$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b4e3e20-64de-355a-bcdb-a64b28c21000.roa File: 2b4e3e20-64de-355a-bcdb-a64b28c21000.roa (raw, json) Hash identifier: CgnhY9b0klYQUqICRl7/eo1J1EFftEXx4/ph4Vt75+Y= Subject key identifier: 03:CF:A9:28:33:B4:3B:B6:27:9F:D8:85:D6:F7:AB:5C:CD:D0:33:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DAF8B2D04F4054E1A9DC2 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b4e3e20-64de-355a-bcdb-a64b28c21000.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:8744::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:af:8b:2d:04:f4:05:4e:1a:9d:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=97c8dc74-3840-4fda-a024-e04e6bbd7c3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:13:6d:0d:05:db:de:d5:17:11:73:bd:7d:90: 81:44:0c:cc:87:28:5e:0c:2e:92:17:50:81:9d:7b: eb:93:54:ee:c7:39:02:f5:6c:7f:11:c2:24:37:27: fd:6e:99:cc:49:d7:13:6a:f7:6f:dc:12:46:77:10: 2f:33:93:de:24:89:06:d0:6d:31:3d:98:5e:3f:89: 81:31:5e:16:e6:ee:eb:2d:36:1b:41:bd:43:6e:16: dc:cd:64:31:de:ac:54:3f:6d:9d:91:66:4b:03:2f: 71:0c:eb:1b:02:a7:cd:43:72:03:6a:9c:17:77:0c: 31:0f:c0:f5:44:bb:e9:3b:87:83:db:ee:df:96:96: c2:ea:71:9e:1f:66:37:b5:88:dd:75:58:79:1b:60: a7:e6:bf:a6:f2:62:17:85:f7:11:9c:c1:5c:05:6f: 0d:68:3f:56:06:52:8d:cd:4e:7b:ba:70:eb:41:f4: 14:5f:85:2f:0a:0e:a8:3f:f6:af:df:cd:1f:09:ae: 5e:bd:ed:26:58:8e:00:20:e2:cc:07:7b:6f:72:3b: 00:d3:42:3a:db:f0:1d:0e:72:65:b8:28:b7:71:05: 9e:a6:99:71:88:f0:6e:1e:d5:e9:aa:1f:db:46:2a: 0b:8b:81:c1:93:da:cf:6d:ff:36:6a:61:a7:0b:3c: 61:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CF:A9:28:33:B4:3B:B6:27:9F:D8:85:D6:F7:AB:5C:CD:D0:33:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b4e3e20-64de-355a-bcdb-a64b28c21000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8744::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:68:fe:c4:ab:cc:e3:16:70:1f:99:d4:bb:4e:76:ac:66:1c: 0b:e9:3a:51:66:41:79:8f:d8:c7:8c:fc:82:cb:1b:b9:9d:a7: 72:dd:d2:37:b2:19:87:3d:4d:97:a9:8d:25:9d:56:7f:13:29: dc:7d:23:f5:59:fc:c0:b1:c1:83:83:1d:9b:13:42:0e:9a:41: 75:dc:c0:1c:03:65:88:1a:8e:45:69:15:b4:b6:f8:99:23:78: 2c:57:af:5d:31:2b:a5:97:9e:3c:f1:10:2d:45:bc:38:d0:d7: 36:cd:90:b4:26:68:f0:95:df:95:0c:5c:39:f8:1c:67:84:f3: ed:51:45:85:d7:e5:f5:53:d3:76:54:a1:52:ec:ab:e5:ce:c7: 3f:3d:e9:ce:27:7a:3e:5a:cb:10:0c:08:dd:fa:31:05:88:83: 02:e1:5f:72:3b:26:b8:72:51:cf:91:8a:72:e0:37:2a:83:db: 61:f0:8a:f0:4c:67:23:1e:d4:e6:63:5b:aa:58:ab:55:47:45: d8:5f:ec:2b:f1:51:c1:d3:3d:da:61:67:c2:2d:75:26:1f:8c: 3b:ae:d2:54:5d:56:f2:cf:a7:3a:b6:3f:35:11:43:54:2e:d7: 62:37:ca:50:6c:c3:5c:7e:62:6c:8a:13:5a:45:7f:13:cf:72: 92:bc:09:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEieba+LLQT0BU4ancIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OTdjOGRjNzQtMzg0MC00ZmRhLWEwMjQtZTA0ZTZiYmQ3YzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RNtDQXb3tUXEXO9fZCBRAzMhyheDC6SF1CB nXvrk1TuxzkC9Wx/EcIkNyf9bpnMSdcTavdv3BJGdxAvM5PeJIkG0G0xPZheP4mB MV4W5u7rLTYbQb1DbhbczWQx3qxUP22dkWZLAy9xDOsbAqfNQ3IDapwXdwwxD8D1 RLvpO4eD2+7flpbC6nGeH2Y3tYjddVh5G2Cn5r+m8mIXhfcRnMFcBW8NaD9WBlKN zU57unDrQfQUX4UvCg6oP/av380fCa5eve0mWI4AIOLMB3tvcjsA00I62/AdDnJl uCi3cQWepplxiPBuHtXpqh/bRioLi4HBk9rPbf82amGnCzxh1wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAPPqSgztDu2J5/Yhdb3q1zN0DMIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmI0ZTNlMjAtNjRkZS0z NTVhLWJjZGItYTY0YjI4YzIxMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYdE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAARo/sSrzOMWcB+Z1LtOdqxmHAvpOlFmQXmP2MeM/ILLG7mdp3Ld 0jeyGYc9TZepjSWdVn8TKdx9I/VZ/MCxwYODHZsTQg6aQXXcwBwDZYgajkVpFbS2 +JkjeCxXr10xK6WXnjzxEC1FvDjQ1zbNkLQmaPCV35UMXDn4HGeE8+1RRYXX5fVT 03ZUoVLsq+XOxz896c4nej5ayxAMCN36MQWIgwLhX3I7JrhyUc+RinLgNyqD22Hw ivBMZyMe1OZjW6pYq1VHRdhf7CvxUcHTPdphZ8ItdSYfjDuu0lRdVvLPpzq2PzUR Q1Qu12I3ylBsw1x+YmyKE1pFfxPPcpK8Cbc= -----END CERTIFICATE-----Generated at Tue Apr 8 15:57:33 2025 by rpki-client