$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c1cf1e1-a99e-379f-b00e-5b35a064ec3f.roa File: 0c1cf1e1-a99e-379f-b00e-5b35a064ec3f.roa (raw, json) Hash identifier: TyhsntdkdQZ5JkjAj4sICfzaEJkZlACIQ2G3UuzCs/0= Subject key identifier: 69:9C:B8:DD:68:E9:6C:23:EB:5A:84:D6:36:A9:06:E2:A5:8A:85:83 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D4778019C8DDDAB67BB20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c1cf1e1-a99e-379f-b00e-5b35a064ec3f.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 21508 IP address blocks: 2001:559:788::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:47:78:01:9c:8d:dd:ab:67:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=dd13e365-f7a8-43ee-88d4-03f837160460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:11:97:65:7d:65:a8:04:94:94:d8:68:03: ac:2f:90:1d:ac:81:7c:f2:7f:cb:8d:74:79:4f:6d: 51:ca:a7:58:ff:24:f4:9a:78:f1:2e:83:56:8e:de: c2:a1:f4:be:9c:d9:c8:90:2a:d4:04:c4:f4:9e:1c: 5f:83:08:ed:da:6c:2c:52:14:5f:40:52:02:fa:55: 5c:f9:52:f9:5a:0a:db:e7:b5:d3:49:45:d3:2a:dc: 10:37:42:9d:71:8e:c8:84:71:94:f1:80:81:a6:79: dd:84:cf:78:cf:8f:0f:0d:fc:e2:a1:73:1d:ba:ba: b6:8e:d2:be:ab:6a:47:4f:89:5e:46:90:0c:45:d8: 98:30:84:da:5b:e6:9d:e6:63:91:84:7f:a6:0a:ab: 2a:68:e9:5e:6d:e0:ae:af:07:9f:f9:44:59:a2:ec: f6:98:42:d7:54:71:26:90:0c:ae:84:9d:2d:8c:09: b7:3b:e8:77:27:51:77:11:5f:af:7e:4a:ed:3b:99: df:d8:f0:2f:7c:bf:73:11:59:43:4b:0a:16:7b:49: ab:55:40:2e:68:28:e4:2e:20:5f:2e:04:4d:92:84: 9d:9e:b4:79:9c:d6:5d:a0:26:bf:d2:22:32:56:7c: 25:f8:ed:72:2c:02:af:60:4e:56:fd:32:72:6f:e2: 7a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:9C:B8:DD:68:E9:6C:23:EB:5A:84:D6:36:A9:06:E2:A5:8A:85:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c1cf1e1-a99e-379f-b00e-5b35a064ec3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:788::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:de:ca:3f:84:50:7b:70:ce:bf:37:0c:b7:a9:5e:cd:03:06: 04:2b:dd:bf:a1:25:8a:28:19:ab:03:dc:6d:7f:9e:be:fb:c8: b5:ab:32:dc:e1:91:38:eb:a1:26:82:81:30:89:75:fd:41:64: bb:ba:22:9c:d6:17:24:43:c2:13:6c:a6:bd:02:fe:51:3d:d7: 37:07:df:49:a1:1d:58:99:f0:d9:60:76:8f:d9:3d:7f:e3:40: 06:a2:17:37:af:44:ce:a9:a5:91:ec:f4:a1:0a:76:d2:d8:de: 74:64:17:45:94:19:7e:a8:7c:14:33:de:f1:0e:4f:24:fe:04: 2d:33:7f:1d:2b:65:b3:fb:d2:bb:62:b6:60:3f:3c:b8:e6:04: 2b:bf:9a:92:0a:d6:3a:c0:cb:63:48:7b:dd:b5:7a:d4:53:7b: 4f:2a:70:a0:84:91:12:1a:41:69:82:d2:3f:c2:e9:56:d8:6c: e5:e3:54:c8:1a:05:0c:df:ee:b3:6a:72:28:18:8a:f6:8d:36: 39:e6:0a:11:ee:23:b3:13:29:54:3a:e7:25:5c:cf:ef:ed:78: 04:93:bf:cc:4d:29:4a:97:37:5e:07:98:6f:3d:6e:5c:62:15: c7:95:dd:b7:64:8f:9a:47:e3:ab:d1:b9:14:8f:0b:22:2d:f6: 0b:4f:a6:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebUd4AZyN3atnuyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGQxM2UzNjUtZjdhOC00M2VlLTg4ZDQtMDNmODM3MTYwNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t8Rl2V9ZagElJTYaAOsL5AdrIF88n/LjXR5 T21RyqdY/yT0mnjxLoNWjt7CofS+nNnIkCrUBMT0nhxfgwjt2mwsUhRfQFIC+lVc +VL5Wgrb57XTSUXTKtwQN0KdcY7IhHGU8YCBpnndhM94z48PDfzioXMdurq2jtK+ q2pHT4leRpAMRdiYMITaW+ad5mORhH+mCqsqaOlebeCurwef+URZouz2mELXVHEm kAyuhJ0tjAm3O+h3J1F3EV+vfkrtO5nf2PAvfL9zEVlDSwoWe0mrVUAuaCjkLiBf LgRNkoSdnrR5nNZdoCa/0iIyVnwl+O1yLAKvYE5W/TJyb+J67QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGmcuN1o6Wwj61qE1japBuKlioWDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGMxY2YxZTEtYTk5ZS0z NzlmLWIwMGUtNWIzNWEwNjRlYzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQeI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABbeyj+EUHtwzr83DLepXs0DBgQr3b+hJYooGasD3G1/nr77yLWr MtzhkTjroSaCgTCJdf1BZLu6IpzWFyRDwhNspr0C/lE91zcH30mhHViZ8Nlgdo/Z PX/jQAaiFzevRM6ppZHs9KEKdtLY3nRkF0WUGX6ofBQz3vEOTyT+BC0zfx0rZbP7 0rtitmA/PLjmBCu/mpIK1jrAy2NIe921etRTe08qcKCEkRIaQWmC0j/C6VbYbOXj VMgaBQzf7rNqcigYivaNNjnmChHuI7MTKVQ65yVcz+/teASTv8xNKUqXN14HmG89 blxiFceV3bdkj5pH46vRuRSPCyIt9gtPpg8= -----END CERTIFICATE-----Generated at Mon Apr 7 05:51:59 2025 by rpki-client