$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2778ca71-e156-3749-b4e3-927fa13870e5.roa File: 2778ca71-e156-3749-b4e3-927fa13870e5.roa (raw, json) Hash identifier: J1nKzE34kHuvO3GkO96XesDdhU2+WhunnwL7FDe9u30= Subject key identifier: 42:37:95:BE:DE:3F:3D:54:C1:76:4B:51:64:B3:A1:71:8E:ED:26:E2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CC352323C7B76C810DF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2778ca71-e156-3749-b4e3-927fa13870e5.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 2001:559:8630::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:c3:52:32:3c:7b:76:c8:10:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=bb11cb8c-fdb2-4658-925c-4feb54ffe61f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:c4:38:ce:c6:e5:90:71:f2:68:28:17:2e: 13:4b:d8:58:3f:64:3a:ec:db:f0:0d:fa:e9:24:80: 75:e8:43:81:59:1e:04:49:c5:da:02:87:fa:2f:ea: 56:d9:ee:75:7d:86:4b:0b:3a:16:de:ae:db:b8:c8: 63:00:75:42:99:a1:8a:34:dd:83:f4:23:38:a8:67: f1:39:ca:5d:68:88:b2:bf:a8:4e:49:a0:84:79:8b: 2a:80:6b:bc:04:fb:5d:11:60:d8:18:42:c4:41:a0: d5:d6:91:d9:be:e7:8f:70:8d:bd:a8:f6:b2:30:54: 76:ae:2c:2a:95:eb:01:cb:4a:af:77:09:eb:80:59: a2:55:37:b7:de:e7:dd:3c:bf:ce:79:02:b8:c4:ba: fa:b7:9c:4c:5a:5c:36:22:79:cf:96:d2:3b:c4:a6: a7:11:1b:d3:54:3a:3a:22:46:6e:56:4a:ea:16:17: 58:f2:54:1a:07:8e:4e:5f:3d:5e:ee:67:6f:8b:85: b0:f7:7e:11:94:39:ba:51:10:2f:c6:01:2b:43:f7: e4:48:b1:97:a6:85:95:53:72:eb:2f:c9:83:af:09: 40:37:82:85:ca:c6:e2:97:58:be:15:8e:ca:d3:54: a8:f1:95:e0:10:72:73:f7:d4:53:16:7b:2e:04:d7: a1:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:37:95:BE:DE:3F:3D:54:C1:76:4B:51:64:B3:A1:71:8E:ED:26:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2778ca71-e156-3749-b4e3-927fa13870e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8630::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:12:eb:39:b0:e8:07:85:1c:6a:be:ff:ea:81:d5:78:12:9e: 90:bc:a7:3f:8f:f5:69:45:d7:23:98:4e:b5:8f:22:d7:2d:48: 90:1f:0f:e3:0b:24:53:6f:5f:6c:d9:ff:e7:76:5d:07:f4:09: a4:42:11:45:e2:79:e1:4a:e8:c4:29:98:d4:17:2c:eb:09:99: 84:6f:2e:25:ee:0a:fc:c1:85:5c:2b:be:74:9d:97:9a:e2:23: 77:70:d8:59:f8:99:7b:d3:3b:f1:e4:57:cc:fa:78:9e:5f:a4: e1:88:ab:78:8a:7f:20:3c:58:2f:29:1a:96:2f:7b:01:b6:7b: bb:c9:74:68:59:ae:d9:5a:9c:86:69:08:de:ac:0e:e9:b1:a4: 35:84:ba:b1:be:e0:51:33:86:60:92:73:31:a5:79:ba:93:bd: 39:ed:51:9c:49:ad:7e:9f:23:1f:4a:7e:80:05:fe:e0:81:58: 63:52:d8:ab:c8:fa:9b:2b:70:96:0d:d1:a6:3b:20:c9:06:bd: ff:ad:61:be:43:59:bc:7e:98:0e:db:29:ac:ff:ca:90:14:33: af:09:7e:1a:8b:99:d3:8a:87:bf:9c:20:00:76:5e:35:89:28: ba:33:a4:46:a7:7a:0d:f5:b2:b8:13:82:9c:96:ae:b0:26:a9: d0:2e:4c:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebMNSMjx7dsgQ34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YmIxMWNiOGMtZmRiMi00NjU4LTkyNWMtNGZlYjU0ZmZlNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr3EOM7G5ZBx8mgoFy4TS9hYP2Q67NvwDfrp JIB16EOBWR4EScXaAof6L+pW2e51fYZLCzoW3q7buMhjAHVCmaGKNN2D9CM4qGfx OcpdaIiyv6hOSaCEeYsqgGu8BPtdEWDYGELEQaDV1pHZvuePcI29qPayMFR2riwq lesBy0qvdwnrgFmiVTe33ufdPL/OeQK4xLr6t5xMWlw2InnPltI7xKanERvTVDo6 IkZuVkrqFhdY8lQaB45OXz1e7mdvi4Ww934RlDm6URAvxgErQ/fkSLGXpoWVU3Lr L8mDrwlAN4KFysbil1i+FY7K01So8ZXgEHJz99RTFnsuBNeh7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEI3lb7ePz1UwXZLUWSzoXGO7SbiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjc3OGNhNzEtZTE1Ni0z NzQ5LWI0ZTMtOTI3ZmExMzg3MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYYw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIUS6zmw6AeFHGq+/+qB1XgSnpC8pz+P9WlF1yOYTrWPItctSJAf D+MLJFNvX2zZ/+d2XQf0CaRCEUXieeFK6MQpmNQXLOsJmYRvLiXuCvzBhVwrvnSd l5riI3dw2Fn4mXvTO/HkV8z6eJ5fpOGIq3iKfyA8WC8pGpYvewG2e7vJdGhZrtla nIZpCN6sDumxpDWEurG+4FEzhmCSczGlebqTvTntUZxJrX6fIx9KfoAF/uCBWGNS 2KvI+psrcJYN0aY7IMkGvf+tYb5DWbx+mA7bKaz/ypAUM68JfhqLmdOKh7+cIAB2 XjWJKLozpEaneg31srgTgpyWrrAmqdAuTEY= -----END CERTIFICATE-----Generated at Sun Feb 16 20:26:46 2025 by rpki-client