$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa File: 3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa (raw, json) Hash identifier: 0UakL0lqQdh2KOdJ3hGmTXCSHIReyrbkM8aU5b5rTQ8= Subject key identifier: 87:0E:6B:43:81:F6:FC:10:1D:88:AB:CF:C1:CA:48:7E:A0:C1:F5:B8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858493C09457E3D1837DCB156E140 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 33657 IP address blocks: 2001:559:a03b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:45:7e:3d:18:37:dc:b1:56:e1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=c089eef3-e0b3-40e7-9d34-4c68443c425c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d8:79:9d:ad:38:a0:34:73:e4:d4:bc:2d:a4: b3:11:0d:68:34:de:dd:d2:bd:59:70:70:84:65:56: 85:3e:43:b5:f3:19:b9:dc:e2:36:7e:f3:fc:3f:a5: fc:29:98:4b:31:7f:7e:9f:c1:6f:c0:e1:98:94:47: a2:2b:7c:e8:0e:c6:c2:6f:0d:9b:63:1f:f8:35:b6: e0:6f:df:96:d2:8b:49:ce:92:a9:0d:35:5a:0f:26: 0b:2d:44:c8:33:30:6e:02:28:30:4a:89:27:fb:08: 8a:a6:2f:42:f0:a4:6e:9b:c0:22:fa:8e:b4:d8:cb: 00:19:06:61:8a:18:09:ca:c5:bf:2c:49:b4:89:67: 4f:0a:e7:57:fa:d9:1c:76:f6:94:4f:8c:f6:2c:21: c7:ff:a7:b0:0c:2c:40:44:11:33:fc:4b:82:d4:47: e2:ce:c7:14:9e:62:2b:27:16:e0:42:3d:3c:6e:bf: 60:6e:c1:43:47:cb:72:a8:c2:85:b9:60:7a:cc:3b: 47:4a:75:e8:ae:0d:ec:0c:2c:e3:d5:2c:f1:f1:74: 3d:de:1c:de:13:54:77:5d:42:af:73:d6:94:18:d5: c5:e2:0d:d1:a8:a5:c7:1a:7a:2e:46:db:7d:85:44: f6:56:db:b8:b0:bd:56:10:1b:d8:38:c1:a9:ad:e3: c5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:0E:6B:43:81:F6:FC:10:1D:88:AB:CF:C1:CA:48:7E:A0:C1:F5:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3cfae7d7-f978-31d6-b065-81ebd99a8b86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a03b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a0:20:77:9d:b1:40:1c:a0:cc:ad:83:e1:f4:11:0f:df:c2: 31:e7:4f:3c:6f:31:11:76:43:d1:10:f8:61:81:db:1a:cc:f2: 1e:2c:74:4e:54:01:e0:36:db:e4:77:d1:c7:bc:54:c3:85:b2: b7:43:e9:f7:30:73:da:33:1a:75:6a:ae:8e:d4:82:a8:e9:57: ac:4f:c2:a0:36:7c:bd:dd:73:db:08:c0:97:52:8b:dc:f1:2a: 83:97:80:df:fc:3c:71:7f:5c:88:68:a5:49:c2:e5:9b:48:51: ae:94:1d:4d:61:11:eb:fd:3d:91:a6:34:9b:78:4a:a9:96:db: 9d:59:eb:5a:53:75:6c:4a:0d:aa:1a:ce:63:8f:76:ca:7f:67: ad:aa:8b:7e:44:a5:f5:d7:bd:04:c3:1f:94:5d:9f:b3:29:7e: a5:98:6a:39:14:1d:d1:a7:3d:35:37:15:31:4b:28:3e:66:b8: ea:5b:27:f2:85:1d:a8:0e:69:d5:ae:50:c3:bf:9d:0c:4d:d3: 4d:ae:42:73:d4:5c:d3:52:05:6e:60:a3:3b:9f:f5:37:67:09: ae:00:06:06:c4:66:09:e3:e8:9c:42:f9:9d:68:f0:35:94:fe: e8:09:93:a1:6b:e3:92:0b:7b:d2:73:ba:62:5b:56:f3:de:42: 48:14:f7:a3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEk8CUV+PRg33LFW4UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk YzA4OWVlZjMtZTBiMy00MGU3LTlkMzQtNGM2ODQ0M2M0MjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dh5na04oDRz5NS8LaSzEQ1oNN7d0r1ZcHCE ZVaFPkO18xm53OI2fvP8P6X8KZhLMX9+n8FvwOGYlEeiK3zoDsbCbw2bYx/4Nbbg b9+W0otJzpKpDTVaDyYLLUTIMzBuAigwSokn+wiKpi9C8KRum8Ai+o602MsAGQZh ihgJysW/LEm0iWdPCudX+tkcdvaUT4z2LCHH/6ewDCxARBEz/EuC1EfizscUnmIr JxbgQj08br9gbsFDR8tyqMKFuWB6zDtHSnXorg3sDCzj1Szx8XQ93hzeE1R3XUKv c9aUGNXF4g3RqKXHGnouRtt9hUT2Vtu4sL1WEBvYOMGprePFnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIcOa0OB9vwQHYirz8HKSH6gwfW4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NmYWU3ZDctZjk3OC0z MWQ2LWIwNjUtODFlYmQ5OWE4Yjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaA7 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEqgIHedsUAcoMytg+H0EQ/fwjHnTzxvMRF2Q9EQ+GGB2xrM8h4s dE5UAeA22+R30ce8VMOFsrdD6fcwc9ozGnVqro7UgqjpV6xPwqA2fL3dc9sIwJdS i9zxKoOXgN/8PHF/XIhopUnC5ZtIUa6UHU1hEev9PZGmNJt4SqmW251Z61pTdWxK DaoazmOPdsp/Z62qi35EpfXXvQTDH5Rdn7MpfqWYajkUHdGnPTU3FTFLKD5muOpb J/KFHagOadWuUMO/nQxN002uQnPUXNNSBW5gozuf9TdnCa4ABgbEZgnj6JxC+Z1o 8DWU/ugJk6Fr45ILe9JzumJbVvPeQkgU96M= -----END CERTIFICATE-----Generated at Sat Apr 12 13:54:38 2025 by rpki-client