$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09cc6637-b321-333c-b8a1-0994f89f8ccf.roa File: 09cc6637-b321-333c-b8a1-0994f89f8ccf.roa (raw, json) Hash identifier: X/6TQRPf8uDI1K167j15sDDYMw8xeunZzIcH6L9kH28= Subject key identifier: DD:9F:E3:F5:2E:29:AE:DB:50:24:9A:42:B9:6E:91:56:0C:2E:E2:A9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CAE1AE8395C7E4C75EA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09cc6637-b321-333c-b8a1-0994f89f8ccf.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:4d3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:ae:1a:e8:39:5c:7e:4c:75:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f98c5acb-5d7f-4570-8b4c-faa3b5570409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:56:5f:ca:1a:a9:b3:27:b2:ed:cf:71:b2:6a: d1:8f:f3:53:22:45:70:f5:5a:2d:59:cb:03:3d:d4: a2:9d:c8:d0:26:9f:b6:15:6e:d0:27:5e:c3:ec:b7: f6:7c:df:91:97:00:7d:65:4d:14:0c:40:9a:12:b2: a3:1a:94:b5:02:eb:c5:ea:be:d0:92:4a:a0:b6:ba: dd:50:a5:5e:00:90:2c:04:b5:ed:60:e4:47:00:d3: a5:e1:15:d8:64:60:ed:29:0f:3d:3d:f8:48:52:10: eb:54:cf:1a:02:31:15:27:06:1a:43:cf:9d:19:6c: bf:b0:2f:82:4e:4b:55:22:35:dc:23:05:ee:65:a1: 21:68:96:14:c1:03:41:41:15:68:63:88:44:3a:ba: 40:b4:16:33:6a:f0:ee:a9:10:1a:ff:f8:ff:05:24: d2:b7:a9:86:69:6f:0c:1e:e6:18:11:bf:e4:0f:ef: 25:55:63:49:18:5b:5c:7c:62:73:63:8e:47:90:54: a3:8a:99:b6:25:3f:7e:96:8d:9c:cc:a0:ce:b8:ba: 1f:b9:50:16:e0:70:d2:20:7f:d4:df:e9:ec:d9:2b: d1:36:dd:5d:08:b9:5d:ab:41:46:3c:27:24:9b:c6: 3d:f0:48:de:7b:89:4e:bc:bd:83:97:3b:a0:1e:d7: ed:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:9F:E3:F5:2E:29:AE:DB:50:24:9A:42:B9:6E:91:56:0C:2E:E2:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/09cc6637-b321-333c-b8a1-0994f89f8ccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:4d3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:51:3c:ac:3f:9f:5d:93:3e:f1:08:89:38:e8:62:70:d5:7f: 61:34:e6:20:f3:ed:6b:f7:a3:8c:59:56:2f:cb:bd:1d:4b:fb: bd:b3:64:00:fc:49:a1:5b:f1:15:01:e0:7a:56:22:58:f2:b4: 63:64:49:07:cc:7e:14:e0:33:47:c3:11:6c:77:78:f6:ed:d1: 31:35:2d:f9:c2:7d:cf:7d:f3:25:eb:aa:4c:ed:64:90:6b:08: 27:67:2e:7a:41:ec:03:0e:8e:d0:cf:a7:ee:03:e7:81:af:10: 60:8e:2f:c2:42:ed:97:a9:8c:51:12:0b:46:42:34:90:b3:27: 33:1a:99:71:10:d4:cd:8d:cd:c1:a7:dd:b9:cb:06:49:8f:b3: 86:b4:a7:1e:2f:d8:2a:31:d4:fc:16:ac:82:1f:f4:c0:81:47: ff:b1:28:9d:e8:e2:09:a5:4a:39:c1:49:9e:71:5c:c1:87:44: d9:35:e5:ea:d5:a8:00:5c:02:a1:04:bd:a7:39:70:b4:9b:94: f5:ed:2d:dd:f6:e7:ec:8d:28:2a:ac:ea:d2:c3:e4:83:67:22: a7:44:d3:c6:e0:b9:1b:de:a6:35:f8:9b:38:22:c8:63:e4:d3: fa:2c:79:b2:85:58:27:d0:45:57:cc:02:4d:06:bf:6d:c9:f9: 01:e7:e1:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebK4a6Dlcfkx16gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Zjk4YzVhY2ItNWQ3Zi00NTcwLThiNGMtZmFhM2I1NTcwNDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1Zfyhqpsyey7c9xsmrRj/NTIkVw9VotWcsD PdSincjQJp+2FW7QJ17D7Lf2fN+RlwB9ZU0UDECaErKjGpS1AuvF6r7Qkkqgtrrd UKVeAJAsBLXtYORHANOl4RXYZGDtKQ89PfhIUhDrVM8aAjEVJwYaQ8+dGWy/sC+C TktVIjXcIwXuZaEhaJYUwQNBQRVoY4hEOrpAtBYzavDuqRAa//j/BSTSt6mGaW8M HuYYEb/kD+8lVWNJGFtcfGJzY45HkFSjipm2JT9+lo2czKDOuLofuVAW4HDSIH/U 3+ns2SvRNt1dCLldq0FGPCckm8Y98Ejee4lOvL2DlzugHtftEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN2f4/UuKa7bUCSaQrlukVYMLuKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDljYzY2MzctYjMyMS0z MzNjLWI4YTEtMDk5NGY4OWY4Y2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQTT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC9RPKw/n12TPvEIiTjoYnDVf2E05iDz7Wv3o4xZVi/LvR1L+72z ZAD8SaFb8RUB4HpWIljytGNkSQfMfhTgM0fDEWx3ePbt0TE1LfnCfc998yXrqkzt ZJBrCCdnLnpB7AMOjtDPp+4D54GvEGCOL8JC7ZepjFESC0ZCNJCzJzMamXEQ1M2N zcGn3bnLBkmPs4a0px4v2Cox1PwWrIIf9MCBR/+xKJ3o4gmlSjnBSZ5xXMGHRNk1 5erVqABcAqEEvac5cLSblPXtLd325+yNKCqs6tLD5INnIqdE08bguRvepjX4mzgi yGPk0/osebKFWCfQRVfMAk0Gv23J+QHn4XU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:19:21 2025 by rpki-client