$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3261af57-8c30-3a4f-854d-1267bf55d7c7.roa File: 3261af57-8c30-3a4f-854d-1267bf55d7c7.roa (raw, json) Hash identifier: iDvpXSI6FkX1Fv4oNuDDHN1sk5+RwT9H2pmphP+9VtQ= Subject key identifier: 52:01:F0:BD:A1:82:B8:72:10:96:2F:75:3B:1C:2D:A8:B6:F0:0D:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C392C0F562D3CA77F03C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3261af57-8c30-3a4f-854d-1267bf55d7c7.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:86fb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:39:2c:0f:56:2d:3c:a7:7f:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=eeea38d0-1f2a-4e39-aea6-22d57a9826a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:03:28:cf:f0:b8:c8:2c:ad:32:20:a1:c3:26: 59:5f:cb:c6:c6:7b:29:fb:2a:09:39:f2:5a:cf:62: 51:d4:4c:06:17:17:b5:56:84:e4:cc:7c:97:73:90: 37:c6:79:6f:3c:b7:26:1d:ec:cf:85:5a:a2:33:c3: 72:6f:9d:7a:9e:c6:62:97:52:67:b1:b5:17:b6:27: d1:44:26:5b:ff:61:15:4b:d2:02:57:d0:b1:e8:38: 20:ec:3d:08:85:9b:82:e1:ca:ea:d2:31:7f:79:dc: 17:b5:88:a1:38:a0:ca:a9:5b:52:2f:f6:07:39:91: 35:1a:16:fa:c0:5a:a6:a9:f1:06:0e:59:a3:74:f6: 06:61:82:eb:4d:e1:ac:2d:7b:5d:ba:f7:65:0b:6c: 1c:5f:70:28:32:d0:b2:86:95:9f:d0:1f:8a:ba:b7: 67:53:d6:fa:51:5b:e5:57:d4:f9:f3:a8:c9:1e:68: f0:61:5e:7a:51:4f:aa:ee:26:57:0e:1c:f0:ff:90: 7a:6c:70:5c:f4:da:bc:b5:4e:64:5c:48:37:c4:65: 0e:13:06:74:82:50:6a:21:4a:55:a0:31:c3:0e:cc: 7f:7d:f1:57:f0:b7:fe:6c:53:1d:c6:9d:dc:1a:c7: 92:39:fa:50:d1:6c:cf:5b:a4:72:2c:16:c9:d9:8c: 24:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:01:F0:BD:A1:82:B8:72:10:96:2F:75:3B:1C:2D:A8:B6:F0:0D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3261af57-8c30-3a4f-854d-1267bf55d7c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:86fb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:95:b5:88:d4:21:25:17:9d:10:66:7e:af:26:fb:05:2e:2c: 12:20:f1:f2:92:b2:c1:33:f3:99:00:dd:a7:02:92:71:5b:59: 52:10:a7:d1:31:73:35:1b:15:0c:b7:d5:9a:5d:05:b6:2e:76: 27:53:0e:02:44:da:88:e9:42:92:89:90:dd:07:26:98:4d:c6: 59:07:5e:23:51:8e:36:e2:e8:67:bf:25:79:7a:ac:63:50:76: d6:f6:32:be:94:b6:a1:ba:ca:ea:1a:19:99:94:c8:ba:ee:94: 41:04:95:1f:99:db:9a:ce:dd:cb:a9:b0:80:a0:a3:91:d4:05: 23:2f:b0:a9:9f:9c:54:c9:60:10:7d:2a:92:0e:ae:cb:d7:8c: 6c:21:f6:7e:24:24:df:bd:a7:87:3b:b6:15:2e:63:2c:8b:85: cc:cd:4d:4f:ef:ea:d0:28:25:7f:53:5f:ed:3d:6f:54:66:48: c4:b8:7c:71:47:05:9c:8d:49:71:30:66:c6:ac:8b:44:45:a9: 5c:1e:00:ec:b5:72:ae:33:8b:f3:19:fe:86:8b:d9:62:a7:02: 3c:06:8d:89:a0:d5:f0:d2:c1:ba:0a:79:ed:61:b2:dc:b2:02: f1:3d:c6:d7:01:a3:50:96:52:46:b8:58:d4:a5:d5:7a:8b:45: 72:b7:e1:f1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebDksD1YtPKd/A8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZWVlYTM4ZDAtMWYyYS00ZTM5LWFlYTYtMjJkNTdhOTgyNmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwMoz/C4yCytMiChwyZZX8vGxnsp+yoJOfJa z2JR1EwGFxe1VoTkzHyXc5A3xnlvPLcmHezPhVqiM8Nyb516nsZil1JnsbUXtifR RCZb/2EVS9ICV9Cx6Dgg7D0IhZuC4crq0jF/edwXtYihOKDKqVtSL/YHOZE1Ghb6 wFqmqfEGDlmjdPYGYYLrTeGsLXtduvdlC2wcX3AoMtCyhpWf0B+KurdnU9b6UVvl V9T586jJHmjwYV56UU+q7iZXDhzw/5B6bHBc9Nq8tU5kXEg3xGUOEwZ0glBqIUpV oDHDDsx/ffFX8Lf+bFMdxp3cGseSOfpQ0WzPW6RyLBbJ2YwkNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFIB8L2hgrhyEJYvdTscLai28A1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzI2MWFmNTctOGMzMC0z YTRmLTg1NGQtMTI2N2JmNTVkN2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYb7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6VtYjUISUXnRBmfq8m+wUuLBIg8fKSssEz85kA3acCknFbWVIQ p9ExczUbFQy31ZpdBbYudidTDgJE2ojpQpKJkN0HJphNxlkHXiNRjjbi6Ge/JXl6 rGNQdtb2Mr6UtqG6yuoaGZmUyLrulEEElR+Z25rO3cupsICgo5HUBSMvsKmfnFTJ YBB9KpIOrsvXjGwh9n4kJN+9p4c7thUuYyyLhczNTU/v6tAoJX9TX+09b1RmSMS4 fHFHBZyNSXEwZsasi0RFqVweAOy1cq4zi/MZ/oaL2WKnAjwGjYmg1fDSwboKee1h styyAvE9xtcBo1CWUka4WNSl1XqLRXK34fE= -----END CERTIFICATE-----Generated at Sun Apr 6 12:02:00 2025 by rpki-client