$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/428596b2-2e87-3853-b5a5-549d319c3919.roa File: 428596b2-2e87-3853-b5a5-549d319c3919.roa (raw, json) Hash identifier: JVRdvv5LGnUPKiuqGXMMOQTOl/i9aeABDV0i7IL4RJI= Subject key identifier: E6:43:08:CF:87:9A:E9:9C:36:93:AD:96:7A:0B:10:65:B7:3C:B0:25 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F6B244CB6B7E5B63DB4C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/428596b2-2e87-3853-b5a5-549d319c3919.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 2601:1c1:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:b2:44:cb:6b:7e:5b:63:db:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=6c82c7a4-c5db-46ae-b326-db104eeae42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:c5:51:61:37:67:a5:c3:c3:a3:6a:1d:db: 87:88:1a:35:cd:b2:82:5f:99:81:5c:a3:0d:cf:a9: 52:c9:65:36:6d:79:97:01:b4:23:cf:a4:9c:5f:2b: bd:21:41:55:4c:f1:17:c4:87:47:17:5f:4b:6d:3f: 54:36:aa:e1:62:c8:7d:80:a1:2a:c2:10:79:64:85: 80:29:75:0b:e0:e8:be:b3:bd:11:f2:94:91:f1:e8: ab:3a:1a:43:23:cd:ca:1e:d7:0d:58:67:db:74:eb: 7d:18:f6:5b:e2:3c:73:af:5c:41:6e:b4:73:5a:25: 79:f1:9d:ba:af:d2:3c:19:99:fa:c6:20:af:36:dc: ff:bc:2c:7b:48:7e:2f:67:46:05:bf:0f:46:8d:95: 4a:74:38:46:08:27:d7:d9:fb:4c:32:52:ee:9a:a0: a8:0b:0b:05:ab:41:95:59:f1:21:83:77:a2:8c:96: 95:29:2d:3a:d1:9b:80:0c:bf:56:19:44:c3:77:b6: ac:60:ad:a6:0c:b0:cb:a1:e1:f2:dd:e1:69:49:ab: 22:ca:e1:55:1c:be:f4:c6:27:5d:be:ec:4c:88:1f: de:38:72:1d:95:36:30:fa:13:a6:ee:17:92:f3:70: e9:48:91:2f:63:66:ce:68:f0:42:a7:89:ba:a8:d7: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:43:08:CF:87:9A:E9:9C:36:93:AD:96:7A:0B:10:65:B7:3C:B0:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/428596b2-2e87-3853-b5a5-549d319c3919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:1c1:4000::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:52:a8:df:38:98:c2:91:0d:75:65:9c:f5:11:6e:a1:db:70: 61:2d:88:02:75:17:36:43:4a:45:9e:03:a5:23:7f:70:5d:c5: 62:a7:fb:ee:7a:21:23:27:d6:6c:c2:55:99:c9:5b:9e:e3:f1: 75:8a:a6:2d:c6:14:89:70:e6:64:7b:ed:15:3a:2c:99:29:2f: 13:94:0c:af:c7:07:53:b0:7a:34:07:ad:81:d4:e5:5f:dd:66: 68:d9:ea:68:e0:fc:51:37:24:6f:89:bf:0c:8d:9b:53:05:fc: 00:b5:c3:b7:5e:d4:ca:95:51:24:0a:ad:4f:93:9e:da:f7:70: a2:4b:5e:8e:18:cc:ee:6f:e1:11:d1:54:25:30:b2:ac:a4:0e: 78:11:06:1d:71:58:c2:e0:e4:f6:15:95:53:ef:93:16:68:5c: 4c:6d:9e:80:8e:bb:42:5b:db:a7:2c:97:c6:0d:6e:f7:2d:2c: c8:a7:e5:8c:9f:4d:8d:ea:42:1b:1f:23:a2:15:b1:59:ed:b8: 78:a9:0c:ed:bb:89:3e:8c:e7:cc:b0:25:06:fe:c3:36:9d:0b: b0:c9:67:37:6c:dd:fc:8c:d8:69:5d:a8:b8:d2:87:5d:04:f5: 65:7c:3e:bd:d0:a7:9d:f5:9c:a7:d5:29:c9:a8:a5:e7:9c:da: 5f:44:96:13 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEj09rJEy2t+W2PbTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NmM4MmM3YTQtYzVkYi00NmFlLWIzMjYtZGIxMDRlZWFlNDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBfFUWE3Z6XDw6NqHduHiBo1zbKCX5mBXKMN z6lSyWU2bXmXAbQjz6ScXyu9IUFVTPEXxIdHF19LbT9UNqrhYsh9gKEqwhB5ZIWA KXUL4Oi+s70R8pSR8eirOhpDI83KHtcNWGfbdOt9GPZb4jxzr1xBbrRzWiV58Z26 r9I8GZn6xiCvNtz/vCx7SH4vZ0YFvw9GjZVKdDhGCCfX2ftMMlLumqCoCwsFq0GV WfEhg3eijJaVKS060ZuADL9WGUTDd7asYK2mDLDLoeHy3eFpSasiyuFVHL70xidd vuxMiB/eOHIdlTYw+hOm7heS83DpSJEvY2bOaPBCp4m6qNcZuQIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFOZDCM+HmumcNpOtlnoLEGW3PLAlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDI4NTk2YjItMmU4Ny0z ODUzLWI1YTUtNTQ5ZDMxOWMzOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEBwUAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAUFKo3ziYwpENdWWc9RFuodtwYS2IAnUXNkNKRZ4DpSN/cF3FYqf7 7nohIyfWbMJVmclbnuPxdYqmLcYUiXDmZHvtFTosmSkvE5QMr8cHU7B6NAetgdTl X91maNnqaOD8UTckb4m/DI2bUwX8ALXDt17UypVRJAqtT5Oe2vdwoktejhjM7m/h EdFUJTCyrKQOeBEGHXFYwuDk9hWVU++TFmhcTG2egI67QlvbpyyXxg1u9y0syKfl jJ9NjepCGx8johWxWe24eKkM7buJPoznzLAlBv7DNp0LsMlnN2zd/IzYaV2ouNKH XQT1ZXw+vdCnnfWcp9Upyail55zaX0SWEw== -----END CERTIFICATE-----Generated at Sun Apr 13 09:23:45 2025 by rpki-client