$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a84239c-fa13-3f61-9625-9d02c6aecf38.roa File: 3a84239c-fa13-3f61-9625-9d02c6aecf38.roa (raw, json) Hash identifier: 8Obf5+WnS73kYkVnDG+YFHlPrGW7SHUnA4L+ZGU8CyU= Subject key identifier: CF:CF:A1:33:AE:1C:F2:5C:95:8C:6C:C1:0F:E3:82:10:3E:76:75:4A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DA88E3E6119D2F9A048C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a84239c-fa13-3f61-9625-9d02c6aecf38.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:75b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:a8:8e:3e:61:19:d2:f9:a0:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5490a052-547c-4db5-b2ec-76f4dd7e1c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f1:5f:dc:7e:e7:ce:2b:a7:c1:0f:45:d5:2e: 45:7c:12:79:21:2e:19:75:a3:89:7d:1a:a8:3b:c3: 4a:23:04:4d:63:e2:21:37:26:65:92:cd:47:1f:f4: 4e:50:5a:05:78:7f:d1:64:92:c3:90:0d:b4:ef:39: 32:33:07:9e:1e:85:f5:7e:c8:b1:51:a7:ac:94:d3: 3e:e8:f8:4b:ca:56:bc:be:5e:2f:9b:43:83:5f:b8: 4e:ae:44:94:47:f8:c6:be:b4:b2:7c:f0:2f:05:bb: 99:cd:d1:87:36:ef:6f:50:0a:bf:dc:5b:38:3e:b9: 50:4e:22:78:f2:04:95:d7:30:13:f5:3d:9f:c5:22: 64:43:b3:e7:5f:56:8a:36:67:a6:ac:8c:94:c3:68: a2:a1:82:1b:2a:b3:7d:56:07:44:69:bf:a4:c4:7b: 90:f4:ed:b3:e2:29:ad:78:61:10:00:29:8e:6b:4c: 21:eb:dc:36:f9:3d:79:36:b9:c9:5b:a8:45:9e:22: ac:85:f6:8e:03:5e:90:4f:60:25:9d:bf:ce:9c:7a: 0e:04:60:8b:1c:3d:c0:55:13:4b:ce:61:52:af:eb: 96:b7:a1:21:88:1a:b2:d4:6e:e8:c6:34:cd:02:d3: e4:9d:25:f3:6c:fb:92:94:81:d6:3a:98:51:a7:d4: 36:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CF:A1:33:AE:1C:F2:5C:95:8C:6C:C1:0F:E3:82:10:3E:76:75:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3a84239c-fa13-3f61-9625-9d02c6aecf38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:75b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8a:25:c3:26:49:bf:b7:5c:af:07:79:f7:a8:32:9c:9e:4b: c4:48:3d:df:da:fc:f0:d6:32:64:f6:56:07:02:de:ae:6e:10: 06:96:55:9d:5e:b6:2f:3e:a4:11:49:73:ac:f3:0e:89:3c:6d: 73:4d:8b:03:0c:1e:b0:b4:ff:ac:7f:17:92:af:aa:46:0a:33: 41:45:45:38:fa:ea:fc:72:44:66:4c:6b:0e:25:28:e1:4d:1d: 8f:1f:9d:86:86:9e:bc:70:58:df:5a:a5:11:4d:5c:9f:7c:46: d9:41:1a:b0:c3:f5:96:fe:0c:a2:31:35:2a:d8:62:a4:63:9b: 57:2f:c9:b1:09:06:63:1c:ac:2b:db:74:f3:59:a3:32:56:9f: 27:14:5e:b3:13:44:ab:ea:39:69:dc:5e:51:46:73:c0:df:7a: 18:f7:6d:86:fa:7b:c4:4c:3b:73:6c:01:8f:42:d8:aa:dd:04: 69:23:e6:e1:2f:e8:ce:17:1c:d5:25:5d:ec:99:fb:75:3e:78: 7e:bd:e5:0d:ac:92:f0:bb:9a:e4:b5:d2:da:48:41:73:ef:72: 70:e1:f1:79:f4:fc:e7:a1:d3:ff:c3:48:2e:02:93:a7:10:36: f8:64:fa:1c:4f:bf:2f:c4:0a:6b:9e:34:af:fa:f9:ac:8f:0f: 4d:d8:d5:f0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebaiOPmEZ0vmgSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NTQ5MGEwNTItNTQ3Yy00ZGI1LWIyZWMtNzZmNGRkN2UxYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vFf3H7nziunwQ9F1S5FfBJ5IS4ZdaOJfRqo O8NKIwRNY+IhNyZlks1HH/ROUFoFeH/RZJLDkA207zkyMweeHoX1fsixUaeslNM+ 6PhLyla8vl4vm0ODX7hOrkSUR/jGvrSyfPAvBbuZzdGHNu9vUAq/3Fs4PrlQTiJ4 8gSV1zAT9T2fxSJkQ7PnX1aKNmemrIyUw2iioYIbKrN9VgdEab+kxHuQ9O2z4imt eGEQACmOa0wh69w2+T15NrnJW6hFniKshfaOA16QT2Alnb/OnHoOBGCLHD3AVRNL zmFSr+uWt6EhiBqy1G7oxjTNAtPknSXzbPuSlIHWOphRp9Q2XQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM/PoTOuHPJclYxswQ/jghA+dnVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2E4NDIzOWMtZmExMy0z ZjYxLTk2MjUtOWQwMmM2YWVjZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQdb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABWKJcMmSb+3XK8HefeoMpyeS8RIPd/a/PDWMmT2VgcC3q5uEAaW VZ1eti8+pBFJc6zzDok8bXNNiwMMHrC0/6x/F5KvqkYKM0FFRTj66vxyRGZMaw4l KOFNHY8fnYaGnrxwWN9apRFNXJ98RtlBGrDD9Zb+DKIxNSrYYqRjm1cvybEJBmMc rCvbdPNZozJWnycUXrMTRKvqOWncXlFGc8Dfehj3bYb6e8RMO3NsAY9C2KrdBGkj 5uEv6M4XHNUlXeyZ+3U+eH695Q2skvC7muS10tpIQXPvcnDh8Xn0/Oeh0//DSC4C k6cQNvhk+hxPvy/ECmueNK/6+ayPD03Y1fA= -----END CERTIFICATE-----Generated at Wed Apr 9 19:39:58 2025 by rpki-client