$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/243653e8-f365-3436-a4ce-e69692b977f8.roa File: 243653e8-f365-3436-a4ce-e69692b977f8.roa (raw, json) Hash identifier: Ay2xZ/erOML9VGLpHDUROopdX6HE2SpkVW7GsiT6VbM= Subject key identifier: A7:4E:BA:84:92:E3:53:C3:80:C7:CF:17:F8:ED:4E:2C:B6:DE:E1:6D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C7F8C3FA135EB91FAFA00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/243653e8-f365-3436-a4ce-e69692b977f8.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:3fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:7f:8c:3f:a1:35:eb:91:fa:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5b2f413f-6740-4964-b9f3-94f14001a8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:60:23:d3:f4:60:6e:22:bf:0e:59:57:fc:6d: ad:d7:d8:0e:a0:d3:48:c2:cc:d4:25:eb:18:b4:f9: 1f:73:05:f1:a8:84:db:9b:f3:e8:49:ef:40:30:6d: 8c:0e:fe:2f:ae:28:74:b1:16:ac:4f:89:55:b7:86: 35:8c:7b:7d:6c:67:90:8b:d5:1a:1c:06:06:32:a7: e0:c4:e6:32:3a:33:e6:e3:82:57:e2:f5:3e:e7:ca: a7:60:40:8c:92:f8:53:e1:d5:af:3b:13:9b:68:7e: 22:5f:d8:7d:88:30:10:e7:ab:08:8a:d6:a0:37:d7: 01:a3:ce:71:c8:cc:69:0e:bb:23:c5:04:63:3a:86: e9:a8:dd:7e:bc:5c:6c:08:5f:af:5d:d7:31:5d:70: a6:58:a5:d2:9b:6b:79:b7:3a:0e:b2:18:f1:19:9c: 1e:b3:1b:ba:cd:7e:41:34:b1:ca:b2:75:dd:33:5e: e3:22:5e:f8:43:a6:b2:52:c2:21:39:ed:e7:ce:a5: 9b:06:ed:b3:b7:f2:4c:66:e6:4c:45:56:9f:98:f1: 21:4d:4b:4e:59:d8:d2:be:0b:ec:ed:b7:a3:fb:34: 85:b3:15:c1:19:3a:6f:e2:99:d1:7b:9a:41:54:9c: 4a:3d:7f:87:77:b7:f6:f5:ea:cc:ef:88:26:42:17: dc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4E:BA:84:92:E3:53:C3:80:C7:CF:17:F8:ED:4E:2C:B6:DE:E1:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/243653e8-f365-3436-a4ce-e69692b977f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:3fb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:9b:ba:21:2e:93:95:c3:01:92:35:13:da:3c:57:4d:76:ba: 78:ab:88:2f:50:37:17:a0:75:7c:4a:a6:c9:74:7e:e7:85:7c: c4:0c:95:8c:71:c2:d2:74:59:aa:c6:a0:2a:85:e0:5b:8c:9a: 83:8c:89:d0:a9:3f:8c:2a:bb:1b:a1:1a:88:56:d9:b0:91:65: 01:dd:34:bb:4b:3a:fb:15:8e:11:95:b8:6e:d5:15:6e:ed:cb: 1a:40:3a:dc:4f:95:13:4d:57:85:4c:f8:94:63:7a:92:9c:57: 8e:34:9b:b1:2f:ea:22:1b:82:d9:89:5e:05:07:7a:0f:bf:a8: 8a:33:f5:c5:ff:6d:2b:da:3b:92:9b:ea:3f:29:c1:54:ed:8c: 5b:ad:01:5d:da:dc:dd:d6:76:15:32:b9:88:7d:21:84:39:b3: 32:f2:2a:04:4b:8c:80:fd:d2:cf:ed:fa:23:2f:c8:df:31:6e: 23:01:3c:7f:34:23:4b:00:f1:ab:09:93:f7:ba:95:86:21:74: 2d:f5:40:c7:7b:39:49:eb:86:f4:5c:fa:31:7c:b0:3c:1f:7c: 5c:cd:12:43:e9:4a:6f:a5:84:ab:e5:72:23:a7:ef:72:68:97: ab:ec:68:62:47:b0:c4:e8:64:fc:2a:ed:35:a3:e7:02:5d:eb: 9d:41:cd:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebH+MP6E165H6+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NWIyZjQxM2YtNjc0MC00OTY0LWI5ZjMtOTRmMTQwMDFhOGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGAj0/RgbiK/DllX/G2t19gOoNNIwszUJesY tPkfcwXxqITbm/PoSe9AMG2MDv4vrih0sRasT4lVt4Y1jHt9bGeQi9UaHAYGMqfg xOYyOjPm44JX4vU+58qnYECMkvhT4dWvOxObaH4iX9h9iDAQ56sIitagN9cBo85x yMxpDrsjxQRjOobpqN1+vFxsCF+vXdcxXXCmWKXSm2t5tzoOshjxGZwesxu6zX5B NLHKsnXdM17jIl74Q6ayUsIhOe3nzqWbBu2zt/JMZuZMRVafmPEhTUtOWdjSvgvs 7bej+zSFsxXBGTpv4pnRe5pBVJxKPX+Hd7f29erM74gmQhfcLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKdOuoSS41PDgMfPF/jtTiy23uFtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQzNjUzZTgtZjM2NS0z NDM2LWE0Y2UtZTY5NjkyYjk3N2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQP7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANWbuiEuk5XDAZI1E9o8V012uniriC9QNxegdXxKpsl0fueFfMQM lYxxwtJ0WarGoCqF4FuMmoOMidCpP4wquxuhGohW2bCRZQHdNLtLOvsVjhGVuG7V FW7tyxpAOtxPlRNNV4VM+JRjepKcV440m7Ev6iIbgtmJXgUHeg+/qIoz9cX/bSva O5Kb6j8pwVTtjFutAV3a3N3WdhUyuYh9IYQ5szLyKgRLjID90s/t+iMvyN8xbiMB PH80I0sA8asJk/e6lYYhdC31QMd7OUnrhvRc+jF8sDwffFzNEkPpSm+lhKvlciOn 73Jol6vsaGJHsMToZPwq7TWj5wJd651BzXk= -----END CERTIFICATE-----Generated at Sun Apr 6 17:10:23 2025 by rpki-client