$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4426bc63-9253-3f87-a53a-1c2674c9d7a1.roa File: 4426bc63-9253-3f87-a53a-1c2674c9d7a1.roa (raw, json) Hash identifier: sG2adxEquLI4zG1CszLqxX2JAJJHXhLU/gbNfAgxeH0= Subject key identifier: 7C:2E:8F:47:17:C1:33:E6:65:D0:B6:F6:DA:3B:5B:40:B8:AB:4B:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D6E10DF2010CF48B6BB40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4426bc63-9253-3f87-a53a-1c2674c9d7a1.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:82b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:6e:10:df:20:10:cf:48:b6:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=df70c80c-5584-4b40-a51b-6c7f6e473b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f7:f1:8e:b4:04:40:4d:d0:8a:0f:45:7f:09: fb:d8:d6:0b:93:96:d0:78:b1:23:59:52:d3:c8:c3: a7:75:92:e7:8f:fb:89:10:c0:bf:0c:9d:7f:e6:80: c0:6a:c2:f7:3a:30:e7:20:3e:a1:26:b2:a1:25:ac: c1:17:ce:77:a6:9b:93:45:e6:04:2f:2c:92:06:25: 9a:87:d4:5b:c8:ae:73:d5:19:5f:c3:54:2e:22:21: 95:e0:81:1c:42:5a:1c:78:f8:68:6b:d9:8a:b8:33: 47:a5:ae:9c:8f:66:a1:fd:b0:d9:13:79:fd:26:ae: db:b4:49:38:a5:ac:69:aa:a2:e6:12:05:24:0d:3a: c5:21:91:53:59:08:e6:9e:14:17:bf:e6:5b:bb:72: a0:af:ce:a1:ca:7a:aa:e3:19:34:fc:8c:01:0a:fe: da:4e:80:f7:25:36:6d:d1:49:df:1d:5a:51:51:68: bf:f4:3d:6a:b8:99:66:90:3c:8b:0c:dc:d3:bd:33: 65:68:71:36:a1:23:a5:b5:da:76:25:a3:a6:aa:4b: d3:ec:5c:88:99:f2:e6:76:b7:8a:76:fd:26:26:0b: bb:ca:89:65:79:11:ce:90:99:69:2f:3c:7b:b7:a3: 25:eb:33:aa:8e:bd:14:29:e5:a5:95:ac:b7:bd:3a: 8c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:2E:8F:47:17:C1:33:E6:65:D0:B6:F6:DA:3B:5B:40:B8:AB:4B:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4426bc63-9253-3f87-a53a-1c2674c9d7a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:82b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a3:0f:3b:66:c2:64:f4:6e:9a:31:dc:d4:7b:f2:13:c2:aa: 6e:89:15:4f:f3:05:52:7c:76:db:49:7e:d3:32:4f:b1:01:e2: 6d:9f:92:68:9f:10:c8:79:78:44:08:fb:df:f6:59:97:8a:5d: 4c:d9:95:9a:99:0e:7e:ff:6c:5d:6c:80:4c:3d:48:1c:24:eb: e2:66:0c:48:93:5f:1d:ea:ea:f8:f7:ed:24:bf:3a:df:c5:cd: 9a:b6:c2:9f:87:84:33:a4:f2:1e:68:82:a5:0b:1b:a3:36:3b: 24:7f:60:bb:3a:a9:b1:ef:1f:fa:9a:1a:28:69:92:83:02:06: 8d:0d:0c:0b:3b:8f:cf:a1:e2:fe:95:e5:df:9d:ec:0d:69:26: ea:1e:47:56:e9:20:02:a1:25:94:f8:5a:a4:af:d5:9a:c1:a2: 02:95:b6:38:3a:f5:7a:98:d4:6b:c7:ee:14:a5:7f:91:ec:25: 0f:95:e5:23:c3:e2:1a:85:1f:81:93:7e:36:f9:e9:4b:b4:72: b2:70:71:c8:9f:34:c8:11:c7:c5:ba:a0:56:0f:95:01:ca:7a: f7:27:89:37:24:81:d2:9e:b9:8a:9f:c0:1e:bf:21:b7:e4:e0: e3:12:76:4f:a8:27:b8:cf:91:13:55:ad:a1:76:79:78:19:2a: 88:ea:58:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebW4Q3yAQz0i2u0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGY3MGM4MGMtNTU4NC00YjQwLWE1MWItNmM3ZjZlNDczYjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvfxjrQEQE3Qig9Ffwn72NYLk5bQeLEjWVLT yMOndZLnj/uJEMC/DJ1/5oDAasL3OjDnID6hJrKhJazBF853ppuTReYELyySBiWa h9RbyK5z1Rlfw1QuIiGV4IEcQlocePhoa9mKuDNHpa6cj2ah/bDZE3n9Jq7btEk4 paxpqqLmEgUkDTrFIZFTWQjmnhQXv+Zbu3Kgr86hynqq4xk0/IwBCv7aToD3JTZt 0UnfHVpRUWi/9D1quJlmkDyLDNzTvTNlaHE2oSOltdp2JaOmqkvT7FyImfLmdreK dv0mJgu7yolleRHOkJlpLzx7t6Ml6zOqjr0UKeWllay3vTqMFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHwuj0cXwTPmZdC29to7W0C4q0v2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDQyNmJjNjMtOTI1My0z Zjg3LWE1M2EtMWMyNjc0YzlkN2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYK1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAajDztmwmT0bpox3NR78hPCqm6JFU/zBVJ8dttJftMyT7EB4m2f kmifEMh5eEQI+9/2WZeKXUzZlZqZDn7/bF1sgEw9SBwk6+JmDEiTXx3q6vj37SS/ Ot/FzZq2wp+HhDOk8h5ogqULG6M2OyR/YLs6qbHvH/qaGihpkoMCBo0NDAs7j8+h 4v6V5d+d7A1pJuoeR1bpIAKhJZT4WqSv1ZrBogKVtjg69XqY1GvH7hSlf5HsJQ+V 5SPD4hqFH4GTfjb56Uu0crJwccifNMgRx8W6oFYPlQHKevcniTckgdKeuYqfwB6/ Ibfk4OMSdk+oJ7jPkRNVraF2eXgZKojqWBk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:36:35 2025 by rpki-client