$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497425c9-ab16-3597-a620-6e1e432a2039.roa File: 497425c9-ab16-3597-a620-6e1e432a2039.roa (raw, json) Hash identifier: a+QOi+IAiLM09fsJwLqaJCja0kPFiiXk2jWFAy9RYMs= Subject key identifier: EA:35:CF:12:2D:F1:23:57:97:54:8D:9C:4A:7B:02:78:31:F2:92:F5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C2836EB5E2D1F48115800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497425c9-ab16-3597-a620-6e1e432a2039.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33668 IP address blocks: 2001:559:451::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:28:36:eb:5e:2d:1f:48:11:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ef5d3e57-9338-4282-9bf3-8159f0614aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:59:d7:d2:83:e7:3b:50:26:27:3f:da:00:47: ea:fd:3f:c2:8b:bb:7e:8d:63:4f:04:8b:fb:3b:dd: da:e8:ea:8d:b9:49:40:82:c2:53:c3:ce:a5:ca:a2: 8c:b0:54:b2:29:15:ac:bb:f0:2d:6c:42:bc:f9:96: e9:9a:4e:2f:d4:c7:eb:e7:ce:24:78:8c:68:59:c2: bc:60:c5:5d:27:b8:90:40:29:20:4c:8a:5d:93:7a: c4:72:ee:da:01:07:48:fe:bb:be:d6:6c:a5:ac:0b: a0:a0:3d:17:93:c2:23:64:61:52:45:e7:d8:32:df: 9e:59:53:dd:49:79:63:05:09:86:7c:aa:bd:8a:d3: 2f:6f:40:c0:58:77:47:eb:81:a1:15:e7:d3:d4:1b: 87:49:c1:dc:80:0e:da:17:be:18:a3:b0:0e:14:08: 00:c5:af:41:c1:9f:de:83:f4:55:bb:94:7e:95:aa: 84:93:b3:96:21:83:ee:bd:e8:59:43:a9:c7:b2:88: eb:2d:83:9d:d7:12:96:1c:65:fb:43:1e:44:a3:53: cf:b5:48:56:0e:ce:c9:a2:61:c6:67:48:8c:fe:99: c4:08:c3:fa:54:ba:32:0b:9c:56:3c:a2:77:8e:e4: 3f:3f:58:ee:d4:cd:13:1f:06:0f:b4:9b:49:e4:72: 5d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:35:CF:12:2D:F1:23:57:97:54:8D:9C:4A:7B:02:78:31:F2:92:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/497425c9-ab16-3597-a620-6e1e432a2039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:451::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:64:91:9d:44:f8:c7:a4:7d:cc:09:75:d5:06:f1:e3:8f:4f: a0:42:c2:41:6a:d5:b9:4c:9c:2c:c9:af:f3:2c:98:0a:da:d8: 7e:52:6f:38:98:9c:a0:1b:3e:af:c5:d5:eb:07:d5:42:de:22: cc:1d:b3:5f:49:0e:34:84:5e:ac:a1:33:2b:db:78:82:ac:b6: 24:9d:db:02:82:c2:56:18:18:f4:47:4e:7f:bd:38:89:4d:33: 5b:fa:48:1e:a6:c8:8d:cb:e4:c0:99:0b:b6:f7:3c:16:d6:20: 7d:2d:42:e3:93:4e:56:48:fa:c5:4a:cf:e5:20:4a:78:77:94: 69:9d:e0:c3:77:db:b2:58:92:e4:fb:74:f4:9c:14:3f:82:b9: e5:b1:9e:5b:8a:77:a4:17:81:7a:86:b6:26:de:cf:ac:79:05: 86:0d:f6:73:ee:61:2f:4d:d9:e1:9b:a3:f7:4f:13:85:15:9f: d6:7d:6f:78:17:58:bc:07:5c:71:03:0a:70:1a:ed:ba:24:fb: dc:3a:c2:1d:53:37:20:90:8d:83:a6:fe:ea:e1:d8:0a:11:d6: e8:0f:1b:b8:d5:4b:d7:d1:9a:61:73:f5:8c:6c:76:09:7d:73: e9:47:9b:d3:85:ff:be:dc:e3:52:f3:e7:37:ca:b5:ee:45:8c: 56:7b:b4:62 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebCg2614tH0gRWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZWY1ZDNlNTctOTMzOC00MjgyLTliZjMtODE1OWYwNjE0YWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVnX0oPnO1AmJz/aAEfq/T/Ci7t+jWNPBIv7 O93a6OqNuUlAgsJTw86lyqKMsFSyKRWsu/AtbEK8+Zbpmk4v1Mfr584keIxoWcK8 YMVdJ7iQQCkgTIpdk3rEcu7aAQdI/ru+1mylrAugoD0Xk8IjZGFSRefYMt+eWVPd SXljBQmGfKq9itMvb0DAWHdH64GhFefT1BuHScHcgA7aF74Yo7AOFAgAxa9BwZ/e g/RVu5R+laqEk7OWIYPuvehZQ6nHsojrLYOd1xKWHGX7Qx5Eo1PPtUhWDs7JomHG Z0iM/pnECMP6VLoyC5xWPKJ3juQ/P1ju1M0THwYPtJtJ5HJdgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOo1zxIt8SNXl1SNnEp7Angx8pL1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDk3NDI1YzktYWIxNi0z NTk3LWE2MjAtNmUxZTQzMmEyMDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQRR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADhkkZ1E+MekfcwJddUG8eOPT6BCwkFq1blMnCzJr/MsmAra2H5S bziYnKAbPq/F1esH1ULeIswds19JDjSEXqyhMyvbeIKstiSd2wKCwlYYGPRHTn+9 OIlNM1v6SB6myI3L5MCZC7b3PBbWIH0tQuOTTlZI+sVKz+UgSnh3lGmd4MN327JY kuT7dPScFD+CueWxnluKd6QXgXqGtibez6x5BYYN9nPuYS9N2eGbo/dPE4UVn9Z9 b3gXWLwHXHEDCnAa7bok+9w6wh1TNyCQjYOm/urh2AoR1ugPG7jVS9fRmmFz9Yxs dgl9c+lHm9OF/77c41Lz5zfKte5FjFZ7tGI= -----END CERTIFICATE-----Generated at Mon Apr 7 16:28:52 2025 by rpki-client