$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/582ca250-38ce-361c-93e3-f321a04f2218.roa File: 582ca250-38ce-361c-93e3-f321a04f2218.roa (raw, json) Hash identifier: PMeGJDWB2iK6AKCfd6ZmBtChkPfB5yTF9cbysAt5Ros= Subject key identifier: 62:71:E9:38:E6:51:3E:E2:2A:D3:A4:97:87:74:11:E5:F0:B9:8D:BE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D4BB31E6620F0A6C27F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/582ca250-38ce-361c-93e3-f321a04f2218.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22258 IP address blocks: 2001:559:c158::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:4b:b3:1e:66:20:f0:a6:c2:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=dae6b36d-08ca-4817-a4b5-0c81c40814a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9e:65:8f:90:ae:da:8b:4d:48:4d:44:8e:30: a5:93:b4:9d:49:97:42:79:6e:7f:b3:11:cc:7b:71: 08:be:b9:8c:ff:61:3b:cd:a7:fa:e8:83:a6:f8:61: df:b3:87:6e:25:01:c1:98:9b:e6:71:0f:c8:62:fb: 05:4e:c6:2c:b7:e5:5f:ac:14:03:16:2d:dc:0c:cf: 01:b1:cb:ea:67:ae:e5:2d:aa:4e:03:97:48:41:f0: 1a:95:40:84:11:5b:8b:02:fc:5c:fd:7e:c9:44:0f: c3:e4:d2:71:67:61:51:67:30:2e:11:c0:84:e1:2e: 66:4e:06:2d:51:06:f3:c5:b8:06:04:f5:fb:e8:89: 83:39:6d:4a:25:2b:69:c5:75:d0:97:af:5b:03:89: 51:f1:f8:3e:a2:45:56:e0:17:9b:5a:99:af:65:23: 8c:8e:e5:6a:69:38:b6:1c:4e:38:4f:4a:e5:b3:2a: 57:fa:3c:84:59:75:59:84:c2:f2:bd:15:2c:c0:16: 14:59:29:45:b7:c2:b5:e2:69:23:63:bb:0e:ed:e3: 75:3c:24:25:a9:29:89:49:f7:40:6c:31:f4:01:ad: 07:bf:0c:00:fb:dd:16:6b:2d:9d:8b:ac:90:2b:aa: c9:d8:35:31:25:20:42:f2:60:ad:6e:c6:99:e0:69: 34:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:71:E9:38:E6:51:3E:E2:2A:D3:A4:97:87:74:11:E5:F0:B9:8D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/582ca250-38ce-361c-93e3-f321a04f2218.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c158::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4c:cf:2d:e9:99:f5:58:a0:7f:21:c0:d4:7b:4f:d3:d8:6a: d6:c5:80:2e:16:5d:70:4a:c1:d0:39:00:0f:c4:8d:28:60:4a: 23:3d:9d:14:bf:70:75:ec:8d:44:57:9e:7b:dc:90:09:29:41: cd:18:c5:b2:68:ae:43:18:87:88:ef:9d:26:7d:af:b4:e5:42: 9f:4a:9c:56:7d:c0:fc:c2:1a:ab:70:60:64:a4:a9:ed:4f:cc: e8:e9:58:68:a5:e5:64:5a:f5:68:af:9e:c3:80:87:46:c8:8d: f3:c8:99:39:29:00:8c:9e:66:b9:e1:2e:ad:5c:32:ca:5a:9e: 37:64:52:75:05:24:aa:bd:77:c7:07:c1:61:54:ce:7e:7e:9a: d8:9c:f4:66:0c:ad:76:8d:c8:84:7a:36:80:7c:88:7e:3a:3b: 34:2c:f6:d2:c7:a2:6f:5a:ca:3e:55:db:ba:31:a8:8c:7e:fc: d4:23:5c:c5:fb:88:b3:27:1d:2e:0c:a5:fb:72:d1:15:ac:92: f4:8c:71:4c:bd:29:8d:a4:73:82:88:bb:97:17:61:c6:b5:19: 3f:b8:09:57:16:c7:d8:2e:f6:fa:ca:77:3d:db:03:22:ce:62: e4:51:80:19:5a:29:f7:35:3f:5a:f6:5e:d2:8f:e0:4b:01:00: 2a:3b:79:b7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebUuzHmYg8KbCf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGFlNmIzNmQtMDhjYS00ODE3LWE0YjUtMGM4MWM0MDgxNGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ5lj5Cu2otNSE1EjjClk7SdSZdCeW5/sxHM e3EIvrmM/2E7zaf66IOm+GHfs4duJQHBmJvmcQ/IYvsFTsYst+VfrBQDFi3cDM8B scvqZ67lLapOA5dIQfAalUCEEVuLAvxc/X7JRA/D5NJxZ2FRZzAuEcCE4S5mTgYt UQbzxbgGBPX76ImDOW1KJStpxXXQl69bA4lR8fg+okVW4BebWpmvZSOMjuVqaTi2 HE44T0rlsypX+jyEWXVZhMLyvRUswBYUWSlFt8K14mkjY7sO7eN1PCQlqSmJSfdA bDH0Aa0HvwwA+90Way2di6yQK6rJ2DUxJSBC8mCtbsaZ4Gk0+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGJx6TjmUT7iKtOkl4d0EeXwuY2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTgyY2EyNTAtMzhjZS0z NjFjLTkzZTMtZjMyMWEwNGYyMjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcFY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABBMzy3pmfVYoH8hwNR7T9PYatbFgC4WXXBKwdA5AA/EjShgSiM9 nRS/cHXsjURXnnvckAkpQc0YxbJorkMYh4jvnSZ9r7TlQp9KnFZ9wPzCGqtwYGSk qe1PzOjpWGil5WRa9WivnsOAh0bIjfPImTkpAIyeZrnhLq1cMspanjdkUnUFJKq9 d8cHwWFUzn5+mtic9GYMrXaNyIR6NoB8iH46OzQs9tLHom9ayj5V27oxqIx+/NQj XMX7iLMnHS4Mpfty0RWskvSMcUy9KY2kc4KIu5cXYca1GT+4CVcWx9gu9vrKdz3b AyLOYuRRgBlaKfc1P1r2XtKP4EsBACo7ebc= -----END CERTIFICATE-----Generated at Mon Apr 7 09:48:54 2025 by rpki-client