$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00a5f04a-5f12-37c0-8d7e-f9b06b715279.roa File: 00a5f04a-5f12-37c0-8d7e-f9b06b715279.roa (raw, json) Hash identifier: pnfP6QV2pSO4mJL3Wn1zeFb99ufmBdKf40nspb1XKpI= Subject key identifier: 3D:2B:86:C5:EC:37:F1:37:58:53:7A:C8:4C:D4:38:6F:EF:09:E4:88 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E28F1DFC8E9ABADA87180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00a5f04a-5f12-37c0-8d7e-f9b06b715279.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 2001:559:7c2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:28:f1:df:c8:e9:ab:ad:a8:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=95f41870-f021-4813-81d9-123c549744bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:04:e6:f0:05:da:ac:61:2d:a1:e4:f2:b3: c5:39:30:7d:c9:b9:07:b5:95:0e:73:5e:69:7e:66: 13:a9:4d:a0:e5:58:f8:fd:af:f3:9b:b5:bd:59:a6: 5a:c4:17:ed:2f:9d:7f:cc:97:31:55:79:14:ae:ba: 0e:35:cd:41:d4:63:6b:b8:cb:4b:5a:94:5e:23:4e: a4:c1:e1:87:b5:da:87:0f:81:41:32:e7:6f:f3:3c: c7:e5:f1:ad:96:74:33:a5:4f:6d:e0:24:99:a2:60: 6c:4d:8d:b6:cd:40:a5:3b:70:16:1c:80:6d:69:77: 09:43:da:e2:f5:f5:85:ef:13:d5:a1:6c:79:25:c8: ad:d8:c0:8b:3b:ee:d0:49:b7:46:dc:40:70:25:42: b0:a6:95:f8:e9:db:4e:2c:77:6e:1b:c1:b1:69:68: a3:eb:db:08:ea:bb:c4:c0:44:a5:7d:16:b5:db:6f: 0f:74:75:e1:0c:a4:f5:19:6a:77:67:b2:2e:a3:9f: a7:b6:30:e1:de:35:b7:c5:a8:48:b3:23:a5:d5:a2: ec:5a:64:dc:b0:48:01:57:c6:30:e7:69:5b:c1:37: 79:4d:6c:27:f6:1f:36:8e:80:e4:a6:97:da:46:93: 96:3f:2e:d1:9e:22:e2:d4:5a:3b:32:86:88:35:16: 25:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:86:C5:EC:37:F1:37:58:53:7A:C8:4C:D4:38:6F:EF:09:E4:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/00a5f04a-5f12-37c0-8d7e-f9b06b715279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:7c2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:7a:1c:55:8a:15:bf:0e:cc:47:c3:a5:40:6d:87:ae:0b:80: df:6c:62:6f:e2:15:df:f1:3a:61:b7:79:c0:16:12:fb:e1:df: 66:1d:16:91:68:6a:f6:75:1a:97:9b:10:b0:2d:e3:fd:82:fc: 6c:b6:d2:18:eb:84:e5:f3:08:42:53:be:e7:c4:f6:32:47:5f: 7e:44:a6:51:e5:83:60:02:8a:29:64:59:0c:cf:49:32:b8:df: 12:cf:9a:f8:17:20:a6:e6:42:75:c6:53:f6:d3:c9:9e:d5:b5: e1:2f:e7:30:00:f4:0d:f2:da:d6:f8:d0:e1:fb:86:94:3a:88: 79:9e:7a:a3:98:a9:1d:30:13:28:05:ef:f0:88:51:30:26:36: c7:fd:8b:09:a9:02:93:7e:44:4c:14:0b:88:ff:9e:1d:f3:8b: e2:c8:21:0c:ef:e6:a3:84:9e:63:86:0e:2c:d0:67:24:51:00: e9:8e:d7:f8:bd:f0:ca:fa:5c:66:73:c8:5d:00:73:c7:c2:54: 6c:23:0a:68:a4:4a:f1:32:6d:c0:b0:76:0c:94:c5:c8:44:a0: 7a:9a:f4:02:54:23:f3:5f:fa:e3:b5:4c:ac:58:14:aa:99:ae: 25:98:6c:67:9f:5d:22:1a:d5:36:78:f5:d9:7e:20:93:fd:0f: 35:65:c5:9c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebijx38jpq62ocYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OTVmNDE4NzAtZjAyMS00ODEzLTgxZDktMTIzYzU0OTc0NGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqYE5vAF2qxhLaHk8rPFOTB9ybkHtZUOc15p fmYTqU2g5Vj4/a/zm7W9WaZaxBftL51/zJcxVXkUrroONc1B1GNruMtLWpReI06k weGHtdqHD4FBMudv8zzH5fGtlnQzpU9t4CSZomBsTY22zUClO3AWHIBtaXcJQ9ri 9fWF7xPVoWx5Jcit2MCLO+7QSbdG3EBwJUKwppX46dtOLHduG8GxaWij69sI6rvE wESlfRa1228PdHXhDKT1GWp3Z7Iuo5+ntjDh3jW3xahIsyOl1aLsWmTcsEgBV8Yw 52lbwTd5TWwn9h82joDkppfaRpOWPy7RniLi1Fo7MoaINRYlHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD0rhsXsN/E3WFN6yEzUOG/vCeSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDBhNWYwNGEtNWYxMi0z N2MwLThkN2UtZjliMDZiNzE1Mjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQfC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKF6HFWKFb8OzEfDpUBth64LgN9sYm/iFd/xOmG3ecAWEvvh32Yd FpFoavZ1GpebELAt4/2C/Gy20hjrhOXzCEJTvufE9jJHX35EplHlg2ACiilkWQzP STK43xLPmvgXIKbmQnXGU/bTyZ7VteEv5zAA9A3y2tb40OH7hpQ6iHmeeqOYqR0w EygF7/CIUTAmNsf9iwmpApN+REwUC4j/nh3zi+LIIQzv5qOEnmOGDizQZyRRAOmO 1/i98Mr6XGZzyF0Ac8fCVGwjCmikSvEybcCwdgyUxchEoHqa9AJUI/Nf+uO1TKxY FKqZriWYbGefXSIa1TZ49dl+IJP9DzVlxZw= -----END CERTIFICATE-----Generated at Sun Apr 6 23:05:31 2025 by rpki-client