$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e7b9433-9859-3f5a-af8c-e1194879eb44.roa File: 2e7b9433-9859-3f5a-af8c-e1194879eb44.roa (raw, json) Hash identifier: 6ieU/0rZeIdOfSTDXs9v51RvBiUoE1fHjVAeBEcXSHc= Subject key identifier: FD:A0:14:20:5C:CE:17:0B:3E:D2:A4:AD:F6:99:31:13:98:88:D0:34 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C333832453C9680BFB5D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e7b9433-9859-3f5a-af8c-e1194879eb44.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:80c1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:33:38:32:45:3c:96:80:bf:b5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d8f8d8fa-5525-4b7f-b48b-2367c4304759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:eb:70:55:01:66:ed:fa:5b:a7:a8:01:78:6e: 32:a3:6b:77:a5:19:ea:3e:25:2f:4d:4c:e0:05:76: a2:2a:52:4f:18:c7:19:1d:48:ef:1b:a7:9d:a7:6b: 0d:29:47:2b:bc:fc:df:fd:13:b0:fb:48:61:2a:54: 5b:bc:fd:00:b9:88:1d:67:7d:a0:b9:a1:62:fb:80: f2:80:f5:e3:ef:64:8b:fe:01:67:8a:1f:3f:e1:be: 6d:59:f9:89:80:56:42:06:79:a2:d1:36:b4:53:a0: 97:2c:a4:99:52:af:76:62:a3:40:70:3f:c3:4f:09: 25:05:e5:b0:a3:d6:67:a1:a9:bf:79:e5:3f:45:0a: 3b:30:74:eb:ee:b1:54:d1:a5:69:47:52:4c:ee:16: 10:a8:2c:d7:e1:f8:99:5b:4a:aa:02:31:85:5c:c7: 90:4d:59:21:95:33:09:b5:6b:7d:5d:38:e8:da:97: c9:78:9b:80:46:1d:2f:96:76:29:36:53:1d:56:84: 2b:65:2f:be:5a:3b:ae:6d:f6:92:49:9e:34:c0:90: 02:e1:c6:66:78:b0:2f:e7:2a:b9:a5:6f:16:36:5d: 38:07:5e:05:9e:de:96:cb:92:3a:ca:98:31:4c:0f: c4:92:7b:e5:96:d8:90:66:84:46:9c:d4:e3:68:d9: aa:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A0:14:20:5C:CE:17:0B:3E:D2:A4:AD:F6:99:31:13:98:88:D0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2e7b9433-9859-3f5a-af8c-e1194879eb44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:80c1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:6d:26:bd:cc:75:8b:c6:ce:68:dc:28:85:c3:76:60:e7:bf: e1:38:4f:f3:8b:43:97:44:44:90:c4:e6:9b:7a:5e:d0:1c:9b: d6:37:10:2b:e7:6d:9b:6a:b0:12:2f:1e:6a:ae:79:cc:26:92: 11:91:f5:9d:4f:3e:12:1c:ed:81:99:67:b7:07:a3:27:d6:65: 97:e0:6e:28:11:27:a6:87:04:7d:7d:35:21:19:cb:4b:04:c2: b5:28:b8:b2:33:ec:47:3b:66:ce:88:bc:bf:b6:b4:71:12:af: 93:12:2d:53:7f:f6:75:4c:d1:78:74:37:a5:b1:58:bb:a9:41: a6:73:e0:6c:5d:57:94:dd:53:bc:f2:dd:5c:b6:f8:00:10:b4: 1d:56:de:a4:2d:cc:4b:7c:f5:48:dd:f6:af:7a:a0:64:71:25: 0d:87:18:90:eb:f6:8f:1b:8b:c1:58:c0:dc:50:c2:71:09:d3: 70:51:c4:87:42:0f:a3:f1:7f:91:e2:c4:8f:b6:74:f0:94:ef: 3c:c2:4f:8b:44:5f:64:24:3f:8d:de:6e:86:42:51:8b:75:bf: 60:57:40:69:cd:7c:78:9d:7c:24:ce:fb:3e:e1:4f:92:75:44: 87:c0:70:d7:22:94:84:7a:bd:2e:45:7f:da:5a:28:b7:32:2c: e2:a6:64:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebDM4MkU8loC/tdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDhmOGQ4ZmEtNTUyNS00YjdmLWI0OGItMjM2N2M0MzA0NzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+twVQFm7fpbp6gBeG4yo2t3pRnqPiUvTUzg BXaiKlJPGMcZHUjvG6edp2sNKUcrvPzf/ROw+0hhKlRbvP0AuYgdZ32guaFi+4Dy gPXj72SL/gFnih8/4b5tWfmJgFZCBnmi0Ta0U6CXLKSZUq92YqNAcD/DTwklBeWw o9Znoam/eeU/RQo7MHTr7rFU0aVpR1JM7hYQqCzX4fiZW0qqAjGFXMeQTVkhlTMJ tWt9XTjo2pfJeJuARh0vlnYpNlMdVoQrZS++WjuubfaSSZ40wJAC4cZmeLAv5yq5 pW8WNl04B14Fnt6Wy5I6ypgxTA/EknvlltiQZoRGnNTjaNmqCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP2gFCBczhcLPtKkrfaZMROYiNA0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmU3Yjk0MzMtOTg1OS0z ZjVhLWFmOGMtZTExOTQ4NzllYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYDB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFBtJr3MdYvGzmjcKIXDdmDnv+E4T/OLQ5dERJDE5pt6XtAcm9Y3 ECvnbZtqsBIvHmquecwmkhGR9Z1PPhIc7YGZZ7cHoyfWZZfgbigRJ6aHBH19NSEZ y0sEwrUouLIz7Ec7Zs6IvL+2tHESr5MSLVN/9nVM0Xh0N6WxWLupQaZz4GxdV5Td U7zy3Vy2+AAQtB1W3qQtzEt89Ujd9q96oGRxJQ2HGJDr9o8bi8FYwNxQwnEJ03BR xIdCD6Pxf5HixI+2dPCU7zzCT4tEX2QkP43eboZCUYt1v2BXQGnNfHidfCTO+z7h T5J1RIfAcNcilIR6vS5Ff9paKLcyLOKmZHA= -----END CERTIFICATE-----Generated at Sun Apr 6 09:42:57 2025 by rpki-client