$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20036048-01bd-3795-9f9d-9a01b1f2bfdd.roa File: 20036048-01bd-3795-9f9d-9a01b1f2bfdd.roa (raw, json) Hash identifier: 5uDkFz81tFeLkE9wHwSI4mo88neylNxLjvrxhAA+7oE= Subject key identifier: C4:E7:84:36:25:86:82:62:75:47:AC:D2:3A:B0:D8:DA:BE:73:67:A6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E1FF5B3048EBBE9479540 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20036048-01bd-3795-9f9d-9a01b1f2bfdd.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:c2b0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:1f:f5:b3:04:8e:bb:e9:47:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=de85e376-9778-468e-9d30-e8513dd112c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5c:5e:d3:f2:a9:49:c2:88:e6:c2:25:f6:a8: 1c:cd:24:92:8d:b2:ff:f6:71:4d:51:4f:f3:38:73: d8:0c:f2:d7:7c:5d:28:86:d4:40:68:21:d4:44:f6: f3:f7:2a:82:7e:2c:a2:66:8d:ac:ab:09:9f:41:cc: 24:26:61:8e:f4:b1:a3:eb:b9:36:08:2c:57:36:3a: e3:ce:66:65:5d:a1:0c:08:2b:51:4d:8f:85:c5:b5: e1:17:28:a0:57:71:3e:97:05:41:79:1d:ff:7c:13: af:25:c3:44:16:8e:7f:91:14:e4:16:c5:23:96:0f: 98:61:dc:6d:b8:ec:7f:dc:a9:70:0c:35:b9:e9:01: 97:ea:3d:d8:f2:5d:b8:f4:8e:c5:14:ac:9c:96:56: 6d:68:71:6a:86:7d:08:a5:3f:9e:bd:2c:84:47:ec: df:e6:c5:53:27:58:62:cc:67:09:48:d5:cc:ad:c7: 0a:ef:f2:7f:0e:6d:36:fe:63:5c:2a:30:00:17:9c: 85:cf:0f:ab:39:86:fd:3b:19:df:57:f6:8a:9e:cd: f7:64:48:61:24:af:62:50:2e:c3:e0:36:41:59:a7: 57:b7:0d:1f:72:a1:05:05:72:ba:20:ba:9f:d6:6b: 3a:f5:65:29:25:02:7e:ca:21:fd:2a:c7:ac:e4:19: bc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E7:84:36:25:86:82:62:75:47:AC:D2:3A:B0:D8:DA:BE:73:67:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20036048-01bd-3795-9f9d-9a01b1f2bfdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c2b0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:05:56:2b:be:f0:dd:fc:6e:fd:ce:10:74:4d:3e:b3:d5:e9: d4:7a:5a:04:6a:55:8b:67:c8:57:49:d5:09:d3:00:4f:39:66: 11:fb:46:9d:8b:a1:ae:1a:08:78:8e:26:88:b6:1a:37:47:ac: 2b:48:7e:ae:a6:f1:b3:95:70:3d:35:01:45:d9:d7:a6:1a:71: ed:ea:fa:88:59:69:0d:69:cf:ad:35:80:97:15:96:0a:3d:25: 43:ad:0d:45:f3:47:f2:e6:64:6d:95:98:d1:af:20:20:a8:f8: 34:fb:80:37:7c:0f:46:d1:53:9b:bf:3d:43:6b:df:9b:d3:8a: b7:01:27:d6:c8:53:00:74:7d:4e:52:a1:63:89:64:0b:64:81: 49:13:c6:58:38:e8:5c:81:77:70:76:4a:29:86:72:58:d8:1a: 6b:b0:11:60:63:6e:8f:41:1e:2e:a5:39:62:c9:9f:cd:5d:1c: dd:77:2a:94:8e:8b:05:f4:93:82:e5:b3:c5:d5:59:4a:ed:8a: 16:58:b3:bd:c8:79:51:49:a8:9f:35:65:07:ea:50:da:b8:d8: b8:79:36:51:ff:1d:58:e7:47:64:af:a2:3d:40:33:07:34:43: eb:d8:78:bb:c2:8e:66:65:35:77:d1:f0:ac:c2:80:b2:09:e3: ed:c0:06:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebh/1swSOu+lHlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGU4NWUzNzYtOTc3OC00NjhlLTlkMzAtZTg1MTNkZDExMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFxe0/KpScKI5sIl9qgczSSSjbL/9nFNUU/z OHPYDPLXfF0ohtRAaCHURPbz9yqCfiyiZo2sqwmfQcwkJmGO9LGj67k2CCxXNjrj zmZlXaEMCCtRTY+FxbXhFyigV3E+lwVBeR3/fBOvJcNEFo5/kRTkFsUjlg+YYdxt uOx/3KlwDDW56QGX6j3Y8l249I7FFKycllZtaHFqhn0IpT+evSyER+zf5sVTJ1hi zGcJSNXMrccK7/J/Dm02/mNcKjAAF5yFzw+rOYb9OxnfV/aKns33ZEhhJK9iUC7D 4DZBWadXtw0fcqEFBXK6ILqf1ms69WUpJQJ+yiH9Kses5Bm8GwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMTnhDYlhoJidUes0jqw2Nq+c2emMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjAwMzYwNDgtMDFiZC0z Nzk1LTlmOWQtOWEwMWIxZjJiZmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcKw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJMFViu+8N38bv3OEHRNPrPV6dR6WgRqVYtnyFdJ1QnTAE85ZhH7 Rp2Loa4aCHiOJoi2GjdHrCtIfq6m8bOVcD01AUXZ16Yace3q+ohZaQ1pz601gJcV lgo9JUOtDUXzR/LmZG2VmNGvICCo+DT7gDd8D0bRU5u/PUNr35vTircBJ9bIUwB0 fU5SoWOJZAtkgUkTxlg46FyBd3B2SimGcljYGmuwEWBjbo9BHi6lOWLJn81dHN13 KpSOiwX0k4Lls8XVWUrtihZYs73IeVFJqJ81ZQfqUNq42Lh5NlH/HVjnR2Svoj1A Mwc0Q+vYeLvCjmZlNXfR8KzCgLIJ4+3ABgs= -----END CERTIFICATE-----Generated at Mon Apr 7 09:34:00 2025 by rpki-client