$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e08afe-69b5-3c98-81e8-4ff5868d5a60.roa File: 38e08afe-69b5-3c98-81e8-4ff5868d5a60.roa (raw, json) Hash identifier: 000FOvA0g1XDOR4wmmxXq31LNNSnZn6NaZph9urMli4= Subject key identifier: A0:C1:85:1A:6A:B9:79:11:C5:AF:41:10:1E:5A:4C:8C:1F:0C:54:26 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C7F5FCF9AD29970550B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e08afe-69b5-3c98-81e8-4ff5868d5a60.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:3d1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:7f:5f:cf:9a:d2:99:70:55:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=4cdfcdef-9104-4746-aba8-ae4a682d2b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:52:bf:ac:32:83:4c:dc:b8:da:d5:65:64:15: a3:05:d3:b1:5d:8d:ce:61:00:ce:2d:76:29:7e:ba: c3:43:24:a3:ef:7e:80:59:61:e1:b6:ef:39:94:b9: 13:a0:07:15:cb:24:b9:f2:c8:e3:27:db:db:ae:04: 1a:a2:e3:18:b9:ea:65:26:6d:b9:80:f0:e7:34:a2: d5:33:b7:0e:94:1d:4a:9b:3e:98:d9:92:45:ef:8e: 3e:1a:42:4b:07:3a:a1:79:65:3f:c4:83:0e:b9:b5: 10:84:a1:48:f1:19:ef:34:88:fc:e6:54:2c:7e:64: 5d:28:6e:96:00:7d:57:12:7b:75:5f:b8:9a:2f:63: d6:2a:a5:c0:dd:63:73:58:73:06:d6:2c:79:a3:bd: 74:39:f6:7a:15:10:88:bc:31:c2:8f:99:58:ff:18: 78:c7:8e:05:72:84:1a:c2:7c:a6:27:b4:a6:09:a8: d7:dc:34:5f:70:75:9f:f8:fb:3e:5a:0f:27:7a:e4: 71:a5:62:54:69:54:6b:96:4f:2b:b2:f0:59:d5:6c: 2b:8e:ec:3e:39:71:5d:fe:47:d8:bd:bb:01:15:25: af:21:23:99:4d:3d:87:8e:6a:20:df:ba:e6:15:80: 55:b9:d7:12:98:d5:14:e1:1c:61:d6:98:05:89:cc: 1c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C1:85:1A:6A:B9:79:11:C5:AF:41:10:1E:5A:4C:8C:1F:0C:54:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/38e08afe-69b5-3c98-81e8-4ff5868d5a60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:3d1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:5f:67:9a:ae:08:97:87:bd:93:76:ba:59:d8:1d:54:5c:15: 00:53:68:30:fe:02:61:c3:af:85:32:0b:a9:1a:ac:46:84:50: 1f:64:8a:c7:1e:65:96:d4:3e:81:6d:36:46:de:40:03:27:3c: fa:ed:79:54:f0:3e:dd:81:f6:c0:20:39:a4:7c:0b:41:a9:89: ff:6e:9a:70:f3:7a:1a:97:f9:84:9b:30:9d:e5:71:98:b0:86: 7d:9c:a7:25:ed:d2:0b:ad:1e:32:d5:02:27:96:44:98:00:4f: d6:b6:c5:20:60:11:02:7d:97:41:69:c2:5b:00:61:ef:30:39: 9e:a1:47:ef:fa:4d:ff:0d:15:d7:8e:14:a5:fa:a3:49:14:b5: e1:72:22:e0:0f:c0:d0:db:36:a6:a9:a6:53:02:d7:88:dd:fb: f5:61:14:99:ba:93:e8:65:d2:60:f8:9b:49:d4:8b:b3:8f:bb: 51:56:3c:0a:f4:3f:9b:dd:f5:85:69:16:a5:0d:f2:34:aa:9b: bb:7a:e9:9d:ad:af:c8:28:e0:3c:0a:59:64:83:f2:38:18:7f: 46:f3:27:11:78:4e:99:90:6b:53:71:36:0a:3a:02:da:08:e3: 8e:8a:78:ab:1b:27:d8:e0:e5:8e:ba:03:e3:4f:85:98:19:d0: e1:75:4f:81 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebH9fz5rSmXBVCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NGNkZmNkZWYtOTEwNC00NzQ2LWFiYTgtYWU0YTY4MmQyYjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1K/rDKDTNy42tVlZBWjBdOxXY3OYQDOLXYp frrDQySj736AWWHhtu85lLkToAcVyyS58sjjJ9vbrgQaouMYueplJm25gPDnNKLV M7cOlB1Kmz6Y2ZJF744+GkJLBzqheWU/xIMOubUQhKFI8RnvNIj85lQsfmRdKG6W AH1XEnt1X7iaL2PWKqXA3WNzWHMG1ix5o710OfZ6FRCIvDHCj5lY/xh4x44FcoQa wnymJ7SmCajX3DRfcHWf+Ps+Wg8neuRxpWJUaVRrlk8rsvBZ1Wwrjuw+OXFd/kfY vbsBFSWvISOZTT2Hjmog37rmFYBVudcSmNUU4Rxh1pgFicwcwwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKDBhRpquXkRxa9BEB5aTIwfDFQmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzhlMDhhZmUtNjliNS0z Yzk4LTgxZTgtNGZmNTg2OGQ1YTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQPR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMZfZ5quCJeHvZN2ulnYHVRcFQBTaDD+AmHDr4UyC6karEaEUB9k isceZZbUPoFtNkbeQAMnPPrteVTwPt2B9sAgOaR8C0Gpif9umnDzehqX+YSbMJ3l cZiwhn2cpyXt0gutHjLVAieWRJgAT9a2xSBgEQJ9l0FpwlsAYe8wOZ6hR+/6Tf8N FdeOFKX6o0kUteFyIuAPwNDbNqapplMC14jd+/VhFJm6k+hl0mD4m0nUi7OPu1FW PAr0P5vd9YVpFqUN8jSqm7t66Z2tr8go4DwKWWSD8jgYf0bzJxF4TpmQa1NxNgo6 AtoI446KeKsbJ9jg5Y66A+NPhZgZ0OF1T4E= -----END CERTIFICATE-----Generated at Sun Apr 6 20:41:47 2025 by rpki-client