$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21be77e9-3d53-3e4a-81bb-552a880947c7.roa File: 21be77e9-3d53-3e4a-81bb-552a880947c7.roa (raw, json) Hash identifier: NZNUx8h8bwHXsGXddiT5PU42iMuO3l2UIZNHvVOInnE= Subject key identifier: 53:23:7B:BF:53:84:61:B1:20:D6:F9:C7:17:8D:4C:5E:CB:6A:F1:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CAD04C5FA39DF91916700 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21be77e9-3d53-3e4a-81bb-552a880947c7.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:2ca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:ad:04:c5:fa:39:df:91:91:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c0851326-4e2b-407b-81fd-8ce1cc33d09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a8:1f:9e:d7:0e:ed:20:36:d8:e0:c1:8d:bd: f1:14:b5:a5:8f:12:d5:0c:0e:c1:46:f2:06:54:ff: 3e:f6:5c:b6:cf:9d:c5:6e:52:9a:fd:31:a4:8f:14: 92:d7:a5:51:53:1c:16:8f:44:b2:6e:d9:91:fc:12: 82:03:01:1b:1b:a6:e8:c5:6d:b2:5f:08:e4:23:b1: d5:e8:0a:ea:40:86:f6:1a:de:e3:90:f3:2a:f1:19: de:93:06:56:f5:77:c7:85:17:7f:26:47:ac:86:23: 6d:b1:b7:f4:f3:5e:ca:49:99:cc:f3:28:bc:c6:33: 9c:b5:c2:0c:02:f3:b1:39:80:fb:cf:dd:fb:c3:42: 8f:2f:19:79:93:10:6a:6d:eb:fb:4c:23:d2:94:d7: 35:6e:31:ed:f6:77:b0:ff:2f:e9:7f:02:98:56:c1: ec:79:f5:83:0e:30:e4:6a:55:3d:62:f2:32:49:06: 53:dd:d9:b3:4f:db:15:05:67:0d:33:52:47:ad:0d: 8d:1d:15:6a:34:a8:08:d7:31:3d:ef:b1:0a:2b:0a: 61:10:4b:e6:59:57:a2:45:85:3e:29:72:cc:05:c9: d4:c0:d9:a8:a2:4f:29:e2:ef:53:50:d7:67:1c:9e: 43:2e:0d:0b:61:d3:1b:f9:5b:b3:31:18:d3:b5:36: ec:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:23:7B:BF:53:84:61:B1:20:D6:F9:C7:17:8D:4C:5E:CB:6A:F1:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21be77e9-3d53-3e4a-81bb-552a880947c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2ca::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:86:4a:c6:45:45:16:9f:ee:a1:59:a9:05:0e:fa:55:a5:b3: 92:4a:cb:a8:44:c6:73:f4:26:49:de:d8:b5:29:bb:a4:a9:c9: c2:ed:65:40:5d:1a:c0:76:26:75:89:00:ec:2f:b7:d2:68:59: 5c:69:d2:47:7e:d3:63:cc:d7:6e:b3:f9:56:36:a3:8d:02:13: a8:26:fe:8f:01:78:ef:8e:cc:55:8d:a4:10:dc:80:27:26:bc: 39:27:b2:dd:94:1f:d9:71:f2:32:97:1b:69:5c:07:a3:72:65: e4:cd:c3:ba:34:00:ca:08:cd:5d:c4:be:36:29:43:5d:c9:00: 7a:d0:01:ae:40:ad:27:9b:20:e1:03:17:91:5b:94:8e:f2:78: ea:f7:a0:9b:27:54:fe:10:64:85:ec:18:49:f2:a2:09:d7:b8: d8:b0:07:c4:6a:c3:af:e0:83:1c:2f:fd:13:16:26:1b:fb:d7: 23:49:c8:d3:29:b4:5a:ab:09:57:09:fc:93:58:a1:fe:72:98: 6b:2f:74:c8:ef:f2:78:a0:aa:04:d8:f0:4c:21:42:95:25:a3: d1:c7:41:d3:67:1a:dc:19:79:f8:2f:aa:16:b6:ba:f9:92:3d: f0:29:f1:18:6d:26:44:b8:7c:c0:41:f9:50:bd:60:f4:cf:f8: 92:cb:28:48 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebK0Exfo535GRZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzA4NTEzMjYtNGUyYi00MDdiLTgxZmQtOGNlMWNjMzNkMDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgagfntcO7SA22ODBjb3xFLWljxLVDA7BRvIG VP8+9ly2z53FblKa/TGkjxSS16VRUxwWj0SybtmR/BKCAwEbG6boxW2yXwjkI7HV 6ArqQIb2Gt7jkPMq8RnekwZW9XfHhRd/JkeshiNtsbf0817KSZnM8yi8xjOctcIM AvOxOYD7z937w0KPLxl5kxBqbev7TCPSlNc1bjHt9new/y/pfwKYVsHsefWDDjDk alU9YvIySQZT3dmzT9sVBWcNM1JHrQ2NHRVqNKgI1zE977EKKwphEEvmWVeiRYU+ KXLMBcnUwNmook8p4u9TUNdnHJ5DLg0LYdMb+VuzMRjTtTbspwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFMje79ThGGxINb5xxeNTF7LavGHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFiZTc3ZTktM2Q1My0z ZTRhLTgxYmItNTUyYTg4MDk0N2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQLK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEyGSsZFRRaf7qFZqQUO+lWls5JKy6hExnP0Jkne2LUpu6SpycLt ZUBdGsB2JnWJAOwvt9JoWVxp0kd+02PM126z+VY2o40CE6gm/o8BeO+OzFWNpBDc gCcmvDknst2UH9lx8jKXG2lcB6NyZeTNw7o0AMoIzV3EvjYpQ13JAHrQAa5ArSeb IOEDF5FblI7yeOr3oJsnVP4QZIXsGEnyognXuNiwB8Rqw6/ggxwv/RMWJhv71yNJ yNMptFqrCVcJ/JNYof5ymGsvdMjv8nigqgTY8EwhQpUlo9HHQdNnGtwZefgvqha2 uvmSPfAp8RhtJkS4fMBB+VC9YPTP+JLLKEg= -----END CERTIFICATE-----Generated at Sun Feb 16 20:33:00 2025 by rpki-client