$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/426f1ece-ef2a-3c6d-bb44-e900bd97aaa2.roa File: 426f1ece-ef2a-3c6d-bb44-e900bd97aaa2.roa (raw, json) Hash identifier: 9JrnvqAHc7d0uTHm+rjoJkFumj4TcRfPfDy2oVkj4YM= Subject key identifier: E3:82:B6:EA:9C:23:C5:7D:24:C7:0B:16:8C:A3:80:63:9C:C2:7E:F7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D895AF6B563FC3BD99400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/426f1ece-ef2a-3c6d-bb44-e900bd97aaa2.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33662 IP address blocks: 2001:559:85a9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:89:5a:f6:b5:63:fc:3b:d9:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5cb4f5e6-c61b-4371-bf8b-6864c68536b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:d8:f1:65:e7:e8:61:84:12:5c:05:d1:ec: 96:fe:d6:5f:90:7d:cb:cc:7a:c4:fd:d4:7c:45:3d: 18:14:ae:e8:17:b9:77:12:86:4a:0d:89:7b:f5:aa: 31:28:be:26:76:c2:49:0f:e8:d5:b7:1e:62:45:5a: 49:6c:c7:fb:96:9d:c4:a7:13:8b:36:ba:9c:3d:42: 27:f4:03:7b:5c:67:c2:b9:b4:e8:50:bf:d5:9c:7e: 56:5d:9e:2c:f4:f7:0c:c6:86:8d:49:8d:1c:11:2f: be:57:09:de:33:b8:83:38:90:cb:f9:5c:bc:1b:4e: 1a:49:9d:56:66:67:5b:af:55:ec:81:71:16:e2:0b: d3:ce:95:a3:55:0b:eb:9a:93:a0:06:73:6b:2b:60: fc:0a:1f:26:3f:34:c9:e0:6b:33:1c:0a:cb:2f:0d: 40:5a:dd:fe:8f:bc:33:9d:99:f3:e3:0b:62:83:65: 3a:21:18:7a:98:15:1b:5d:f7:2d:ad:b9:cf:12:33: d1:1a:fc:5d:f0:5a:36:c7:c1:4f:50:ac:81:9f:73: 8f:e5:a1:b4:b9:6b:0f:1f:d8:4a:43:01:c5:a9:84: 02:43:4d:e9:90:49:f3:1b:98:7b:6f:62:f6:d7:0d: 3a:fe:f8:92:e3:27:b0:e6:17:cd:10:79:55:81:04: 77:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:82:B6:EA:9C:23:C5:7D:24:C7:0B:16:8C:A3:80:63:9C:C2:7E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/426f1ece-ef2a-3c6d-bb44-e900bd97aaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:85a9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:07:08:4a:26:72:de:25:61:88:31:b5:05:57:bb:92:ae:38: 06:11:27:ad:71:b7:0b:6d:ec:2f:70:f1:2e:f2:61:25:23:60: 88:25:43:d7:cb:41:4a:95:94:d8:73:82:f2:b8:bf:71:04:84: e1:34:7e:92:72:43:02:84:1e:aa:57:32:ff:0a:3a:62:73:ff: 30:8a:74:ed:04:0f:45:8d:53:df:62:7a:92:56:34:8e:b5:bc: f5:dc:36:2f:aa:77:67:f1:3c:54:9d:d8:bf:9b:1c:27:18:58: c9:92:8a:49:df:67:f5:3b:ef:2b:da:b8:b7:a4:ab:d5:2d:ac: c7:f9:74:8d:fb:11:0d:cb:ae:d2:c1:d9:b7:9a:8d:c7:15:e0: 7f:8c:8f:15:d0:b6:d5:64:57:13:d9:c9:b5:07:7e:59:47:f1: ad:35:7b:b3:12:37:93:1d:77:b8:1d:da:0c:55:e2:09:2a:a7: 85:c7:ac:5c:c9:95:c2:99:02:b9:12:2f:d6:6b:03:a4:6f:7d: 54:7e:fd:b3:e1:4b:d2:19:73:40:c7:ea:d9:6c:39:3b:5d:f1: 14:db:42:8a:61:db:42:cc:19:9b:a9:15:77:d8:22:ce:5a:40: 35:81:29:e4:29:ca:26:a8:09:c5:43:86:26:1a:fb:d4:87:16: 5c:8f:14:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebYla9rVj/DvZlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NWNiNGY1ZTYtYzYxYi00MzcxLWJmOGItNjg2NGM2ODUzNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1TY8WXn6GGEElwF0eyW/tZfkH3LzHrE/dR8 RT0YFK7oF7l3EoZKDYl79aoxKL4mdsJJD+jVtx5iRVpJbMf7lp3EpxOLNrqcPUIn 9AN7XGfCubToUL/VnH5WXZ4s9PcMxoaNSY0cES++VwneM7iDOJDL+Vy8G04aSZ1W Zmdbr1XsgXEW4gvTzpWjVQvrmpOgBnNrK2D8Ch8mPzTJ4GszHArLLw1AWt3+j7wz nZnz4wtig2U6IRh6mBUbXfctrbnPEjPRGvxd8Fo2x8FPUKyBn3OP5aG0uWsPH9hK QwHFqYQCQ03pkEnzG5h7b2L21w06/viS4yew5hfNEHlVgQR32QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOOCtuqcI8V9JMcLFoyjgGOcwn73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI2ZjFlY2UtZWYyYS0z YzZkLWJiNDQtZTkwMGJkOTdhYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYWp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACwHCEomct4lYYgxtQVXu5KuOAYRJ61xtwtt7C9w8S7yYSUjYIgl Q9fLQUqVlNhzgvK4v3EEhOE0fpJyQwKEHqpXMv8KOmJz/zCKdO0ED0WNU99iepJW NI61vPXcNi+qd2fxPFSd2L+bHCcYWMmSiknfZ/U77yvauLekq9UtrMf5dI37EQ3L rtLB2beajccV4H+MjxXQttVkVxPZybUHfllH8a01e7MSN5Mdd7gd2gxV4gkqp4XH rFzJlcKZArkSL9ZrA6RvfVR+/bPhS9IZc0DH6tlsOTtd8RTbQoph20LMGZupFXfY Is5aQDWBKeQpyiaoCcVDhiYa+9SHFlyPFII= -----END CERTIFICATE-----Generated at Mon Apr 7 06:26:34 2025 by rpki-client