$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115a6e49-e35d-368f-9a6e-396b2e077791.roa File: 115a6e49-e35d-368f-9a6e-396b2e077791.roa (raw, json) Hash identifier: 8oynn1anGUaw1DUVjja1MQ4/G/l5ilbBTNqeIi2h87g= Subject key identifier: 2A:6A:61:0E:54:94:B5:57:8B:C1:22:C7:A2:EE:58:16:15:3D:76:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BDCA3E2F5DB4D73194E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115a6e49-e35d-368f-9a6e-396b2e077791.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 21508 IP address blocks: 2001:559:8604::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:dc:a3:e2:f5:db:4d:73:19:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=3fab3d7f-cd52-4fdc-b198-876f6afd9dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:91:37:10:32:55:08:b6:66:91:c5:e3:72:e7: ac:1c:d4:ab:e8:6b:19:88:00:44:4d:c9:ff:7e:ff: 83:a0:e7:29:8b:ba:9e:a7:36:85:e9:e0:e1:f9:72: 93:fd:8a:35:5e:97:b8:42:39:2f:54:8c:3a:07:37: 60:52:9d:3c:1b:5a:56:c8:07:57:24:bd:ed:28:ef: d1:9d:7b:38:96:88:22:9a:62:61:d5:3c:7a:21:ff: bf:e3:d3:0f:6e:38:ca:b5:f8:73:df:39:fa:ea:27: 7a:de:4b:f3:15:66:c0:18:56:f4:47:9c:2d:8a:ee: b6:ea:d5:94:52:e8:0d:31:36:da:bb:7a:ca:c5:34: d6:f3:4c:5f:be:06:ff:ad:2d:0c:46:b4:54:ef:81: 7b:1a:04:80:5e:99:35:17:27:20:05:e7:47:39:33: aa:e9:9a:81:3f:0b:f9:d7:83:8c:2d:7b:7b:9d:47: 09:09:07:18:4c:0f:12:4b:6d:24:49:cc:31:eb:7e: 40:31:fa:b5:fa:bf:e6:a5:d3:5f:00:eb:dd:01:33: 6d:f3:b1:15:88:ff:2a:77:3e:9b:d3:22:5c:7a:3c: 8a:77:56:ff:82:be:d2:41:97:cc:13:05:81:fd:f8: 2a:64:e4:36:70:b1:50:45:1e:87:93:f8:97:f8:1a: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6A:61:0E:54:94:B5:57:8B:C1:22:C7:A2:EE:58:16:15:3D:76:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/115a6e49-e35d-368f-9a6e-396b2e077791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8604::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:4e:5c:40:af:79:21:23:5a:d8:a8:01:14:ec:41:8d:f4:51: 8a:fb:21:9e:7f:bc:92:2a:ef:d6:26:17:83:8d:f2:e2:9d:2b: c9:05:b7:17:6f:0b:d8:80:ba:e6:0a:0d:42:fd:b8:c8:ae:45: 63:10:3a:ff:d0:7b:dc:ca:bf:84:49:50:13:42:60:af:6e:90: b4:f0:51:d9:40:b9:8f:36:ec:16:86:aa:1a:43:2d:b3:65:86: 61:44:e1:d4:80:65:46:9a:06:bf:9d:dd:5c:7e:42:b5:d8:43: 48:c2:44:25:8b:58:92:00:e1:2c:77:cb:6a:d0:f4:61:78:c4: 4d:40:3d:95:62:53:08:93:4c:b6:3d:81:dc:e7:1b:6c:6d:e7: e0:61:6f:89:29:dd:a9:f2:f9:fb:9a:00:95:b0:ff:01:d7:aa: 55:18:c9:bb:6f:d0:79:9e:6d:7c:37:f3:13:3d:af:4b:e6:56: d1:97:cb:0e:b0:52:2e:f0:f6:86:99:77:76:3d:9b:35:0c:c9: 71:46:3b:a6:14:d2:89:d0:5d:99:d5:47:ae:19:bf:91:2b:b5: b1:7d:f8:f2:66:b8:c8:5a:06:e6:81:df:f4:a7:b4:d7:59:41: 12:b5:63:87:27:66:f9:ba:59:23:95:11:b7:04:cb:69:96:88: c5:ea:39:c9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea9yj4vXbTXMZToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk M2ZhYjNkN2YtY2Q1Mi00ZmRjLWIxOTgtODc2ZjZhZmQ5ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5E3EDJVCLZmkcXjcuesHNSr6GsZiABETcn/ fv+DoOcpi7qepzaF6eDh+XKT/Yo1Xpe4QjkvVIw6BzdgUp08G1pWyAdXJL3tKO/R nXs4logimmJh1Tx6If+/49MPbjjKtfhz3zn66id63kvzFWbAGFb0R5wtiu626tWU UugNMTbau3rKxTTW80xfvgb/rS0MRrRU74F7GgSAXpk1FycgBedHOTOq6ZqBPwv5 14OMLXt7nUcJCQcYTA8SS20kScwx635AMfq1+r/mpdNfAOvdATNt87EViP8qdz6b 0yJcejyKd1b/gr7SQZfMEwWB/fgqZOQ2cLFQRR6Hk/iX+Bp9eQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCpqYQ5UlLVXi8Eix6LuWBYVPXYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTE1YTZlNDktZTM1ZC0z NjhmLTlhNmUtMzk2YjJlMDc3NzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYYE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB5OXECveSEjWtioARTsQY30UYr7IZ5/vJIq79YmF4ON8uKdK8kF txdvC9iAuuYKDUL9uMiuRWMQOv/Qe9zKv4RJUBNCYK9ukLTwUdlAuY827BaGqhpD LbNlhmFE4dSAZUaaBr+d3Vx+QrXYQ0jCRCWLWJIA4Sx3y2rQ9GF4xE1APZViUwiT TLY9gdznG2xt5+Bhb4kp3any+fuaAJWw/wHXqlUYybtv0HmebXw38xM9r0vmVtGX yw6wUi7w9oaZd3Y9mzUMyXFGO6YU0onQXZnVR64Zv5ErtbF9+PJmuMhaBuaB3/Sn tNdZQRK1Y4cnZvm6WSOVEbcEy2mWiMXqOck= -----END CERTIFICATE-----Generated at Mon Apr 7 06:12:27 2025 by rpki-client