$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e2a27df-69ee-3ae9-af75-09a1a6825231.roa File: 4e2a27df-69ee-3ae9-af75-09a1a6825231.roa (raw, json) Hash identifier: QJ2HZoS2DFXRmtpshP9LNZLoW4w8PX4oQ+P34J7tU6g= Subject key identifier: 0D:ED:76:4B:82:1E:F6:6E:43:57:97:EB:21:B2:B5:9F:A7:9A:F3:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C33A5BC3FD8EF70CFB180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e2a27df-69ee-3ae9-af75-09a1a6825231.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:81b1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:33:a5:bc:3f:d8:ef:70:cf:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7538742c-2d5e-4e62-99f1-0df1873eb8da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ee:57:d1:03:1c:e1:e4:99:be:0f:ea:a1:05: a5:a2:16:d0:01:8e:be:27:23:07:d5:03:8e:ea:1d: 10:5d:39:4e:c5:e6:d7:9b:7e:f2:b6:91:3f:b6:92: 31:45:70:6d:be:2c:21:ca:39:40:fc:9e:e3:75:9b: b2:de:b2:01:e7:25:d5:78:84:77:69:d1:39:d8:d8: 7c:d9:21:fc:c4:10:76:5e:c6:b8:6e:04:79:08:75: 5e:dd:45:aa:f1:9a:e5:79:f0:ef:85:ee:7c:c8:59: 63:28:0a:0e:91:35:c3:02:a7:49:86:a9:1b:8b:3b: 5e:91:9c:a2:65:65:2e:1c:26:7e:69:9f:8f:84:79: 74:d3:38:9e:14:4e:f7:04:c5:1c:89:38:bc:96:23: a6:33:b1:9f:be:d8:76:06:bf:86:d3:fd:ac:81:02: 39:fb:72:b7:35:3c:23:b6:28:81:a6:05:9c:10:d3: 9b:c6:9e:7d:92:d8:e1:17:95:f6:8f:0a:9f:51:5a: 40:e7:91:65:9e:0f:97:0e:c5:0c:e2:e0:a3:80:67: 67:a2:d1:2e:4d:a4:86:6f:93:1e:0d:80:f8:bc:da: 0d:59:1f:54:f4:fa:bb:0f:10:47:a2:70:4b:e5:7c: 91:f9:f4:54:85:33:a0:f5:7c:25:d5:e5:f1:db:fe: bd:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:ED:76:4B:82:1E:F6:6E:43:57:97:EB:21:B2:B5:9F:A7:9A:F3:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e2a27df-69ee-3ae9-af75-09a1a6825231.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:81b1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8b:6a:3d:22:9e:4e:69:66:a6:f4:ee:f3:f4:28:a5:78:0c: 25:66:11:27:ee:35:e1:47:d8:b2:a6:a2:a4:94:bc:e7:b3:e0: e8:cc:4d:0f:88:d7:e1:4b:96:91:fc:a3:c9:78:44:65:c3:9b: c3:21:a1:24:01:dc:87:41:85:60:f8:dd:cf:b0:2d:6a:bd:2f: ad:45:3f:f8:3a:21:ef:15:c7:43:55:01:2a:c8:6b:b0:bd:61: 56:b9:fd:6e:3f:4f:48:eb:1d:86:4f:88:7a:78:df:a1:e1:74: ce:ec:a0:b9:ac:62:24:2a:d7:c8:6d:21:e9:15:19:4b:41:98: 02:0d:4d:18:c5:21:0f:03:dd:58:c6:ad:50:25:8f:78:dd:c5: 8a:cf:ac:8e:b6:fc:7f:c1:22:29:70:e2:a0:4c:3a:56:f8:54: ab:a0:91:87:aa:45:3d:e7:c8:e0:61:63:b4:eb:9f:e9:3f:4f: 32:12:2f:0a:79:80:54:5a:2f:61:f5:11:cb:20:1d:35:22:53: 46:8a:4e:c3:5b:1c:5f:e5:83:c9:b5:8b:f0:ff:79:40:37:51: ee:6e:90:6c:71:c5:b6:fd:0f:eb:9d:48:bb:ef:4a:c7:43:7c: 2c:2c:b9:b2:59:04:a7:6b:8d:6d:dc:c0:17:19:1f:bd:8f:39: 20:76:64:d4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebDOlvD/Y73DPsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NzUzODc0MmMtMmQ1ZS00ZTYyLTk5ZjEtMGRmMTg3M2ViOGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAme5X0QMc4eSZvg/qoQWlohbQAY6+JyMH1QOO 6h0QXTlOxebXm37ytpE/tpIxRXBtviwhyjlA/J7jdZuy3rIB5yXVeIR3adE52Nh8 2SH8xBB2Xsa4bgR5CHVe3UWq8ZrlefDvhe58yFljKAoOkTXDAqdJhqkbiztekZyi ZWUuHCZ+aZ+PhHl00zieFE73BMUciTi8liOmM7Gfvth2Br+G0/2sgQI5+3K3NTwj tiiBpgWcENObxp59ktjhF5X2jwqfUVpA55Flng+XDsUM4uCjgGdnotEuTaSGb5Me DYD4vNoNWR9U9Pq7DxBHonBL5XyR+fRUhTOg9Xwl1eXx2/69LQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA3tdkuCHvZuQ1eX6yGytZ+nmvM5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGUyYTI3ZGYtNjllZS0z YWU5LWFmNzUtMDlhMWE2ODI1MjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYGx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACuLaj0ink5pZqb07vP0KKV4DCVmESfuNeFH2LKmoqSUvOez4OjM TQ+I1+FLlpH8o8l4RGXDm8MhoSQB3IdBhWD43c+wLWq9L61FP/g6Ie8Vx0NVASrI a7C9YVa5/W4/T0jrHYZPiHp436HhdM7soLmsYiQq18htIekVGUtBmAINTRjFIQ8D 3VjGrVAlj3jdxYrPrI62/H/BIilw4qBMOlb4VKugkYeqRT3nyOBhY7Trn+k/TzIS Lwp5gFRaL2H1EcsgHTUiU0aKTsNbHF/lg8m1i/D/eUA3Ue5ukGxxxbb9D+udSLvv SsdDfCwsubJZBKdrjW3cwBcZH72POSB2ZNQ= -----END CERTIFICATE-----Generated at Sun Feb 16 20:55:07 2025 by rpki-client