$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/324640ca-616e-3d7e-9eaf-84632274ac89.roa File: 324640ca-616e-3d7e-9eaf-84632274ac89.roa (raw, json) Hash identifier: zgqfM1QxVopvCgD5/S8T+J9eNZhF2wPxk7vh5HCEbFM= Subject key identifier: 3E:9B:9D:B8:15:E3:B9:FF:E4:A8:FF:53:ED:A0:B3:9E:1A:BA:1D:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E1A8A79EF41BBEFF09F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/324640ca-616e-3d7e-9eaf-84632274ac89.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:80e9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:1a:8a:79:ef:41:bb:ef:f0:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b44ab963-62f6-4ee0-b36f-313bb20a1ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a7:cf:c1:0f:5e:70:31:f7:c0:c9:be:c5:76: 2f:ac:59:13:f4:8a:66:4a:0c:17:16:20:a3:15:53: 89:c6:ee:02:a6:47:af:c6:7c:3e:79:cd:c2:29:b0: 32:47:6f:de:8c:fa:12:49:4d:3f:a7:ec:83:61:66: 83:b4:51:b7:7b:fe:de:d7:ec:22:44:24:14:0a:cb: bc:24:82:82:45:a4:6f:31:a9:de:28:32:46:0c:8c: ca:0a:26:21:66:6d:ff:a3:d5:fd:6f:91:e5:b0:47: c3:fd:bd:a2:f5:96:7c:59:b2:00:a4:a2:07:92:6d: 22:a4:27:f2:31:01:f4:11:50:2a:17:e2:8b:77:ed: 8f:4a:3f:c5:a5:1b:5c:64:5a:1c:2a:e0:ed:2f:90: 7c:5d:9b:03:8e:35:ec:70:91:10:e9:bc:01:3f:ae: 7b:4b:77:a4:42:01:31:f4:dc:32:3e:09:53:54:2b: 3f:dd:64:58:41:c4:d8:b8:6c:dd:93:43:9f:65:ef: e5:c8:6e:7c:5d:5d:c8:2e:9f:04:b7:9a:47:99:a0: bc:62:28:f7:da:55:db:01:0d:da:6f:91:23:ed:07: ef:38:74:46:f4:11:af:4e:60:52:30:75:9f:3f:10: 8f:b2:6e:03:91:80:05:66:09:f4:52:f9:74:10:dd: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9B:9D:B8:15:E3:B9:FF:E4:A8:FF:53:ED:A0:B3:9E:1A:BA:1D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/324640ca-616e-3d7e-9eaf-84632274ac89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:80e9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:86:56:26:c6:4f:76:1b:41:41:6b:68:54:32:a3:bf:7b:90: ab:09:56:fc:16:fc:fa:a3:0c:21:5e:8e:7b:c6:27:0f:4e:d7: d3:b2:ab:ed:63:47:d8:77:fb:98:da:f8:e7:60:22:e0:b6:be: d9:4a:28:7e:88:17:9d:06:40:43:e8:e9:76:0f:57:84:a7:5a: 15:59:60:dc:71:e8:c8:79:93:12:43:2a:12:17:43:a6:ac:ff: b1:5c:18:c1:bf:56:fb:e8:4a:e7:91:16:5e:af:c7:b5:e8:f1: 59:b8:17:ec:33:e5:77:02:7a:ae:a1:66:5d:8a:b3:69:c1:5a: 51:d9:5e:f6:13:08:06:9b:06:e4:af:09:f6:ab:38:8d:f8:f8: 01:cc:89:36:9f:d3:a0:ec:21:e8:21:c9:8c:0c:ed:0c:6d:8e: 0f:4a:4d:11:01:d6:52:c2:05:d6:56:63:11:5e:b5:3e:ac:8f: f5:a1:3c:d7:d6:fc:9c:b0:91:c4:27:ed:3b:ae:70:60:db:1c: c4:0e:50:21:59:35:47:b0:8f:84:bb:d0:78:0a:95:79:40:10: 06:3a:99:32:46:9e:0b:08:ac:e7:62:0d:c3:b7:35:83:26:2f: 05:fb:da:39:94:d7:7f:4d:e9:96:3a:fe:79:35:7e:7d:82:00: 8a:34:8a:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebhqKee9Bu+/wn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjQ0YWI5NjMtNjJmNi00ZWUwLWIzNmYtMzEzYmIyMGExZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qfPwQ9ecDH3wMm+xXYvrFkT9IpmSgwXFiCj FVOJxu4Cpkevxnw+ec3CKbAyR2/ejPoSSU0/p+yDYWaDtFG3e/7e1+wiRCQUCsu8 JIKCRaRvManeKDJGDIzKCiYhZm3/o9X9b5HlsEfD/b2i9ZZ8WbIApKIHkm0ipCfy MQH0EVAqF+KLd+2PSj/FpRtcZFocKuDtL5B8XZsDjjXscJEQ6bwBP657S3ekQgEx 9NwyPglTVCs/3WRYQcTYuGzdk0OfZe/lyG58XV3ILp8Et5pHmaC8Yij32lXbAQ3a b5Ej7QfvOHRG9BGvTmBSMHWfPxCPsm4DkYAFZgn0Uvl0EN1SawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD6bnbgV47n/5Kj/U+2gs54auh1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI0NjQwY2EtNjE2ZS0z ZDdlLTllYWYtODQ2MzIyNzRhYzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYDp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABeGVibGT3YbQUFraFQyo797kKsJVvwW/PqjDCFejnvGJw9O19Oy q+1jR9h3+5ja+OdgIuC2vtlKKH6IF50GQEPo6XYPV4SnWhVZYNxx6Mh5kxJDKhIX Q6as/7FcGMG/VvvoSueRFl6vx7Xo8Vm4F+wz5XcCeq6hZl2Ks2nBWlHZXvYTCAab BuSvCfarOI34+AHMiTaf06DsIeghyYwM7Qxtjg9KTREB1lLCBdZWYxFetT6sj/Wh PNfW/JywkcQn7TuucGDbHMQOUCFZNUewj4S70HgKlXlAEAY6mTJGngsIrOdiDcO3 NYMmLwX72jmU139N6ZY6/nk1fn2CAIo0inQ= -----END CERTIFICATE-----Generated at Mon Apr 7 10:08:03 2025 by rpki-client