$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ad3ddc-45e0-35b6-8b22-33d015b90e1e.roa File: 25ad3ddc-45e0-35b6-8b22-33d015b90e1e.roa (raw, json) Hash identifier: Bx2t6sHqmI10KOTkjxa28sW2X3rNFRovJHj/6KQTaLU= Subject key identifier: B7:CD:02:9D:02:A5:D9:5C:D5:BB:F7:75:88:0C:F2:70:D9:C9:88:0D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C3DDAAB483007D96DE600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ad3ddc-45e0-35b6-8b22-33d015b90e1e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:c414::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:3d:da:ab:48:30:07:d9:6d:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c3b36b20-626a-4d14-9f85-e69fe504b665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e7:64:58:9e:7e:c1:50:94:a3:db:13:0b:e5: 92:00:e9:42:4d:e9:71:a2:46:ba:03:b8:ea:a4:82: e8:41:23:2e:ac:4b:e8:e1:9e:ff:b3:e3:dd:53:e3: 25:7d:7a:80:7c:9e:cf:55:37:8a:24:eb:e1:3c:d6: 9a:8d:7f:e9:66:c6:f4:32:bc:7f:78:96:20:f7:5d: ec:ed:72:ee:b9:84:a4:cb:a4:56:4d:d9:58:94:c9: 43:28:96:b0:99:50:f3:df:3e:1a:de:f7:8e:48:ac: 99:56:7b:19:91:0c:f9:36:6a:b9:57:cf:c1:62:6b: 21:cb:20:07:c3:7a:72:e9:33:72:71:bb:ff:3f:2d: dd:9d:0d:fd:69:de:58:ae:10:ec:04:e0:bc:b5:43: 19:41:27:78:e7:0d:0c:89:6c:e0:b8:5b:19:d4:1c: cd:cb:dc:ea:9e:1a:c3:7e:68:8b:ac:5e:f7:77:fb: 67:a1:d5:88:8c:4d:f6:73:be:89:16:79:fb:ba:f7: ac:2e:1f:14:ab:39:a3:2c:85:3e:4c:94:ec:1f:b8: 0c:30:51:ef:8a:b9:24:d7:7c:ca:9b:10:3e:a2:28: 53:b8:8f:3e:13:18:12:3f:f7:a1:c9:65:62:c8:a3: 77:36:74:56:d9:a1:95:4f:f6:cf:bd:8c:9d:65:c7: 78:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CD:02:9D:02:A5:D9:5C:D5:BB:F7:75:88:0C:F2:70:D9:C9:88:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/25ad3ddc-45e0-35b6-8b22-33d015b90e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c414::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6f:93:42:81:f1:3b:cc:a0:23:20:7b:6b:bc:02:a4:1b:20: 75:ad:73:9a:60:d1:dd:89:a7:fc:06:ef:f1:6f:29:ed:c2:3b: 57:21:f5:54:d6:e4:6d:ab:bb:bd:69:01:bd:87:b9:de:1e:1a: a2:fa:76:42:24:85:2e:41:0a:7a:26:12:47:fd:66:c4:a0:f3: 9e:c6:9d:50:80:a6:41:e2:e4:76:f2:5f:b3:17:20:5f:d2:23: 56:7d:31:86:35:3a:91:6b:cb:22:69:1c:33:8c:f9:cf:ed:dd: eb:e9:b8:dd:69:0e:6a:ee:07:8b:02:16:27:a3:f2:08:d9:3e: 66:e6:b0:dd:97:17:a2:97:d3:16:1e:b8:73:d0:3f:00:87:2d: 0d:fa:6d:24:16:95:78:cd:02:5d:32:c8:c7:b1:27:3e:b1:b9: f3:40:0f:b4:e7:5e:91:19:90:38:1d:e7:bf:f4:16:ad:48:02: 4f:1b:9a:d6:95:bc:4d:d6:bb:d8:09:68:4d:2d:43:65:82:d4: 8e:b8:2e:c4:04:dc:c6:7a:9f:0a:dc:8b:2f:0c:1e:ad:70:b3: 96:39:05:20:a0:37:48:e5:92:08:b9:c1:0b:d1:4b:17:36:04: 1c:6e:0c:17:30:64:7b:87:47:c0:4e:d8:22:bd:79:d9:e0:e3: 14:52:b1:2a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebD3aq0gwB9lt5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzNiMzZiMjAtNjI2YS00ZDE0LTlmODUtZTY5ZmU1MDRiNjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoudkWJ5+wVCUo9sTC+WSAOlCTelxoka6A7jq pILoQSMurEvo4Z7/s+PdU+MlfXqAfJ7PVTeKJOvhPNaajX/pZsb0Mrx/eJYg913s 7XLuuYSky6RWTdlYlMlDKJawmVDz3z4a3veOSKyZVnsZkQz5Nmq5V8/BYmshyyAH w3py6TNycbv/Py3dnQ39ad5YrhDsBOC8tUMZQSd45w0MiWzguFsZ1BzNy9zqnhrD fmiLrF73d/tnodWIjE32c76JFnn7uvesLh8UqzmjLIU+TJTsH7gMMFHvirkk13zK mxA+oihTuI8+ExgSP/ehyWViyKN3NnRW2aGVT/bPvYydZcd4sQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLfNAp0Cpdlc1bv3dYgM8nDZyYgNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjVhZDNkZGMtNDVlMC0z NWI2LThiMjItMzNkMDE1YjkwZTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcQU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAERvk0KB8TvMoCMge2u8AqQbIHWtc5pg0d2Jp/wG7/FvKe3CO1ch 9VTW5G2ru71pAb2Hud4eGqL6dkIkhS5BCnomEkf9ZsSg857GnVCApkHi5HbyX7MX IF/SI1Z9MYY1OpFryyJpHDOM+c/t3evpuN1pDmruB4sCFiej8gjZPmbmsN2XF6KX 0xYeuHPQPwCHLQ36bSQWlXjNAl0yyMexJz6xufNAD7TnXpEZkDgd57/0Fq1IAk8b mtaVvE3Wu9gJaE0tQ2WC1I64LsQE3MZ6nwrciy8MHq1ws5Y5BSCgN0jlkgi5wQvR Sxc2BBxuDBcwZHuHR8BO2CK9edng4xRSsSo= -----END CERTIFICATE-----Generated at Sun Apr 6 12:02:03 2025 by rpki-client