYyMWQyNDktZGEwMS00M2UyLTgwMTQtNmI4NDE1NGYxOWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+hvLWkPAzn1KZH5n2VJqlDk089DJgPjhZ6Q mL9vij8Sv44V4o/SS+Jp7BjgQIXVFSFRO+kUa1lOjt1lvlllUtX0k7Wzrpg9HDjM CRJsQPrWvKxM+/ZzEnJu4Lu/Ry9gwhqMaNT11TAO5o8bq7YadVFlO6T/gN+FtXFj yjUAN4M7/JHBWOqqWYacqwQ27JcHK5zwm0x62CqJe8NW466ScFvSZz6lMKwdNz4Q Yc/bn88fHWtJY/S9bb7xzfKdWKRV28sselfAQ/OdMlW6YrBPjcr5nQh0BMsGQd1r qT2KF8bBvrS3Aq1DuiDBGJhYCBKDDu7Q4obwZzPVgP1NPAEg6wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFFh2Md65YtCFZ9nZ9D6dVbXIUpBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhiYzJmMzUtNTRjZi0z MWVmLTg0MzItNDhkNTIzMjJhNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA AHQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAultps7K2ypusSrdL2qPWI2TLgdLr/dRoUiUg+FtMtlXdkvE0 d7y4pa7mq3TeQaY9KBPkPvPXajHRCOngX1PCzpFxpEoeyNJpYcq1Z1utXVdL5G7o OSjGiBoRPoBwqh6Ysj6DbV0acPJp5eQsv/D9ec+ZOOWig0VhMLMlqoGPeKIMv8w+ +G9xYeIod1Q0itloZoII0e0jkkQcyy8IxzBc9GeB5S619HC6QlflcZ6D49y9xt/S ChF+OsGR+hLgYFfhMM3FERisTNppcFi19XSCjlfdD4lMDHOyDiO5swPZmYnvgJ9F KipsWJZcq/bMRAS6wVLbkD455knrGS/0M543KA== -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:17 2025 by rpki-client