$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fef948d-226d-35f9-afb7-8a4e8d781418.roa File: 0fef948d-226d-35f9-afb7-8a4e8d781418.roa (raw, json) Hash identifier: SrWvGH/e1rYdA+ieJAsXvDVlnBQkNm5TBrMdb/uREpI= Subject key identifier: 10:31:B0:60:D7:22:87:54:FF:58:10:F5:2E:5F:4E:5E:0A:34:06:15 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BBA9BCADCFBA2048BAD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fef948d-226d-35f9-afb7-8a4e8d781418.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7016 IP address blocks: 2001:559:8048::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:ba:9b:ca:dc:fb:a2:04:8b:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=09db9889-5124-4e83-a50d-3cf48edcf25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:c3:f7:ca:e7:4d:5f:9d:09:42:56:f4:53: 3c:82:56:5e:e3:af:d5:c2:a1:1a:6c:17:dc:16:6e: 7f:9b:44:05:0e:01:d2:04:e8:29:8e:ab:8f:1d:8a: d5:76:07:e9:6c:b5:8d:07:79:aa:2f:92:d8:c7:d3: 3c:68:c7:66:b4:0f:38:7d:9e:a8:8a:94:55:d8:56: 98:17:26:c0:9a:45:05:bc:70:7c:8e:fd:c7:77:f4: 8e:46:2a:dd:dc:00:ae:08:c3:6f:31:ec:cb:de:2f: b4:7f:99:c7:90:ef:b2:d3:01:78:57:99:e1:23:5d: f2:af:17:88:92:97:55:fd:07:e3:c4:aa:f5:9b:7a: d4:f6:f4:ed:eb:d9:a2:76:ae:56:98:71:03:6b:5f: 50:50:12:9f:a2:f1:75:2d:b9:74:c4:fa:48:6f:57: 6c:25:d0:e9:b4:64:75:ae:63:9c:be:9d:c0:29:bb: 3b:c8:ff:3e:17:50:0f:0f:1e:63:5a:e6:2b:f5:56: fc:e5:6d:fe:9f:4f:4d:d5:30:e1:46:5c:dd:1d:e9: 1c:33:1a:ae:85:3c:3f:cd:23:d3:54:b5:4e:9a:89: 81:fc:b3:05:8b:42:d4:b5:00:cd:82:57:9f:d8:54: 24:ee:0b:d9:30:4b:76:6a:30:c5:86:37:17:7e:9f: 0b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:31:B0:60:D7:22:87:54:FF:58:10:F5:2E:5F:4E:5E:0A:34:06:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0fef948d-226d-35f9-afb7-8a4e8d781418.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8048::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:89:94:cc:d3:b0:51:d9:52:a1:49:d1:01:f1:b0:66:7d:f3: 23:f7:f7:13:60:10:1e:70:1e:fb:1f:e5:ea:72:22:14:65:76: 98:e7:65:e7:43:cf:b4:e8:70:f7:a9:fa:e6:dd:06:37:58:fe: d8:80:fc:5b:23:1a:5e:9d:a9:4a:66:9d:8b:0f:4f:83:4d:1f: 9c:20:c3:ba:8c:f9:b4:c1:2c:40:fa:8d:2d:9a:a4:61:3f:84: e6:52:46:8b:44:2a:d6:77:a0:d0:00:e5:ba:11:2f:e5:86:7b: 78:8c:4e:9f:c8:ad:3a:58:b5:41:96:16:86:b1:01:9e:b0:80: f7:5c:6e:09:af:93:f2:1f:4f:d9:c4:40:76:4f:6e:85:e6:32: c1:47:bb:37:38:22:e1:52:59:b5:38:7a:12:37:40:e4:9d:4f: 92:cf:99:10:0d:18:f9:1e:b5:6b:98:ab:7d:3b:54:a8:c6:6a: 4e:64:2c:fe:0a:8c:a1:5c:68:32:f0:97:be:71:0b:fb:cf:5f: ee:d7:5f:2a:c2:a0:6e:24:e8:0c:77:73:8c:d2:60:39:d6:73: 4d:e9:31:06:b8:bf:67:e4:34:e1:36:38:5a:55:a2:c1:fd:3b: 1e:4a:b1:c7:b5:78:3e:d6:e6:66:a2:ad:d4:2f:da:28:3f:f5: 36:29:86:1d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea7qbytz7ogSLrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MDlkYjk4ODktNTEyNC00ZTgzLWE1MGQtM2NmNDhlZGNmMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuDD98rnTV+dCUJW9FM8glZe46/VwqEabBfc Fm5/m0QFDgHSBOgpjquPHYrVdgfpbLWNB3mqL5LYx9M8aMdmtA84fZ6oipRV2FaY FybAmkUFvHB8jv3Hd/SORird3ACuCMNvMezL3i+0f5nHkO+y0wF4V5nhI13yrxeI kpdV/QfjxKr1m3rU9vTt69midq5WmHEDa19QUBKfovF1Lbl0xPpIb1dsJdDptGR1 rmOcvp3AKbs7yP8+F1APDx5jWuYr9Vb85W3+n09N1TDhRlzdHekcMxquhTw/zSPT VLVOmomB/LMFi0LUtQDNglef2FQk7gvZMEt2ajDFhjcXfp8LdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBAxsGDXIodU/1gQ9S5fTl4KNAYVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZlZjk0OGQtMjI2ZC0z NWY5LWFmYjctOGE0ZThkNzgxNDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYBI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADWJlMzTsFHZUqFJ0QHxsGZ98yP39xNgEB5wHvsf5epyIhRldpjn ZedDz7TocPep+ubdBjdY/tiA/FsjGl6dqUpmnYsPT4NNH5wgw7qM+bTBLED6jS2a pGE/hOZSRotEKtZ3oNAA5boRL+WGe3iMTp/IrTpYtUGWFoaxAZ6wgPdcbgmvk/If T9nEQHZPboXmMsFHuzc4IuFSWbU4ehI3QOSdT5LPmRANGPketWuYq307VKjGak5k LP4KjKFcaDLwl75xC/vPX+7XXyrCoG4k6Ax3c4zSYDnWc03pMQa4v2fkNOE2OFpV osH9Ox5Ksce1eD7W5mairdQv2ig/9TYphh0= -----END CERTIFICATE-----Generated at Mon Apr 7 06:24:33 2025 by rpki-client