$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f82d46c-15eb-30ae-9bd5-23fbb8ad1f3b.roa File: 3f82d46c-15eb-30ae-9bd5-23fbb8ad1f3b.roa (raw, json) Hash identifier: D5z69BGlVeoZB0bJgoyp5eG1bCTmNAoozRTqZYoIt/s= Subject key identifier: 09:5B:79:E5:D6:48:2E:CA:15:27:B1:4B:5B:0E:18:F8:65:A2:3A:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DAFF1A7BFC36EB2C3AA80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f82d46c-15eb-30ae-9bd5-23fbb8ad1f3b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:8785::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:af:f1:a7:bf:c3:6e:b2:c3:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=3a8e5a87-8ee3-43e8-954f-2c75ae7773c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:0d:56:4b:ee:4b:3b:a4:f2:1e:56:19:98:4a: 1c:e4:ab:c5:f1:f3:26:1c:af:83:e3:8e:07:9b:fa: c9:aa:be:f6:19:ce:51:bb:9a:39:30:31:24:d9:20: 8d:9c:e7:db:82:3f:28:53:a5:df:47:66:7e:dd:92: 6f:1b:bf:e7:9f:65:4b:bc:8d:bf:81:26:df:16:d8: 1e:b8:94:8d:f1:4d:72:88:fb:05:4e:f3:eb:1f:a6: 5f:ad:8d:85:97:f2:7a:19:4d:f7:47:02:73:e0:f9: 2c:05:b6:48:ea:4d:3b:c5:75:22:09:7a:1d:9e:ed: 06:0b:eb:3c:b9:03:a3:af:da:47:0b:cb:2d:dd:e9: 29:18:6a:9a:8a:71:2b:7c:b1:fa:91:eb:08:5d:23: 07:0c:5d:33:99:2e:59:4d:7c:a5:19:c8:06:24:88: b0:71:37:1f:07:a4:92:9a:61:06:bf:fe:2f:03:1c: 14:25:e8:bb:5f:ff:bc:8a:ee:fb:26:b0:dd:87:b8: 82:f2:58:60:6f:eb:95:8b:69:22:8c:b7:f8:1c:12: 57:4e:94:1e:a0:1b:29:40:a6:99:71:05:14:45:1c: ee:18:d8:e8:fc:86:d4:34:08:b5:be:e0:8c:53:90: ff:a9:77:cd:f2:33:7c:fa:25:46:3b:37:30:5c:00: 4f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5B:79:E5:D6:48:2E:CA:15:27:B1:4B:5B:0E:18:F8:65:A2:3A:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3f82d46c-15eb-30ae-9bd5-23fbb8ad1f3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8785::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:53:83:9c:a0:d1:70:37:c5:21:e5:2f:af:7c:58:38:d4:6a: b1:f5:b6:ad:ef:4f:81:17:d2:d9:a3:11:ac:71:53:64:6b:1e: fb:70:e5:b5:e9:f5:dc:2c:1f:72:cc:34:77:ec:9d:5c:83:2f: 77:36:ba:83:69:c6:d0:d2:50:e7:8c:ec:b5:f0:86:fb:1a:b3: c1:b2:bc:51:9a:ee:c1:8a:84:53:d2:60:bb:f0:0c:11:da:7f: 8b:06:fa:62:e6:58:ae:e3:35:f6:d6:2f:54:63:20:a3:36:43: 29:c3:1d:3b:b1:67:83:96:d2:6c:9b:06:73:cf:e8:3b:79:d1: 81:5a:56:04:a0:be:f1:27:5d:3a:02:27:68:ec:c1:60:b1:8a: cb:a2:e2:12:1e:8a:37:00:a8:b7:88:f3:e3:40:04:11:3b:2c: d8:5f:16:d8:7e:9c:46:43:2b:a8:f7:ea:9f:e3:83:84:2a:c5: e7:af:0f:7b:20:ee:f1:b1:90:d0:3c:df:2f:98:cd:61:43:e5: 3d:a8:62:58:ab:79:5c:e9:49:21:16:6e:bc:f8:5c:fb:4c:62: 91:29:2c:76:94:a9:64:0d:d2:e8:b6:36:2c:94:25:28:22:4c: 0a:d9:f8:aa:c9:aa:dc:a7:21:10:86:c2:e1:37:e8:b9:8d:46: 64:ec:56:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEieba/xp7/DbrLDqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk M2E4ZTVhODctOGVlMy00M2U4LTk1NGYtMmM3NWFlNzc3M2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQ1WS+5LO6TyHlYZmEoc5KvF8fMmHK+D444H m/rJqr72Gc5Ru5o5MDEk2SCNnOfbgj8oU6XfR2Z+3ZJvG7/nn2VLvI2/gSbfFtge uJSN8U1yiPsFTvPrH6ZfrY2Fl/J6GU33RwJz4PksBbZI6k07xXUiCXodnu0GC+s8 uQOjr9pHC8st3ekpGGqainErfLH6kesIXSMHDF0zmS5ZTXylGcgGJIiwcTcfB6SS mmEGv/4vAxwUJei7X/+8iu77JrDdh7iC8lhgb+uVi2kijLf4HBJXTpQeoBspQKaZ cQUURRzuGNjo/IbUNAi1vuCMU5D/qXfN8jN8+iVGOzcwXABPJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAlbeeXWSC7KFSexS1sOGPhlojr2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2Y4MmQ0NmMtMTVlYi0z MGFlLTliZDUtMjNmYmI4YWQxZjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYeF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIlTg5yg0XA3xSHlL698WDjUarH1tq3vT4EX0tmjEaxxU2RrHvtw 5bXp9dwsH3LMNHfsnVyDL3c2uoNpxtDSUOeM7LXwhvsas8GyvFGa7sGKhFPSYLvw DBHaf4sG+mLmWK7jNfbWL1RjIKM2QynDHTuxZ4OW0mybBnPP6Dt50YFaVgSgvvEn XToCJ2jswWCxisui4hIeijcAqLeI8+NABBE7LNhfFth+nEZDK6j36p/jg4Qqxeev D3sg7vGxkNA83y+YzWFD5T2oYlireVzpSSEWbrz4XPtMYpEpLHaUqWQN0ui2NiyU JSgiTArZ+KrJqtynIRCGwuE36LmNRmTsVpg= -----END CERTIFICATE-----Generated at Sun Apr 6 09:38:19 2025 by rpki-client