$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3be98d58-fac8-3f8d-969a-7a52cef99578.roa File: 3be98d58-fac8-3f8d-969a-7a52cef99578.roa (raw, json) Hash identifier: zRVNGVlVdMR3aIQ8M6hyIUBtuOKl+j7rwLd8v0ZpfSM= Subject key identifier: 0A:CE:EC:56:D0:08:5E:26:D0:95:53:EB:5F:A8:85:D7:A7:36:62:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584AB4ED8CFA7C7C18AE0105149D Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3be98d58-fac8-3f8d-969a-7a52cef99578.roa Signing time: Fri 01 Aug 2025 01:00:31 +0000 ROA not before: Fri 01 Aug 2025 01:00:31 +0000 ROA not after: Thu 30 Oct 2025 01:00:31 +0000 asID: 7015 IP address blocks: 2001:559:e035::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:ed:8c:fa:7c:7c:18:ae:01:05:14:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Aug 1 01:00:31 2025 GMT Not After : Oct 30 01:00:31 2025 GMT Subject: CN=1ec28873-1571-48d6-a850-d859f4d5c546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:51:b2:f6:d1:3f:37:20:30:d3:af:88:1b: ee:e3:96:a9:ab:99:2d:65:ac:3f:ca:e4:b9:7d:31: 2e:cb:38:7d:20:ab:18:5d:cf:f6:61:e5:67:39:7a: 5b:92:ab:b5:f3:00:6a:d0:67:50:e4:bd:6c:e3:ca: 6c:e1:d7:29:88:98:84:08:53:01:dd:17:d3:b9:2f: e2:f7:28:d9:c0:5e:8d:f0:41:05:1d:24:30:10:d6: 18:20:a8:e8:fc:b1:2d:d7:f3:43:e2:e9:8e:09:45: 1f:66:96:93:ca:91:44:39:5f:4b:9b:89:52:ca:25: 1f:8f:93:b9:8b:9f:8a:93:42:4a:3c:db:e1:1a:4a: f6:e6:0d:77:02:6d:cb:53:d8:d3:82:cb:b1:fc:d6: 99:d3:25:f2:d4:63:d0:3b:b7:46:e0:a9:1c:b0:22: c6:10:1a:15:c2:0f:32:10:7d:fd:71:56:22:6b:0b: d4:dc:91:09:dc:bf:e3:a5:d8:55:28:54:21:e3:89: 70:86:6e:0e:26:6a:40:a5:d1:fb:93:a2:0e:cb:06: c5:8d:d4:49:59:56:3b:9c:25:1f:53:6d:a0:b3:0e: 4e:d2:e6:ee:68:05:f9:e2:7c:6b:bd:c5:7c:ef:0b: 95:7e:f1:5a:1e:43:7d:13:79:37:58:b0:0f:33:6d: 92:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:CE:EC:56:D0:08:5E:26:D0:95:53:EB:5F:A8:85:D7:A7:36:62:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3be98d58-fac8-3f8d-969a-7a52cef99578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:e035::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:02:cd:3f:2a:28:3f:ac:7a:f0:ea:a2:ed:6d:97:ab:5c:42: f8:b6:e5:cd:4a:51:12:ff:eb:50:0a:cc:81:8d:08:1c:45:a0: 90:64:23:5c:79:53:08:76:8f:48:23:8b:b9:46:79:49:57:5b: c1:c0:b6:8e:03:68:75:04:66:18:ec:6c:c1:41:12:dc:7f:a0: 33:fc:13:68:4d:f5:57:67:9e:ab:51:ed:71:fa:52:72:0e:72: e1:36:28:22:49:51:21:76:f4:7f:3d:fa:27:20:45:94:f3:35: 14:b8:65:33:ec:ec:58:5f:16:63:58:be:3b:ff:8f:ab:4f:17: 4e:1d:59:39:14:92:ba:e8:b6:64:56:aa:ef:a8:3a:6e:26:4e: 33:4b:97:79:1c:1d:34:ea:a6:0f:09:f5:73:97:8a:90:37:c0: 42:9a:b7:9b:6d:57:57:a2:f1:1f:b1:db:d4:98:cc:d2:56:51: 60:29:dd:a0:30:16:85:58:2b:52:a0:33:16:cc:96:68:10:4f: 98:9c:62:41:3f:fa:78:73:bb:02:6f:b5:f0:a0:55:0a:4c:98: 0d:7a:30:c5:9e:9f:c7:cb:69:78:35:a9:1e:84:ed:16:d5:fb: 92:4b:54:27:4f:22:4d:1b:b7:57:ad:d3:ca:35:6c:da:0f:47: 29:02:ee:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEq07Yz6fHwYrgEFFJ0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk MWVjMjg4NzMtMTU3MS00OGQ2LWE4NTAtZDg1OWY0ZDVjNTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMpRsvbRPzcgMNOviBvu45apq5ktZaw/yuS5 fTEuyzh9IKsYXc/2YeVnOXpbkqu18wBq0GdQ5L1s48ps4dcpiJiECFMB3RfTuS/i 9yjZwF6N8EEFHSQwENYYIKjo/LEt1/ND4umOCUUfZpaTypFEOV9Lm4lSyiUfj5O5 i5+Kk0JKPNvhGkr25g13Am3LU9jTgsux/NaZ0yXy1GPQO7dG4KkcsCLGEBoVwg8y EH39cVYiawvU3JEJ3L/jpdhVKFQh44lwhm4OJmpApdH7k6IOywbFjdRJWVY7nCUf U22gsw5O0ubuaAX54nxrvcV87wuVfvFaHkN9E3k3WLAPM22S7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFArO7FbQCF4m0JVT61+ohdenNmLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2JlOThkNTgtZmFjOC0z ZjhkLTk2OWEtN2E1MmNlZjk5NTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWeA1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFcCzT8qKD+sevDqou1tl6tcQvi25c1KURL/61AKzIGNCBxFoJBk I1x5Uwh2j0gji7lGeUlXW8HAto4DaHUEZhjsbMFBEtx/oDP8E2hN9VdnnqtR7XH6 UnIOcuE2KCJJUSF29H89+icgRZTzNRS4ZTPs7FhfFmNYvjv/j6tPF04dWTkUkrro tmRWqu+oOm4mTjNLl3kcHTTqpg8J9XOXipA3wEKat5ttV1ei8R+x29SYzNJWUWAp 3aAwFoVYK1KgMxbMlmgQT5icYkE/+nhzuwJvtfCgVQpMmA16MMWen8fLaXg1qR6E 7RbV+5JLVCdPIk0bt1et08o1bNoPRykC7k8= -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:56 2025 by rpki-client