$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2af0aaae-0a6e-3519-bfbd-ef5339fb6a02.roa File: 2af0aaae-0a6e-3519-bfbd-ef5339fb6a02.roa (raw, json) Hash identifier: bxGfNEjijtvi4ERTiN2lpAa/F985i+bptRZm/gHhULs= Subject key identifier: 48:02:AA:89:14:E2:2A:FE:76:94:FB:6C:6F:37:87:A9:AD:99:C0:3E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C2FF81719F43DC6142C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2af0aaae-0a6e-3519-bfbd-ef5339fb6a02.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:39c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:2f:f8:17:19:f4:3d:c6:14:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=eac57483-59b0-466d-92ba-89da08ac783d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d8:5a:9c:57:0c:fc:87:2f:a1:e1:42:4f:ad: 49:41:9c:ea:ce:39:26:c1:5f:55:fd:48:36:9e:45: aa:47:5f:96:86:c6:06:3b:66:9f:a1:32:b3:ff:61: 63:a9:c6:b9:82:2f:ff:0e:4f:05:22:de:3f:bd:ff: cd:25:28:6f:dd:86:e6:90:7c:1e:1d:b7:4b:e2:65: 4b:ff:b9:2e:03:77:b1:c0:eb:35:e1:c3:1b:28:c9: dd:2b:52:01:77:44:9a:c6:55:9a:d3:c0:d1:80:98: de:93:ab:56:bb:76:1a:4b:df:c5:c2:1f:54:44:c8: e9:38:d3:30:6a:30:30:b0:f3:69:6b:35:e2:40:84: 28:f3:74:6d:73:99:ed:e5:27:49:3a:4a:80:3f:d1: 78:54:07:0e:38:6c:86:e2:d1:ec:cc:70:83:24:09: 2c:28:49:61:28:02:59:48:a9:83:56:a9:a3:45:c2: 42:88:b8:d9:d9:5a:c4:55:9d:14:0e:da:a0:60:d3: d1:6c:30:e9:53:a9:c3:59:e4:b7:34:8a:60:54:ff: 45:f3:1e:9b:11:c6:2b:a3:85:42:23:be:84:a0:8f: f9:fd:80:90:8b:35:b3:1b:12:ab:70:5a:3a:84:93: 3b:50:d4:92:51:87:62:3d:b5:61:90:48:87:73:ab: 1c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:02:AA:89:14:E2:2A:FE:76:94:FB:6C:6F:37:87:A9:AD:99:C0:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2af0aaae-0a6e-3519-bfbd-ef5339fb6a02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:39c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a5:14:dc:03:e0:ca:0b:b7:a6:03:7f:4d:a5:30:02:35:56: 68:1c:4f:b3:d9:fb:2c:d4:29:f8:38:25:92:72:2a:74:66:3a: cf:be:27:9d:f9:35:9c:f7:24:5c:65:87:bb:1a:39:cf:5a:7d: a3:d3:63:22:8f:03:2d:a8:b2:b3:89:7e:97:0f:3b:24:28:4f: b8:1d:25:ee:a0:1c:2e:ef:06:c0:b5:a8:30:8e:8f:7f:cd:07: a8:3a:70:0a:14:4b:07:1a:04:8f:6e:ef:e2:36:79:c9:cf:ac: e4:9f:85:d8:f0:7d:86:0b:f7:ef:77:c0:78:03:ac:83:54:de: d4:87:b2:b8:29:11:4c:80:87:11:84:8f:0b:a1:3b:15:2c:cd: e8:d4:c2:76:48:4b:1e:6e:d2:b3:04:3e:c5:d7:43:4e:06:7e: 6a:1e:c8:eb:65:ed:97:ec:17:28:db:40:c5:35:24:10:fd:7a: 45:36:da:47:75:dd:ea:49:53:63:d0:8e:2b:d9:f8:20:0b:3a: 94:26:9a:5b:2d:65:b4:87:e9:95:c6:fa:98:8a:74:6d:82:e8: 4d:9c:d1:b8:8e:b8:e0:12:20:c9:35:95:58:ab:7b:db:96:fc: 07:fe:38:40:cc:f3:53:da:19:65:ec:63:18:f7:28:b9:55:7f: a1:df:84:b5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebC/4Fxn0PcYULIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZWFjNTc0ODMtNTliMC00NjZkLTkyYmEtODlkYTA4YWM3ODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidhanFcM/IcvoeFCT61JQZzqzjkmwV9V/Ug2 nkWqR1+WhsYGO2afoTKz/2Fjqca5gi//Dk8FIt4/vf/NJShv3YbmkHweHbdL4mVL /7kuA3exwOs14cMbKMndK1IBd0SaxlWa08DRgJjek6tWu3YaS9/Fwh9URMjpONMw ajAwsPNpazXiQIQo83Rtc5nt5SdJOkqAP9F4VAcOOGyG4tHszHCDJAksKElhKAJZ SKmDVqmjRcJCiLjZ2VrEVZ0UDtqgYNPRbDDpU6nDWeS3NIpgVP9F8x6bEcYro4VC I76EoI/5/YCQizWzGxKrcFo6hJM7UNSSUYdiPbVhkEiHc6sc5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEgCqokU4ir+dpT7bG83h6mtmcA+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmFmMGFhYWUtMGE2ZS0z NTE5LWJmYmQtZWY1MzM5ZmI2YTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQOc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC2lFNwD4MoLt6YDf02lMAI1VmgcT7PZ+yzUKfg4JZJyKnRmOs++ J535NZz3JFxlh7saOc9afaPTYyKPAy2osrOJfpcPOyQoT7gdJe6gHC7vBsC1qDCO j3/NB6g6cAoUSwcaBI9u7+I2ecnPrOSfhdjwfYYL9+93wHgDrINU3tSHsrgpEUyA hxGEjwuhOxUszejUwnZISx5u0rMEPsXXQ04GfmoeyOtl7ZfsFyjbQMU1JBD9ekU2 2kd13epJU2PQjivZ+CALOpQmmlstZbSH6ZXG+piKdG2C6E2c0biOuOASIMk1lVir e9uW/Af+OEDM81PaGWXsYxj3KLlVf6HfhLU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:55:43 2025 by rpki-client