$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a9360a-5311-3f71-a8c1-9d655306ec9c.roa File: 53a9360a-5311-3f71-a8c1-9d655306ec9c.roa (raw, json) Hash identifier: 4iDtyzzdZ13r1Mp+Qk7LzS77w9FmIS2YXQN2CJEOQv8= Subject key identifier: DD:06:92:F5:76:2E:A9:E3:EC:ED:56:8B:10:6C:EC:94:C1:A0:1E:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E278F512FB22334A7A1C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a9360a-5311-3f71-a8c1-9d655306ec9c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 2001:559:569::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:27:8f:51:2f:b2:23:34:a7:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=6dda1cc5-c530-448f-817a-0c47224fc8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a9:46:85:ce:39:e4:eb:58:18:58:c0:18:7f: 55:49:6a:88:3a:e1:65:2b:ae:48:16:19:06:a6:e1: ae:04:4e:b2:7a:d9:a6:98:68:66:9b:d6:b0:db:ba: 2e:e9:7d:94:cf:4a:b1:2b:80:9c:c0:8f:ce:13:9d: 1d:42:ef:b0:33:d2:d7:e6:f8:1f:61:d3:78:47:c6: 84:03:05:31:74:96:ad:52:17:5c:37:a1:14:9e:9e: 44:d8:fc:65:79:76:8e:96:b8:f6:16:90:5f:42:30: ad:7d:cf:fc:cc:9a:cb:85:18:41:e8:8e:7d:00:5f: 0c:d6:a0:f6:d9:cb:65:3f:78:0b:21:95:a5:2d:0b: 3d:9d:c9:89:74:a3:3a:35:c1:f7:0b:29:d9:99:2b: b9:9f:6b:8e:65:8c:ee:fb:fc:8e:14:a8:42:5e:37: 20:91:ee:e3:89:fb:76:82:95:d4:8d:3a:8e:5e:e5: 90:bf:b0:31:e3:f3:ff:35:1f:b3:c8:b0:d6:0f:0a: 68:f6:1a:da:c0:e1:d8:a6:38:7f:ec:d9:cc:47:fc: d5:b6:af:c4:b7:86:4b:49:10:41:d7:19:77:fc:59: 29:82:b2:7d:71:b8:72:21:56:1b:4f:22:76:c1:b7: ae:12:9c:7c:73:c7:60:db:10:43:2d:de:58:6c:e0: 0b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:06:92:F5:76:2E:A9:E3:EC:ED:56:8B:10:6C:EC:94:C1:A0:1E:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a9360a-5311-3f71-a8c1-9d655306ec9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:569::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c5:b5:4f:4e:a1:02:95:a0:50:d8:94:69:0d:ed:93:dc:e0: 3e:29:79:03:cc:20:96:04:4f:2f:b6:ab:98:08:d5:42:28:33: 0d:e5:c4:b4:f4:45:44:a9:e2:bb:83:24:a9:53:cd:e4:e4:59: af:6d:a5:11:5a:4d:0b:d3:35:04:ac:c0:12:64:4d:02:47:90: af:90:81:a2:b1:0a:e8:d6:6c:a5:be:fd:ea:c9:d9:e5:d4:6c: 40:be:c0:68:85:45:73:7d:37:58:bd:a4:cf:1d:b6:b5:68:e3: 88:d0:ad:91:87:d1:8f:cd:51:65:4b:91:98:01:41:f6:2f:7e: 1e:26:99:6e:0c:d6:a2:a6:88:6b:e8:23:ef:11:f0:ec:5f:b2: d3:2b:13:e0:80:77:60:66:fd:67:6f:cc:87:e2:08:8c:08:a1: 9b:ae:45:09:1d:14:80:1c:88:7e:8b:19:7f:5d:2f:03:63:81: a5:c7:c4:f5:49:7f:fc:2b:83:43:19:22:84:62:d7:b0:f3:5c: c9:22:69:6e:bd:2b:f5:15:9f:33:79:22:b1:8b:46:ae:82:fd: 7d:a6:6b:b8:7d:1a:ad:0b:e7:d5:07:32:88:39:6a:3f:68:53: b9:04:19:89:fa:4b:fb:10:05:7d:1e:ac:27:02:17:b6:9b:71: 87:f9:d1:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebiePUS+yIzSnocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NmRkYTFjYzUtYzUzMC00NDhmLTgxN2EtMGM0NzIyNGZjOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7alGhc455OtYGFjAGH9VSWqIOuFlK65IFhkG puGuBE6yetmmmGhmm9aw27ou6X2Uz0qxK4CcwI/OE50dQu+wM9LX5vgfYdN4R8aE AwUxdJatUhdcN6EUnp5E2PxleXaOlrj2FpBfQjCtfc/8zJrLhRhB6I59AF8M1qD2 2ctlP3gLIZWlLQs9ncmJdKM6NcH3CynZmSu5n2uOZYzu+/yOFKhCXjcgke7jift2 gpXUjTqOXuWQv7Ax4/P/NR+zyLDWDwpo9hrawOHYpjh/7NnMR/zVtq/Et4ZLSRBB 1xl3/FkpgrJ9cbhyIVYbTyJ2wbeuEpx8c8dg2xBDLd5YbOALswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN0GkvV2Lqnj7O1WixBs7JTBoB5QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTNhOTM2MGEtNTMxMS0z ZjcxLWE4YzEtOWQ2NTUzMDZlYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQVp MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHPFtU9OoQKVoFDYlGkN7ZPc4D4peQPMIJYETy+2q5gI1UIoMw3l xLT0RUSp4ruDJKlTzeTkWa9tpRFaTQvTNQSswBJkTQJHkK+QgaKxCujWbKW+/erJ 2eXUbEC+wGiFRXN9N1i9pM8dtrVo44jQrZGH0Y/NUWVLkZgBQfYvfh4mmW4M1qKm iGvoI+8R8OxfstMrE+CAd2Bm/WdvzIfiCIwIoZuuRQkdFIAciH6LGX9dLwNjgaXH xPVJf/wrg0MZIoRi17DzXMkiaW69K/UVnzN5IrGLRq6C/X2ma7h9Gq0L59UHMog5 aj9oU7kEGYn6S/sQBX0erCcCF7abcYf50VU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:12:45 2025 by rpki-client