$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/260bd32b-62dd-3008-ad10-a68b7b88f647.roa File: 260bd32b-62dd-3008-ad10-a68b7b88f647.roa (raw, json) Hash identifier: KXiIYBwT3zKCB5xSbDNgDevx6Em30e2PZxwf5hVsnO0= Subject key identifier: 4F:66:06:24:D7:84:16:3D:F5:60:DF:1B:A5:DB:7A:D5:A0:54:7E:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BDD8C735533E61171B100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/260bd32b-62dd-3008-ad10-a68b7b88f647.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 21508 IP address blocks: 2001:559:c515::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:dd:8c:73:55:33:e6:11:71:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ad5b6968-ef85-4fe4-9318-e38ba724e39b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:bb:91:4a:67:b3:a2:0e:1d:ba:96:ed:c3: b2:7d:66:24:a5:f9:ad:ee:3a:9b:bb:06:ee:2f:1b: 29:74:7a:32:bd:43:39:d6:ad:8c:0a:1d:5a:b1:36: 70:3f:ab:37:46:1b:6a:05:d2:93:60:fe:b1:28:b4: cf:f0:18:09:40:cd:bb:0d:d5:8a:4e:e7:be:c7:2a: 59:f7:9a:22:4b:62:64:28:c2:eb:03:78:a1:7f:6b: c6:e8:52:44:0d:3d:2b:35:17:4b:68:27:4f:58:ce: d1:e1:da:a4:f6:3d:7b:ce:93:69:0f:a3:8e:6d:f5: 66:7b:f4:ae:76:1e:ca:b2:95:f8:92:b6:ad:10:9d: d7:70:7e:f5:12:f9:c8:92:77:e2:bc:ca:c0:0f:7d: 9a:04:8f:92:a2:91:51:56:4a:24:fe:03:2e:94:64: 87:c6:2d:62:45:d5:68:20:a7:38:f7:85:9e:be:de: 7c:a4:e4:a6:cc:89:8e:5a:87:1f:61:18:0b:4b:37: 23:4a:77:49:14:70:22:d4:14:4d:f9:e3:ed:b8:0e: db:ed:8b:30:c8:8c:cc:97:07:4d:2d:3a:9c:2d:4b: ba:64:71:6c:12:09:1f:69:76:67:62:f9:a0:82:6d: 9c:1f:8e:f4:21:17:7e:03:8e:0e:bd:0f:08:93:a9: e7:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:66:06:24:D7:84:16:3D:F5:60:DF:1B:A5:DB:7A:D5:A0:54:7E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/260bd32b-62dd-3008-ad10-a68b7b88f647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c515::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b3:e9:cd:4a:18:72:a1:2f:6f:c2:c6:69:81:33:05:16:4d: 91:97:25:6c:86:73:10:b7:88:af:01:cc:a3:24:2e:df:9b:7d: 59:1c:d7:52:6a:e7:9c:3f:4a:70:ef:af:e3:bc:3a:42:e4:2d: e9:c3:b8:09:2c:a2:c4:03:2f:0c:8b:29:06:87:64:bd:4f:f1: 52:52:23:f4:02:74:d1:48:cb:50:bb:6c:35:b7:a8:51:57:80: 5b:b5:d9:23:81:0f:25:bc:f3:b0:f0:ca:b9:f5:4c:6a:fb:4b: 2d:1e:cb:77:f7:85:3d:c0:38:7f:a6:4f:d5:ce:60:de:42:04: a2:ef:d8:1e:4b:a0:6a:50:11:24:e8:a5:66:43:db:82:14:63: 40:86:16:23:57:f8:80:1b:f0:6a:e7:67:95:b7:20:ac:07:48: 15:6d:d1:a9:a1:22:7c:f4:d6:40:c1:95:cc:b9:c3:e9:ad:55: f0:d0:02:72:bd:a0:51:f5:b3:2c:f1:39:6a:81:8f:3e:36:f2: ad:58:42:1f:e0:c2:a1:9d:29:7a:3f:a3:3a:85:e3:76:9e:a8: dd:e4:13:6b:13:b1:42:7b:ca:ca:9b:35:c0:ce:f7:15:22:f1: 21:a9:20:4e:a1:cc:a4:f9:52:af:42:9c:0b:76:32:fd:95:2d: e6:8b:fb:bd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea92Mc1Uz5hFxsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YWQ1YjY5NjgtZWY4NS00ZmU0LTkzMTgtZTM4YmE3MjRlMzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtK7kUpns6IOHbqW7cOyfWYkpfmt7jqbuwbu LxspdHoyvUM51q2MCh1asTZwP6s3RhtqBdKTYP6xKLTP8BgJQM27DdWKTue+xypZ 95oiS2JkKMLrA3ihf2vG6FJEDT0rNRdLaCdPWM7R4dqk9j17zpNpD6OObfVme/Su dh7KspX4kratEJ3XcH71EvnIknfivMrAD32aBI+SopFRVkok/gMulGSHxi1iRdVo IKc494Wevt58pOSmzImOWocfYRgLSzcjSndJFHAi1BRN+ePtuA7b7YswyIzMlwdN LTqcLUu6ZHFsEgkfaXZnYvmggm2cH470IRd+A44OvQ8Ik6nnDwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE9mBiTXhBY99WDfG6XbetWgVH57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjYwYmQzMmItNjJkZC0z MDA4LWFkMTAtYTY4YjdiODhmNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcUV MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGCz6c1KGHKhL2/CxmmBMwUWTZGXJWyGcxC3iK8BzKMkLt+bfVkc 11Jq55w/SnDvr+O8OkLkLenDuAksosQDLwyLKQaHZL1P8VJSI/QCdNFIy1C7bDW3 qFFXgFu12SOBDyW887Dwyrn1TGr7Sy0ey3f3hT3AOH+mT9XOYN5CBKLv2B5LoGpQ ESTopWZD24IUY0CGFiNX+IAb8GrnZ5W3IKwHSBVt0amhInz01kDBlcy5w+mtVfDQ AnK9oFH1syzxOWqBjz428q1YQh/gwqGdKXo/ozqF43aeqN3kE2sTsUJ7ysqbNcDO 9xUi8SGpIE6hzKT5Uq9CnAt2Mv2VLeaL+70= -----END CERTIFICATE-----Generated at Mon Apr 7 06:10:13 2025 by rpki-client