$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c1c1f18-af93-3d14-ae9b-11529dda170a.roa File: 1c1c1f18-af93-3d14-ae9b-11529dda170a.roa (raw, json) Hash identifier: 7HhH6BPnw/aCj3s8+UWSVH4sk4EskemaoJOXX2hGIOE= Subject key identifier: 37:D0:16:57:F6:23:B4:36:30:2B:F9:EC:D5:A9:31:4F:14:B3:D8:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C2EEDE63F71079180EA58 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c1c1f18-af93-3d14-ae9b-11529dda170a.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:292::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:2e:ed:e6:3f:71:07:91:80:ea:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5346b1b5-ce0d-449f-b670-aa08f4c9a8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:21:95:2f:1b:c9:4d:f8:70:d4:4b:a3:09:0f: df:48:8f:3b:b8:ec:a1:13:63:39:4e:72:26:d1:98: ae:db:c8:fe:fd:5e:26:30:51:d8:4c:22:12:8d:47: 07:4e:99:56:ee:11:33:2d:c7:72:5d:04:f5:ff:3f: a1:81:f3:f3:ee:5c:36:b7:f4:23:66:68:9c:54:b9: a2:39:c3:94:1e:fa:c9:91:41:41:25:6b:e7:8d:10: d7:fc:81:23:78:dc:9d:20:e1:fc:f9:7d:90:e0:0d: dd:69:cc:2b:e4:6b:e2:59:a3:1f:bd:a8:0d:02:b3: b0:cd:28:70:06:56:57:32:ab:81:84:fe:8c:86:6b: 3a:36:58:75:ec:1f:0f:c2:d6:73:5e:7d:d6:c1:f3: 52:20:40:7e:bd:94:40:08:e2:bd:e5:00:24:cd:9c: 89:f5:d8:c5:02:73:35:2f:2f:af:c0:62:ce:e9:a3: d0:b2:54:3c:4d:ff:9e:b1:25:c6:af:9b:ea:7e:7e: 7d:0e:48:83:c6:14:49:a1:36:15:48:35:f3:58:4b: 98:73:32:8c:87:46:48:23:20:53:91:c4:79:7b:c4: df:e9:82:1a:85:9e:ce:1a:0f:83:21:9d:b8:15:07: 85:d6:f6:e8:b1:3e:ca:f6:d1:47:17:ab:d2:26:23: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D0:16:57:F6:23:B4:36:30:2B:F9:EC:D5:A9:31:4F:14:B3:D8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1c1c1f18-af93-3d14-ae9b-11529dda170a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:292::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption dd:68:98:7e:49:9c:67:b4:09:40:80:d3:e0:69:6d:75:82:9f: 0f:f1:80:6e:8b:3d:3c:dc:8a:b0:2f:e0:c4:67:f6:89:53:0c: 42:6c:e8:c2:e2:d9:31:4a:4b:fd:2b:35:be:b8:a2:56:8c:30: 6f:da:4b:dd:7a:99:a4:2c:59:9f:56:d5:d2:a2:0f:5d:88:cc: 30:af:6a:8b:27:b3:ef:c6:8b:db:77:00:82:44:4f:c5:0a:42: 8b:1d:82:3f:d2:88:b7:26:72:80:ef:b7:73:e6:dc:21:93:ed: 97:92:44:2f:e3:3b:62:cd:2a:a0:93:88:e7:d9:91:8c:46:12: 29:0e:6d:85:20:2a:80:df:be:f7:e6:30:8e:ad:d0:ce:f4:d8: 95:a3:41:3b:0d:b4:0f:53:3f:0e:c8:0f:1a:9a:61:a4:0d:19: 61:14:78:e2:d3:8a:9e:4d:0a:17:4d:f7:05:5c:d2:c4:d6:95: 28:45:3a:a0:b2:9a:c4:a5:92:b0:98:66:ec:be:d4:36:c7:56: bd:ba:ce:61:70:f5:9c:4a:0d:c4:0f:34:c7:d8:5c:ed:a7:ab: 84:10:5d:8c:22:8e:ab:eb:8f:b8:21:90:f7:28:bb:4b:d6:65: e3:02:77:ca:23:75:ae:0d:d7:57:d5:bb:c9:ec:a9:95:58:68: ba:6a:44:28 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebC7t5j9xB5GA6lgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NTM0NmIxYjUtY2UwZC00NDlmLWI2NzAtYWEwOGY0YzlhOGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiGVLxvJTfhw1EujCQ/fSI87uOyhE2M5TnIm 0Ziu28j+/V4mMFHYTCISjUcHTplW7hEzLcdyXQT1/z+hgfPz7lw2t/QjZmicVLmi OcOUHvrJkUFBJWvnjRDX/IEjeNydIOH8+X2Q4A3dacwr5GviWaMfvagNArOwzShw BlZXMquBhP6Mhms6Nlh17B8PwtZzXn3WwfNSIEB+vZRACOK95QAkzZyJ9djFAnM1 Ly+vwGLO6aPQslQ8Tf+esSXGr5vqfn59DkiDxhRJoTYVSDXzWEuYczKMh0ZIIyBT kcR5e8Tf6YIahZ7OGg+DIZ24FQeF1vbosT7K9tFHF6vSJiM2bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDfQFlf2I7Q2MCv57NWpMU8Us9jOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWMxYzFmMTgtYWY5My0z ZDE0LWFlOWItMTE1MjlkZGExNzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQKS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAN1omH5JnGe0CUCA0+BpbXWCnw/xgG6LPTzcirAv4MRn9olTDEJs 6MLi2TFKS/0rNb64olaMMG/aS916maQsWZ9W1dKiD12IzDCvaosns+/Gi9t3AIJE T8UKQosdgj/SiLcmcoDvt3Pm3CGT7ZeSRC/jO2LNKqCTiOfZkYxGEikObYUgKoDf vvfmMI6t0M702JWjQTsNtA9TPw7IDxqaYaQNGWEUeOLTip5NChdN9wVc0sTWlShF OqCymsSlkrCYZuy+1DbHVr26zmFw9ZxKDcQPNMfYXO2nq4QQXYwijqvrj7ghkPco u0vWZeMCd8ojda4N11fVu8nsqZVYaLpqRCg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:51:32 2025 by rpki-client