$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28476f09-459d-3de2-b999-0c7cf09fdfec.roa File: 28476f09-459d-3de2-b999-0c7cf09fdfec.roa (raw, json) Hash identifier: uBYME8gQuWKCYReAX7oSj/GH2Q5kZq2HANi84v9nSms= Subject key identifier: 3D:9F:76:3F:B6:47:52:59:90:82:0C:37:29:52:60:75:E4:1C:E6:FD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C36B6B3BDA1AFD39CCA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28476f09-459d-3de2-b999-0c7cf09fdfec.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:849e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:36:b6:b3:bd:a1:af:d3:9c:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f3d67cc9-29ec-4c20-93a4-e17d57f324a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:55:0b:31:a2:37:6d:8a:80:50:53:64:5f:a1: bb:ea:db:d9:5e:6c:b3:5a:d5:e1:d9:42:fe:09:a3: 64:9a:0c:d9:65:1a:70:14:e7:69:d4:1d:c2:f0:58: c0:9a:7b:4f:41:eb:6c:4b:60:26:1f:f1:a8:ad:8a: 2a:62:36:cf:66:f0:77:80:d4:3a:52:89:d1:26:66: 14:b6:5b:12:63:a3:62:a6:ed:b6:45:b8:42:0f:d8: e4:4e:5d:bf:4f:5a:80:66:8b:04:81:fb:75:57:f2: c0:f4:aa:80:b7:eb:b2:4e:5e:d8:bf:2c:82:5d:67: 7c:3b:23:b8:51:f2:81:d8:b1:1e:51:3a:86:77:07: 3a:99:b3:93:09:40:07:a7:78:40:fa:ef:d6:09:d3: 2c:7c:b6:da:17:05:54:fc:4f:3e:cf:11:21:38:31: 52:cd:c8:98:95:b3:64:c4:15:89:d5:54:52:10:48: 50:f0:71:78:15:ad:20:4e:69:20:5f:d1:72:a6:5a: bd:01:33:ff:19:f7:92:c3:86:f6:ba:e9:69:a7:e0: 97:8e:b1:e1:fa:8c:1e:e8:14:52:a0:c9:8b:d5:9b: e2:f3:c8:6d:2a:0f:2e:85:c3:4e:8d:00:52:61:34: e4:20:a0:96:8e:17:55:4e:b5:86:c0:88:6a:5a:45: d3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:9F:76:3F:B6:47:52:59:90:82:0C:37:29:52:60:75:E4:1C:E6:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28476f09-459d-3de2-b999-0c7cf09fdfec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:849e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:86:b5:54:bb:73:40:83:6f:42:e6:5c:2d:2b:68:a0:e5:ac: c8:fa:1a:60:0f:1a:2c:7e:d1:fc:0a:ec:b8:0c:9b:22:ca:01: 05:97:1c:78:0c:09:05:ec:0a:6a:fa:49:fa:58:47:80:fd:3a: bb:2e:d7:2d:2b:07:76:e9:06:47:60:c6:e5:18:37:31:4e:3e: 40:91:10:45:1f:98:14:43:66:8c:53:5b:e4:79:90:6e:e8:f3: da:f5:3b:01:0b:e6:4a:fe:aa:72:b7:11:54:96:43:6c:ab:33: c6:9b:9f:08:24:30:8b:2f:47:d1:04:67:a4:7c:52:02:73:72: 1a:27:23:72:f0:15:78:46:69:0d:87:4d:3e:a0:6c:ec:38:ed: 8d:c9:a9:05:be:52:e5:fa:13:db:d0:bf:d1:c0:80:4f:7c:26: 82:c9:bd:2e:c8:90:8e:cb:6d:8b:ff:17:97:74:02:a7:e4:61: c4:e7:13:fe:d5:82:53:b8:2f:ec:bd:bf:0f:d6:b3:75:22:11: 30:a6:b2:f2:70:01:93:38:94:4b:c7:84:ca:96:31:88:13:ac: 9f:ce:d2:e6:f4:4b:a9:2f:01:33:b8:92:0c:65:e0:4b:17:d8: a6:f2:8a:7b:73:36:a0:e7:0e:c7:ba:83:66:56:ad:b7:48:67: e4:5d:69:46 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebDa2s72hr9OcyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjNkNjdjYzktMjllYy00YzIwLTkzYTQtZTE3ZDU3ZjMyNGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVULMaI3bYqAUFNkX6G76tvZXmyzWtXh2UL+ CaNkmgzZZRpwFOdp1B3C8FjAmntPQetsS2AmH/GorYoqYjbPZvB3gNQ6UonRJmYU tlsSY6Nipu22RbhCD9jkTl2/T1qAZosEgft1V/LA9KqAt+uyTl7YvyyCXWd8OyO4 UfKB2LEeUTqGdwc6mbOTCUAHp3hA+u/WCdMsfLbaFwVU/E8+zxEhODFSzciYlbNk xBWJ1VRSEEhQ8HF4Fa0gTmkgX9Fyplq9ATP/GfeSw4b2uulpp+CXjrHh+owe6BRS oMmL1Zvi88htKg8uhcNOjQBSYTTkIKCWjhdVTrWGwIhqWkXT+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD2fdj+2R1JZkIIMNylSYHXkHOb9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjg0NzZmMDktNDU5ZC0z ZGUyLWI5OTktMGM3Y2YwOWZkZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYSe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAICGtVS7c0CDb0LmXC0raKDlrMj6GmAPGix+0fwK7LgMmyLKAQWX HHgMCQXsCmr6SfpYR4D9Orsu1y0rB3bpBkdgxuUYNzFOPkCREEUfmBRDZoxTW+R5 kG7o89r1OwEL5kr+qnK3EVSWQ2yrM8abnwgkMIsvR9EEZ6R8UgJzchonI3LwFXhG aQ2HTT6gbOw47Y3JqQW+UuX6E9vQv9HAgE98JoLJvS7IkI7LbYv/F5d0AqfkYcTn E/7VglO4L+y9vw/Ws3UiETCmsvJwAZM4lEvHhMqWMYgTrJ/O0ub0S6kvATO4kgxl 4EsX2KbyintzNqDnDse6g2ZWrbdIZ+RdaUY= -----END CERTIFICATE-----Generated at Sun Apr 6 12:04:11 2025 by rpki-client