$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/245ab099-1d87-3939-8a85-75d728b1fc48.roa File: 245ab099-1d87-3939-8a85-75d728b1fc48.roa (raw, json) Hash identifier: 5u8ZJ6OEAoyjsbh3PCw/2gQBn/wmx2MzCX8Z/w8IfsA= Subject key identifier: 01:D3:F2:C4:99:1E:4A:90:48:2D:67:8B:A0:11:A5:D7:9F:69:F3:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D729F7CDEA4A77CCC0B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/245ab099-1d87-3939-8a85-75d728b1fc48.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:c155::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:72:9f:7c:de:a4:a7:7c:cc:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5ce9951b-b403-4213-9425-9357c911026f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:8d:73:98:2f:6a:77:76:73:95:50:74:46: 08:5c:be:19:3e:02:5b:7f:17:bf:30:e0:6a:d6:0d: d2:88:fd:1e:ad:65:d8:5f:aa:b2:ba:91:32:26:49: 54:fc:cf:34:07:7a:1c:3d:51:71:06:9a:af:a0:4c: 40:79:df:0f:dd:fd:9c:06:37:13:85:73:b4:f5:1e: a3:cb:04:79:7e:a5:fc:9a:a4:59:17:e2:a2:d9:ff: cc:ea:26:ea:3a:8a:ff:4f:3c:3c:8d:01:3e:8c:85: 01:cb:44:ee:bd:e3:38:8d:d6:6d:c7:bb:64:e2:cc: 7c:23:42:96:6b:44:be:cc:96:6d:bf:5b:fc:d6:44: 1d:f6:2f:53:d7:4b:31:00:bd:11:f0:0c:9e:4c:11: 34:91:19:a2:a4:97:f0:f4:81:e8:04:41:43:3a:6f: 93:f9:11:06:c0:f9:fd:8a:03:48:f7:83:55:27:f8: 90:20:0e:db:82:62:a6:cd:5e:fd:3e:b3:5f:33:23: 7d:04:1d:26:f1:3b:5f:1e:a3:e6:e2:50:5e:52:2f: 59:a1:e6:a9:b1:fb:53:06:9c:d4:cd:0a:1c:9a:76: 22:c4:56:83:b4:73:29:fb:e1:d8:44:37:dc:3a:28: 31:92:d7:98:d4:c3:1f:31:28:90:2a:98:bc:eb:5a: 95:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D3:F2:C4:99:1E:4A:90:48:2D:67:8B:A0:11:A5:D7:9F:69:F3:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/245ab099-1d87-3939-8a85-75d728b1fc48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c155::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:a5:e9:d0:f9:b6:fa:50:eb:59:97:9d:3f:e9:9d:ba:41:d4: 03:89:58:ca:88:41:16:e3:fa:e9:12:e6:2e:ed:1f:31:60:c9: 6a:62:cc:4d:28:c8:92:3f:dd:d9:0b:d0:fa:a7:a5:93:9f:a1: 3a:f4:ad:79:03:a2:f5:cf:f5:83:48:c9:23:6c:16:48:01:07: 22:94:b0:40:83:e0:61:9e:5d:76:e1:9b:66:6f:68:0a:15:5a: da:e5:65:75:d3:13:7e:3d:aa:7b:aa:fb:d4:f1:ba:16:6a:6b: 68:fd:af:62:16:b3:3d:6b:9d:d3:26:2b:ae:cf:b0:f8:7f:c7: 29:5f:12:c5:08:8f:f4:e6:ec:d2:2e:28:75:0b:eb:92:3e:3d: 12:60:26:38:81:db:94:2c:8c:2d:11:29:af:21:c7:80:ca:88: 14:67:64:f6:ac:c8:57:a5:20:b2:90:d4:c2:a8:d4:3c:0f:6c: 96:a0:b7:d2:41:8c:42:e6:8b:76:a5:75:56:97:43:cf:79:27: 5c:88:81:52:cf:1a:ad:5c:9b:e8:49:6b:95:0d:af:e0:11:0d: 9a:03:f5:8d:dc:65:b4:a7:29:6c:ef:dd:84:c2:8b:17:1d:f0: 49:12:54:ab:39:72:5e:bb:22:c6:34:3c:65:99:28:df:9d:34: 73:b8:70:13 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebXKffN6kp3zMCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NWNlOTk1MWItYjQwMy00MjEzLTk0MjUtOTM1N2M5MTEwMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8iNc5gvand2c5VQdEYIXL4ZPgJbfxe/MOBq 1g3SiP0erWXYX6qyupEyJklU/M80B3ocPVFxBpqvoExAed8P3f2cBjcThXO09R6j ywR5fqX8mqRZF+Ki2f/M6ibqOor/Tzw8jQE+jIUBy0TuveM4jdZtx7tk4sx8I0KW a0S+zJZtv1v81kQd9i9T10sxAL0R8AyeTBE0kRmipJfw9IHoBEFDOm+T+REGwPn9 igNI94NVJ/iQIA7bgmKmzV79PrNfMyN9BB0m8TtfHqPm4lBeUi9ZoeapsftTBpzU zQocmnYixFaDtHMp++HYRDfcOigxkteY1MMfMSiQKpi861qVxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAHT8sSZHkqQSC1ni6ARpdefafOQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjQ1YWIwOTktMWQ4Ny0z OTM5LThhODUtNzVkNzI4YjFmYzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcFV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGal6dD5tvpQ61mXnT/pnbpB1AOJWMqIQRbj+ukS5i7tHzFgyWpi zE0oyJI/3dkL0PqnpZOfoTr0rXkDovXP9YNIySNsFkgBByKUsECD4GGeXXbhm2Zv aAoVWtrlZXXTE349qnuq+9TxuhZqa2j9r2IWsz1rndMmK67PsPh/xylfEsUIj/Tm 7NIuKHUL65I+PRJgJjiB25QsjC0RKa8hx4DKiBRnZPasyFelILKQ1MKo1DwPbJag t9JBjELmi3aldVaXQ895J1yIgVLPGq1cm+hJa5UNr+ARDZoD9Y3cZbSnKWzv3YTC ixcd8EkSVKs5cl67IsY0PGWZKN+dNHO4cBM= -----END CERTIFICATE-----Generated at Mon Apr 7 09:33:49 2025 by rpki-client