$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/387f2f2f-1ef5-3fd1-928a-0207f26d6ed0.roa File: 387f2f2f-1ef5-3fd1-928a-0207f26d6ed0.roa (raw, json) Hash identifier: DprAH1fco1vuBnrCMMqZg+HTTNJE8ZEHJlXPz/whzto= Subject key identifier: C4:7D:2A:0D:B9:65:4A:DD:37:61:99:4F:72:00:7B:32:71:87:99:71 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D727D560E00EFCBA94040 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/387f2f2f-1ef5-3fd1-928a-0207f26d6ed0.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:c135::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:72:7d:56:0e:00:ef:cb:a9:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5d3b0f1f-0d8d-4604-8a09-7077f0620a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:ed:a2:ac:54:ef:0e:6e:35:9c:1a:9d:06: c1:09:aa:ca:2c:9b:d6:ea:81:24:42:ee:a2:c1:6d: 74:0e:2b:60:2a:30:4a:5e:98:b6:f6:d7:95:25:6e: 0f:b1:a5:ed:5a:4a:d4:b7:dc:3a:fd:06:5e:c5:d9: 49:50:27:30:a9:7d:e3:62:ca:af:ea:ca:1c:9b:7c: 88:70:86:82:97:4e:b8:26:b4:9b:c8:92:61:ee:4a: b9:a8:c3:21:98:6d:77:84:59:9a:2a:ce:1a:eb:1d: 60:4f:27:f3:86:f9:01:f4:f4:bd:6c:1b:21:5c:ad: fe:78:7c:db:8b:d1:da:67:5f:3f:29:6c:de:3f:f2: 68:bd:19:c7:24:0d:aa:9a:34:2e:47:4b:77:25:fd: 06:eb:be:64:17:84:58:d1:cd:34:a1:08:13:fb:85: 0d:5f:63:3a:97:2f:3e:2d:da:23:e0:85:3e:be:5b: 49:11:cb:06:6c:85:b7:62:9d:e9:03:4f:1d:a2:51: ce:a7:16:09:62:19:1b:a6:7a:80:cd:d2:12:43:36: 27:2b:bf:69:43:ca:d2:bc:67:53:e6:41:af:bc:a8: 80:10:4c:a2:3e:e8:8e:74:fd:b9:1a:2e:32:0d:2d: 8b:a3:3b:2f:94:27:7f:28:38:e9:45:36:88:e3:9f: f7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7D:2A:0D:B9:65:4A:DD:37:61:99:4F:72:00:7B:32:71:87:99:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/387f2f2f-1ef5-3fd1-928a-0207f26d6ed0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c135::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:01:64:84:10:1b:2c:17:66:c3:80:98:e3:92:f3:06:c1:4e: eb:68:73:19:5a:a6:c0:19:07:49:2d:7a:4e:fa:b0:dd:38:de: 7a:81:70:20:51:b9:b4:b8:27:38:ec:cf:4e:96:7d:2b:eb:b3: 57:db:6a:3e:76:17:34:91:13:36:59:e5:b0:96:c1:38:d3:1e: 36:74:44:d1:76:ec:40:42:a0:88:f0:52:c6:c9:9c:8a:42:3a: 5a:c6:f5:e5:9e:ec:fc:be:50:2d:6e:0b:61:21:8e:14:0e:c6: dd:65:7c:77:e9:6f:d3:45:2f:55:5d:d8:da:8a:e0:87:32:7b: c4:32:55:7b:e6:40:8a:2b:d6:07:6a:a9:93:bb:ed:b2:89:64: dd:2b:61:83:c2:7f:34:29:a9:97:c8:07:05:aa:51:ca:7c:9e: 91:5a:14:40:c4:79:b1:8d:85:da:99:53:90:94:05:36:34:4e: f4:b1:be:63:02:90:f6:5f:6f:a7:e6:7b:85:08:18:d2:5b:94: b7:da:ab:6f:96:53:72:9b:b5:a4:c0:47:af:48:af:13:15:d9: df:c4:ea:7a:4c:5d:12:69:a3:61:2b:53:28:03:08:ad:d5:31: e1:11:56:da:1b:0e:6e:83:48:9f:35:65:55:96:86:ae:a8:f7: 21:8e:5f:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebXJ9Vg4A78upQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NWQzYjBmMWYtMGQ4ZC00NjA0LThhMDktNzA3N2YwNjIwYTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcDtoqxU7w5uNZwanQbBCarKLJvW6oEkQu6i wW10DitgKjBKXpi29teVJW4PsaXtWkrUt9w6/QZexdlJUCcwqX3jYsqv6socm3yI cIaCl064JrSbyJJh7kq5qMMhmG13hFmaKs4a6x1gTyfzhvkB9PS9bBshXK3+eHzb i9HaZ18/KWzeP/JovRnHJA2qmjQuR0t3Jf0G675kF4RY0c00oQgT+4UNX2M6ly8+ Ldoj4IU+vltJEcsGbIW3Yp3pA08dolHOpxYJYhkbpnqAzdISQzYnK79pQ8rSvGdT 5kGvvKiAEEyiPuiOdP25Gi4yDS2LozsvlCd/KDjpRTaI45/3JQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMR9Kg25ZUrdN2GZT3IAezJxh5lxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzg3ZjJmMmYtMWVmNS0z ZmQxLTkyOGEtMDIwN2YyNmQ2ZWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcE1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABEBZIQQGywXZsOAmOOS8wbBTutocxlapsAZB0ktek76sN043nqB cCBRubS4Jzjsz06WfSvrs1fbaj52FzSREzZZ5bCWwTjTHjZ0RNF27EBCoIjwUsbJ nIpCOlrG9eWe7Py+UC1uC2EhjhQOxt1lfHfpb9NFL1Vd2NqK4Icye8QyVXvmQIor 1gdqqZO77bKJZN0rYYPCfzQpqZfIBwWqUcp8npFaFEDEebGNhdqZU5CUBTY0TvSx vmMCkPZfb6fme4UIGNJblLfaq2+WU3KbtaTAR69IrxMV2d/E6npMXRJpo2ErUygD CK3VMeERVtobDm6DSJ81ZVWWhq6o9yGOX8c= -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:39 2025 by rpki-client