$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5298c84c-847b-38b4-a433-7b5b2c72f168.roa File: 5298c84c-847b-38b4-a433-7b5b2c72f168.roa (raw, json) Hash identifier: 99bvz6sWPjOeL4JGu2ARbei/Z4IVnAmffg5bVLA9NAs= Subject key identifier: 3B:09:8C:A9:6C:7F:A1:22:45:3B:2C:E3:32:59:9A:41:CC:90:EB:42 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DE22994C90F7F330D3C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5298c84c-847b-38b4-a433-7b5b2c72f168.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:484::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:e2:29:94:c9:0f:7f:33:0d:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c0351af8-3814-4b8e-9995-045ce41bf590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:53:45:57:f8:10:c7:44:b3:03:87:29:b2:8f: 5a:17:5b:1d:05:5e:a5:d5:b5:2d:fc:5d:5d:89:75: f0:80:a4:7a:b0:c9:3f:b8:92:1b:6d:c2:71:f4:a2: 54:ae:97:b2:24:21:63:13:21:0a:d8:7d:c0:18:09: 4b:a2:17:47:41:75:df:0a:66:41:0b:83:38:37:ee: ea:7d:33:3b:4f:74:d4:66:8c:ae:98:87:23:1d:ee: 58:fa:22:c3:5d:9c:91:25:64:48:7b:85:19:91:f6: 8c:12:a7:22:90:30:b4:13:1d:79:6e:02:d5:79:10: b2:18:67:78:2c:87:b0:45:e9:c6:27:a4:28:b6:4a: 1e:f9:03:ae:73:e0:7f:50:35:50:8d:99:b0:cc:9e: 86:89:ea:14:7a:af:6f:33:3a:44:bf:02:de:7d:7d: 03:6b:53:98:cd:5b:9f:33:a7:5a:12:d9:d4:91:12: 55:37:50:b8:78:68:2a:5a:c8:5c:30:cb:e5:97:41: 6e:39:82:31:69:c1:83:96:2e:34:74:3f:b0:04:56: de:5b:8a:ee:b0:49:51:29:eb:1e:5b:dc:6e:f1:3c: ed:7f:84:7a:2e:65:6a:f0:ce:78:0e:c0:01:cb:47: 33:7b:a2:b5:f0:d0:85:77:82:33:8d:67:56:be:b0: 7f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:09:8C:A9:6C:7F:A1:22:45:3B:2C:E3:32:59:9A:41:CC:90:EB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5298c84c-847b-38b4-a433-7b5b2c72f168.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:484::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6c:c1:8f:5b:73:2a:11:7d:7a:7d:25:a3:45:da:65:4b:25: 5d:92:a8:4c:ca:ce:d1:d8:cd:05:bb:d3:4c:c5:c7:92:30:3c: 77:24:51:8e:0a:2c:dd:2b:81:24:2e:11:0c:1c:8a:42:33:bc: 10:9a:3d:a1:7a:75:99:4b:f2:cf:de:34:5d:ad:d6:94:bc:1a: 55:f7:ad:e7:7e:ac:f1:a4:3e:cb:5d:0d:a0:3b:2d:d1:d5:4c: 65:12:6b:31:7c:a4:a6:af:8b:f2:5e:e6:41:02:fb:55:42:b8: 7b:a3:2d:56:11:42:8f:10:64:3d:15:1b:e1:7b:ce:ff:22:5f: f2:e9:b5:22:c3:8a:dd:49:7e:33:26:f0:39:a8:99:49:10:f0: 5c:cd:10:45:73:3d:e3:46:76:e9:b8:23:28:65:86:75:bb:8b: d2:b8:33:d9:d9:b2:c1:9c:d8:ce:d3:05:87:4d:98:04:6b:74: 21:d6:8c:6f:b1:73:6c:3d:3f:3d:4f:e8:4d:e6:eb:7c:61:11: 5c:7c:54:94:21:c5:12:9a:f9:e1:75:cd:fc:52:d8:be:e5:44: d6:e9:d7:91:10:da:fb:6c:6a:5d:e7:fe:bf:68:57:70:33:db: 13:57:64:ec:2e:fa:39:62:e5:f8:6d:d2:78:87:ba:63:5c:a2: cb:64:fe:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebeIplMkPfzMNPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzAzNTFhZjgtMzgxNC00YjhlLTk5OTUtMDQ1Y2U0MWJmNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlNFV/gQx0SzA4cpso9aF1sdBV6l1bUt/F1d iXXwgKR6sMk/uJIbbcJx9KJUrpeyJCFjEyEK2H3AGAlLohdHQXXfCmZBC4M4N+7q fTM7T3TUZoyumIcjHe5Y+iLDXZyRJWRIe4UZkfaMEqcikDC0Ex15bgLVeRCyGGd4 LIewRenGJ6Qotkoe+QOuc+B/UDVQjZmwzJ6GieoUeq9vMzpEvwLefX0Da1OYzVuf M6daEtnUkRJVN1C4eGgqWshcMMvll0FuOYIxacGDli40dD+wBFbeW4rusElRKese W9xu8Tztf4R6LmVq8M54DsABy0cze6K18NCFd4IzjWdWvrB/0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDsJjKlsf6EiRTss4zJZmkHMkOtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTI5OGM4NGMtODQ3Yi0z OGI0LWE0MzMtN2I1YjJjNzJmMTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQSE MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHJswY9bcyoRfXp9JaNF2mVLJV2SqEzKztHYzQW700zFx5IwPHck UY4KLN0rgSQuEQwcikIzvBCaPaF6dZlL8s/eNF2t1pS8GlX3red+rPGkPstdDaA7 LdHVTGUSazF8pKavi/Je5kEC+1VCuHujLVYRQo8QZD0VG+F7zv8iX/LptSLDit1J fjMm8DmomUkQ8FzNEEVzPeNGdum4IyhlhnW7i9K4M9nZssGc2M7TBYdNmARrdCHW jG+xc2w9Pz1P6E3m63xhEVx8VJQhxRKa+eF1zfxS2L7lRNbp15EQ2vtsal3n/r9o V3Az2xNXZOwu+jli5fht0niHumNcostk/nk= -----END CERTIFICATE-----Generated at Sun Apr 6 23:00:27 2025 by rpki-client