$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cebe396-6333-3713-89ba-e7f64b5badcb.roa File: 3cebe396-6333-3713-89ba-e7f64b5badcb.roa (raw, json) Hash identifier: XvVWjkE+nICk6XmRJ7EH2fjd6jQXQtaoiFNBwXIHAW8= Subject key identifier: FE:0C:70:BE:54:6C:99:E1:2E:E6:4F:95:2B:65:7F:3F:F2:2C:50:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA639A8E3CF22631DFA4C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cebe396-6333-3713-89ba-e7f64b5badcb.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33651 IP address blocks: 2001:559:866c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:39:a8:e3:cf:22:63:1d:fa:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=9a81e7e3-612e-4c21-85cc-596673076b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:b6:0f:0f:d9:35:c2:1e:00:83:cb:f6:43: 19:ab:77:91:e5:b1:e5:f9:be:f3:33:30:7c:05:d1: 1b:1f:6d:a0:76:50:02:27:0b:66:a2:87:46:ed:47: 51:1c:b3:c8:f4:3c:d1:a3:0c:24:e5:6a:fd:c1:cf: f9:93:9c:3e:48:d1:74:06:75:bd:b7:31:08:06:62: a6:47:0f:8a:79:4e:e9:7a:42:39:cc:ec:09:45:97: fb:f8:2c:08:1e:e4:8a:f6:f6:e2:f4:87:f5:86:d9: 40:4f:67:5b:7b:d1:1e:d9:8c:2a:89:86:bc:ec:29: 8b:dd:15:8b:79:ec:ac:f1:b2:4e:51:85:ce:22:be: d9:cc:76:e3:94:79:fd:9f:52:65:ae:85:c0:9f:64: ac:85:e0:10:65:54:a9:1c:40:62:db:f7:7b:2c:78: ff:11:eb:31:bf:21:dc:a0:ab:8e:b9:1c:fd:3e:5d: 06:a4:00:e4:f1:50:7f:49:07:b9:52:9b:f4:d4:09: b0:b4:56:81:b1:72:44:50:2a:ee:54:d3:c2:8f:d3: f1:be:8a:2c:df:b5:0e:c8:29:e7:81:ab:1e:19:82: 4f:78:76:e1:0c:00:02:c3:1a:b4:71:d3:64:f3:93: 7f:54:60:0f:31:36:5c:1b:6d:03:ce:00:f0:8a:45: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0C:70:BE:54:6C:99:E1:2E:E6:4F:95:2B:65:7F:3F:F2:2C:50:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cebe396-6333-3713-89ba-e7f64b5badcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:866c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:a5:f5:65:a4:25:ca:39:d9:f4:59:e7:6a:93:2b:b0:6a:22: c3:63:a8:49:b8:96:e6:b6:b0:59:15:cf:39:6e:32:0d:14:d6: bc:ce:38:3b:1e:a5:e0:35:bc:bc:32:93:3c:42:17:81:bb:84: 63:90:60:08:3c:d5:7a:26:79:1e:90:ed:43:fd:22:19:a5:bc: 9b:43:75:c5:0a:4b:4f:3e:79:9c:f2:f0:3b:74:c5:9f:2c:2d: 96:78:dd:ff:d9:4e:48:d8:6c:df:df:18:54:0f:17:1f:4d:6e: 51:92:22:14:15:f8:5c:9e:34:58:27:d9:80:af:98:8e:60:c4: fc:ae:40:4a:72:7f:4b:88:af:5d:ab:21:9c:c3:c8:35:3e:c2: 36:88:dc:d4:26:5b:f2:01:7a:e6:d7:39:86:12:0d:03:15:cf: 75:4b:97:94:55:f4:e6:da:01:94:90:e5:2a:c8:1f:64:6c:3f: 57:65:d0:e1:04:20:23:7b:e1:20:8e:9d:33:e1:a2:6f:c3:35: c5:35:e1:2f:66:34:07:0a:13:ee:c0:2c:db:b8:68:0b:16:5a: 1a:88:5a:46:5e:47:f4:e0:2c:c3:32:f8:29:70:a0:34:38:e5: 66:3a:0c:b2:61:4a:09:72:b6:c7:1b:55:5a:68:d1:00:3b:f3: 3a:1f:02:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pjmo488iYx36TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk OWE4MWU3ZTMtNjEyZS00YzIxLTg1Y2MtNTk2NjczMDc2YjY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7G2Dw/ZNcIeAIPL9kMZq3eR5bHl+b7zMzB8 BdEbH22gdlACJwtmoodG7UdRHLPI9DzRowwk5Wr9wc/5k5w+SNF0BnW9tzEIBmKm Rw+KeU7pekI5zOwJRZf7+CwIHuSK9vbi9If1htlAT2dbe9Ee2YwqiYa87CmL3RWL eeys8bJOUYXOIr7ZzHbjlHn9n1JlroXAn2SsheAQZVSpHEBi2/d7LHj/EesxvyHc oKuOuRz9Pl0GpADk8VB/SQe5Upv01AmwtFaBsXJEUCruVNPCj9Pxvoos37UOyCnn gaseGYJPeHbhDAACwxq0cdNk85N/VGAPMTZcG20DzgDwikVG3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP4McL5UbJnhLuZPlStlfz/yLFBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NlYmUzOTYtNjMzMy0z NzEzLTg5YmEtZTdmNjRiNWJhZGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYZs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANql9WWkJco52fRZ52qTK7BqIsNjqEm4lua2sFkVzzluMg0U1rzO ODsepeA1vLwykzxCF4G7hGOQYAg81XomeR6Q7UP9IhmlvJtDdcUKS08+eZzy8Dt0 xZ8sLZZ43f/ZTkjYbN/fGFQPFx9NblGSIhQV+FyeNFgn2YCvmI5gxPyuQEpyf0uI r12rIZzDyDU+wjaI3NQmW/IBeubXOYYSDQMVz3VLl5RV9ObaAZSQ5SrIH2RsP1dl 0OEEICN74SCOnTPhom/DNcU14S9mNAcKE+7ALNu4aAsWWhqIWkZeR/TgLMMy+Clw oDQ45WY6DLJhSglytscbVVpo0QA78zofAoI= -----END CERTIFICATE-----Generated at Sun Apr 13 03:27:52 2025 by rpki-client