$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f7bd994-3a36-3fd7-ba10-0248c2593e3b.roa File: 1f7bd994-3a36-3fd7-ba10-0248c2593e3b.roa (raw, json) Hash identifier: dy6V33pVzOV58ArV500tHFB9zSjr67VsbVZqcpguCHU= Subject key identifier: 34:AD:81:A7:AA:E5:02:A8:02:3B:6A:FE:A0:BC:61:31:FC:59:70:2D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DABB93F77082C48A11200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f7bd994-3a36-3fd7-ba10-0248c2593e3b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:836c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:ab:b9:3f:77:08:2c:48:a1:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c97efa73-ec25-45fe-9446-3207549382a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e7:27:98:19:5f:2e:a6:2d:a1:09:16:32:09: f8:6f:d7:98:cd:bd:90:b8:78:c1:9a:c8:f1:60:d7: 86:23:10:69:44:61:20:57:6f:8d:4e:fb:60:7b:2c: 60:72:cb:00:47:fb:ba:e4:58:62:d6:13:48:83:3c: c7:64:e3:2a:c3:94:9f:51:90:c9:78:f6:65:b2:7d: 9e:c2:93:bd:77:24:fb:8e:17:12:dd:13:2a:e3:19: be:09:f8:19:94:b7:b8:d4:e3:d6:4b:e4:5b:d2:43: 47:11:1d:8b:9d:a2:97:dc:01:3e:a2:85:52:b5:4a: 40:6f:e3:cb:6c:98:f5:ed:71:cc:ab:3f:d7:14:42: 78:e6:7a:31:70:9c:19:e6:30:89:1a:10:4b:3d:a5: 78:ca:b5:b4:ca:25:c4:22:a8:b8:13:d7:d2:91:b9: 26:fa:f0:1d:17:33:49:cc:7b:0f:0d:13:b9:d5:10: 85:d1:41:6e:e6:ae:a0:e3:0e:48:92:3e:ef:0b:d6: b5:aa:4a:82:7e:04:ec:e4:39:09:84:16:d3:cd:cb: 60:a4:59:a8:e6:c3:8b:eb:1c:90:91:9a:40:b3:b1: ef:6c:fa:2b:ba:d1:7c:6c:a8:26:18:8e:71:5f:98: 8b:0e:40:37:60:2b:8d:2c:cd:58:b2:88:15:c6:59: ba:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AD:81:A7:AA:E5:02:A8:02:3B:6A:FE:A0:BC:61:31:FC:59:70:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f7bd994-3a36-3fd7-ba10-0248c2593e3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:836c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:bd:d0:48:06:9a:d2:c2:28:eb:d1:e1:93:0c:b9:47:37:91: 00:0a:e4:ec:b2:d7:34:5c:4b:9b:de:0f:17:d2:77:cc:8b:9a: d4:e4:45:d6:4e:24:7f:00:14:9d:5c:3b:2b:86:92:b9:42:f9: b3:6e:84:04:9f:20:63:ca:17:46:1b:03:c0:a5:65:a9:f7:27: 3d:c2:45:5f:69:0e:ac:04:80:3d:88:2a:61:3c:ce:a1:9b:da: 80:e2:03:37:9c:a5:2d:7c:fb:05:12:e4:bd:67:d8:96:1c:42: a3:76:9b:e1:8a:65:1d:c5:0b:85:72:af:7f:d7:11:a4:90:19: f6:f6:35:eb:7d:59:1d:d6:89:82:fe:be:3b:1a:d7:33:f6:20: a5:f5:dd:a0:3f:18:63:82:b2:03:20:8a:e8:ba:14:f3:97:41: 91:0a:b5:2f:ba:fe:d9:1c:74:40:d7:df:60:2b:2b:4f:61:6f: 81:02:47:ab:1f:a6:51:87:39:01:cf:41:d1:6c:44:ac:e4:2f: cb:28:f7:6d:77:59:ae:0e:92:de:3a:c2:e1:e6:fd:5f:44:0a: 9a:63:c6:5e:6a:dc:58:11:df:33:0c:ca:86:fb:c8:82:2b:63: 23:ed:1e:15:22:c9:12:50:de:fa:7d:81:74:43:70:50:09:94: 59:e1:76:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebau5P3cILEihEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Yzk3ZWZhNzMtZWMyNS00NWZlLTk0NDYtMzIwNzU0OTM4MmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArecnmBlfLqYtoQkWMgn4b9eYzb2QuHjBmsjx YNeGIxBpRGEgV2+NTvtgeyxgcssAR/u65Fhi1hNIgzzHZOMqw5SfUZDJePZlsn2e wpO9dyT7jhcS3RMq4xm+CfgZlLe41OPWS+Rb0kNHER2LnaKX3AE+ooVStUpAb+PL bJj17XHMqz/XFEJ45noxcJwZ5jCJGhBLPaV4yrW0yiXEIqi4E9fSkbkm+vAdFzNJ zHsPDRO51RCF0UFu5q6g4w5Ikj7vC9a1qkqCfgTs5DkJhBbTzctgpFmo5sOL6xyQ kZpAs7HvbPorutF8bKgmGI5xX5iLDkA3YCuNLM1YsogVxlm6fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDStgaeq5QKoAjtq/qC8YTH8WXAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWY3YmQ5OTQtM2EzNi0z ZmQ3LWJhMTAtMDI0OGMyNTkzZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYNs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAC90EgGmtLCKOvR4ZMMuUc3kQAK5Oyy1zRcS5veDxfSd8yLmtTk RdZOJH8AFJ1cOyuGkrlC+bNuhASfIGPKF0YbA8ClZan3Jz3CRV9pDqwEgD2IKmE8 zqGb2oDiAzecpS18+wUS5L1n2JYcQqN2m+GKZR3FC4Vyr3/XEaSQGfb2Net9WR3W iYL+vjsa1zP2IKX13aA/GGOCsgMgiui6FPOXQZEKtS+6/tkcdEDX32ArK09hb4EC R6sfplGHOQHPQdFsRKzkL8so9213Wa4Okt46wuHm/V9ECppjxl5q3FgR3zMMyob7 yIIrYyPtHhUiyRJQ3vp9gXRDcFAJlFnhdvI= -----END CERTIFICATE-----Generated at Sun Apr 6 11:47:00 2025 by rpki-client