$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2da05310-4f18-3aae-8092-cd70f662f446.roa File: 2da05310-4f18-3aae-8092-cd70f662f446.roa (raw, json) Hash identifier: IKK2hh5+vco0VQacKx14XXIFkFnU3RRypQjLlPI3nTk= Subject key identifier: 14:1B:CC:16:E2:C1:87:C8:5F:8D:6B:2B:2B:D7:66:45:D3:BD:18:27 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB91BB9DD0BE17CC270DF4980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2da05310-4f18-3aae-8092-cd70f662f446.roa Signing time: Sat 02 Aug 2025 13:00:41 +0000 ROA not before: Sat 02 Aug 2025 13:00:41 +0000 ROA not after: Fri 31 Oct 2025 13:00:41 +0000 asID: 36040 IP address blocks: 2001:559:0:6a::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b9:1b:b9:dd:0b:e1:7c:c2:70:df:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 2 13:00:41 2025 GMT Not After : Oct 31 13:00:41 2025 GMT Subject: CN=2a9ae93b-27c8-4cf3-8c7f-abe1eae9de00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7d:70:01:67:76:4d:48:dc:28:3e:c1:c1:39: 8c:61:d6:65:91:76:1e:8f:bb:77:7d:c0:99:1c:eb: 0c:a8:c0:eb:a7:7b:f8:91:4c:b2:a6:47:45:9a:f8: c2:b0:bd:4f:f5:9d:e0:a4:cc:b7:dc:04:61:90:17: 3f:7b:ad:2c:5f:f6:0d:f8:e0:73:78:31:ed:4e:67: cf:06:d8:31:9a:9a:30:5f:77:4a:c3:18:3c:c8:e2: f5:05:d4:19:53:c1:04:4d:e0:95:be:73:79:9a:5b: f3:ee:cb:b9:75:97:f0:95:42:09:db:9a:8b:8a:14: b0:1d:47:3b:22:15:fd:c1:35:15:7f:90:73:4a:f5: 5b:2a:1c:58:42:a2:13:be:09:aa:9c:5d:b4:cf:98: 26:a5:1b:5f:73:40:f1:3b:ef:5c:3e:53:e8:35:10: 1f:a7:d0:c1:d9:3f:b4:09:a0:4f:ef:dc:6f:2c:da: 94:8d:7e:b9:5f:8e:1d:aa:32:34:04:01:bd:70:34: 0d:c5:7c:9b:82:d5:39:d3:11:92:f2:ab:7d:1e:b2: 67:db:7a:2d:d9:7b:b9:b3:e9:65:df:9d:30:6c:9b: 65:a6:6f:e1:84:17:cd:3f:89:53:e7:db:86:88:dd: 48:1e:4b:6f:cf:a8:b5:79:eb:6e:a8:d1:03:d3:ea: 0b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1B:CC:16:E2:C1:87:C8:5F:8D:6B:2B:2B:D7:66:45:D3:BD:18:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2da05310-4f18-3aae-8092-cd70f662f446.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:0:6a::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6e:e6:6a:30:15:91:f4:2c:c3:df:4c:00:e1:58:eb:c6:19: a7:d4:8a:dd:b3:68:bd:5e:e5:1c:48:b0:af:f7:00:18:c3:51: 05:4a:1e:40:f5:b4:9e:c5:6f:bd:53:53:3d:85:45:bf:52:fe: 6d:b3:38:ff:00:ea:4a:02:41:20:16:2f:a6:10:17:68:0d:86: fc:a1:b3:3a:d9:a2:4d:70:6e:ef:bf:6b:1a:bb:d2:7b:9c:9a: 96:35:6e:64:29:90:b1:3f:b5:5d:ac:47:a7:24:35:4a:85:f5: 12:36:cb:42:5e:f7:3f:3f:53:20:1e:66:cc:4c:96:d5:0e:b4: dd:b0:b1:06:9e:d6:7c:d2:27:e1:4a:f4:2c:c6:7c:29:db:43: 28:34:3b:71:18:ef:86:4c:d3:e8:92:2f:f0:de:bd:f3:23:c8: 62:61:5a:84:d2:08:31:f9:e8:28:df:d8:25:23:a3:26:88:b1: 5c:4c:f0:33:c9:35:62:5d:11:fc:dd:73:2a:73:a7:7c:f3:ee: 39:eb:54:c8:af:bf:ee:97:e4:49:8b:53:3e:40:61:fc:f3:ac: d4:b9:b1:6c:24:f1:03:45:30:6a:12:a8:1f:0d:3f:49:eb:17: 33:f2:30:28:ec:3f:27:6a:8c:89:98:99:72:d0:58:83:63:b3: bf:99:36:d2 -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEq5G7ndC+F8wnDfSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk MmE5YWU5M2ItMjdjOC00Y2YzLThjN2YtYWJlMWVhZTlkZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn1wAWd2TUjcKD7BwTmMYdZlkXYej7t3fcCZ HOsMqMDrp3v4kUyypkdFmvjCsL1P9Z3gpMy33ARhkBc/e60sX/YN+OBzeDHtTmfP BtgxmpowX3dKwxg8yOL1BdQZU8EETeCVvnN5mlvz7su5dZfwlUIJ25qLihSwHUc7 IhX9wTUVf5BzSvVbKhxYQqITvgmqnF20z5gmpRtfc0DxO+9cPlPoNRAfp9DB2T+0 CaBP79xvLNqUjX65X44dqjI0BAG9cDQNxXybgtU50xGS8qt9HrJn23ot2Xu5s+ll 350wbJtlpm/hhBfNP4lT59uGiN1IHktvz6i1eetuqNED0+oLsQIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFBQbzBbiwYfIX41rKyvXZkXTvRgnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmRhMDUzMTAtNGYxOC0z YWFlLTgwOTItY2Q3MGY2NjJmNDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA AGowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAX27majAVkfQsw99MAOFY68YZp9SK3bNovV7lHEiwr/cAGMNR BUoeQPW0nsVvvVNTPYVFv1L+bbM4/wDqSgJBIBYvphAXaA2G/KGzOtmiTXBu779r GrvSe5yaljVuZCmQsT+1XaxHpyQ1SoX1EjbLQl73Pz9TIB5mzEyW1Q603bCxBp7W fNIn4Ur0LMZ8KdtDKDQ7cRjvhkzT6JIv8N698yPIYmFahNIIMfnoKN/YJSOjJoix XEzwM8k1Yl0R/N1zKnOnfPPuOetUyK+/7pfkSYtTPkBh/POs1LmxbCTxA0UwahKo Hw0/SesXM/IwKOw/J2qMiZiZctBYg2Ozv5k20g== -----END CERTIFICATE-----Generated at Wed Aug 6 13:16:57 2025 by rpki-client