$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eee91e3-869a-30db-a501-7a2ff132b5d4.roa File: 3eee91e3-869a-30db-a501-7a2ff132b5d4.roa (raw, json) Hash identifier: ejZbWFo2E+YsHy6g6cRT0WFrvtNmyr569F9e4dIQu24= Subject key identifier: 4D:E7:9B:F8:C5:38:E3:E6:0A:47:AF:A7:1C:F4:FE:54:CC:3E:DD:A8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CC57758C748E48611FFC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eee91e3-869a-30db-a501-7a2ff132b5d4.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 2001:559:c291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:c5:77:58:c7:48:e4:86:11:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=da4951ac-0b3d-4d95-bf93-5ad5d8bb6320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:2c:18:ea:0e:2d:f7:3a:a9:e9:9d:10:76: 74:a6:f2:08:29:a5:29:3a:a8:65:8e:d0:1f:d6:11: 06:70:0b:52:09:48:0a:7a:85:cc:a2:68:25:eb:de: 3b:eb:1f:e4:b5:1d:16:1d:13:6c:38:89:7c:6a:c4: f0:83:b1:b1:11:32:13:e8:a6:8e:3b:b9:07:31:0e: 00:ee:3c:1d:ad:29:d1:e1:02:6d:57:14:cf:a2:98: cd:ff:f3:23:ef:cb:62:8c:73:27:e4:95:15:d4:38: 06:fd:0e:b3:bc:1b:16:d3:67:9e:61:57:6f:81:35: a2:e6:fc:b5:bd:38:93:fd:f0:72:84:33:29:cc:82: 19:01:68:33:ea:b5:2a:99:4d:5e:05:64:f8:b9:ad: e1:18:45:cd:d3:eb:85:88:45:46:4d:a4:a0:a1:d5: 8b:73:7f:f0:0d:08:f7:c2:d9:5f:61:23:94:42:da: c8:39:34:50:82:ea:ba:98:fa:d9:1e:5f:ae:6a:d4: de:9c:95:26:c3:af:97:5f:d2:7d:2f:fb:f7:bb:71: f4:0a:1d:0c:4b:7e:d0:3c:6e:12:00:d7:8b:40:31: 1d:a5:fe:4b:63:6b:ff:f2:cc:08:e7:87:48:aa:d1: 52:dd:64:68:b3:84:a9:7a:bd:dc:42:4c:05:f8:3a: 03:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E7:9B:F8:C5:38:E3:E6:0A:47:AF:A7:1C:F4:FE:54:CC:3E:DD:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3eee91e3-869a-30db-a501-7a2ff132b5d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c291::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:11:35:6d:f1:ab:1e:2f:a2:b2:2c:d3:94:1d:24:04:2a:fc: 2f:68:24:f2:4e:ca:74:fc:73:fa:a7:54:95:50:47:f8:91:68: 93:cd:7b:c6:c0:5a:f5:b4:46:8b:ad:82:f5:cf:fe:0f:c0:b6: 63:de:74:9f:4d:de:0b:17:9f:6f:9c:65:43:64:bb:c4:aa:08: 9c:3a:98:35:ab:c9:1d:c5:b9:6c:94:a0:55:6e:63:9d:68:a0: b0:3c:28:20:61:3a:1b:0a:c5:8c:74:6b:47:84:df:39:52:1b: dd:3b:ec:ec:55:a4:58:de:0c:a0:98:85:80:dd:6c:2a:4c:7b: df:7c:5d:cb:d6:85:b2:9e:32:82:07:c1:98:e8:5b:0f:2a:e1: 1f:ac:ce:ed:08:57:5f:68:ac:e0:49:1a:fb:75:db:cb:c6:bb: 63:90:ca:2b:e0:95:b1:5a:d4:b8:90:34:b6:c8:b0:f3:1e:4e: 6d:d2:44:fc:10:5e:16:3b:cf:3c:51:38:6c:53:80:4c:83:28: 1b:10:2b:7b:38:7d:41:29:65:9f:f4:21:0a:02:2e:15:68:9d: 8e:cd:3d:c5:8b:fd:e2:c2:22:b0:70:12:4e:77:18:9e:35:d9: d6:3e:a9:70:ec:1e:9b:d1:97:60:a1:f7:08:a9:b2:64:11:d7: 30:00:e8:53 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebMV3WMdI5IYR/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGE0OTUxYWMtMGIzZC00ZDk1LWJmOTMtNWFkNWQ4YmI2MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNYsGOoOLfc6qemdEHZ0pvIIKaUpOqhljtAf 1hEGcAtSCUgKeoXMomgl69476x/ktR0WHRNsOIl8asTwg7GxETIT6KaOO7kHMQ4A 7jwdrSnR4QJtVxTPopjN//Mj78tijHMn5JUV1DgG/Q6zvBsW02eeYVdvgTWi5vy1 vTiT/fByhDMpzIIZAWgz6rUqmU1eBWT4ua3hGEXN0+uFiEVGTaSgodWLc3/wDQj3 wtlfYSOUQtrIOTRQguq6mPrZHl+uatTenJUmw6+XX9J9L/v3u3H0Ch0MS37QPG4S ANeLQDEdpf5LY2v/8swI54dIqtFS3WRos4Sper3cQkwF+DoDoQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE3nm/jFOOPmCkevpxz0/lTMPt2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2VlZTkxZTMtODY5YS0z MGRiLWE1MDEtN2EyZmYxMzJiNWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcKR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFMRNW3xqx4vorIs05QdJAQq/C9oJPJOynT8c/qnVJVQR/iRaJPN e8bAWvW0RoutgvXP/g/AtmPedJ9N3gsXn2+cZUNku8SqCJw6mDWryR3FuWyUoFVu Y51ooLA8KCBhOhsKxYx0a0eE3zlSG9077OxVpFjeDKCYhYDdbCpMe998XcvWhbKe MoIHwZjoWw8q4R+szu0IV19orOBJGvt128vGu2OQyivglbFa1LiQNLbIsPMeTm3S RPwQXhY7zzxROGxTgEyDKBsQK3s4fUEpZZ/0IQoCLhVonY7NPcWL/eLCIrBwEk53 GJ412dY+qXDsHpvRl2Ch9wipsmQR1zAA6FM= -----END CERTIFICATE-----Generated at Sun Feb 16 20:35:12 2025 by rpki-client