$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5933674e-a139-3d6a-9420-6b75a3e20e53.roa File: 5933674e-a139-3d6a-9420-6b75a3e20e53.roa (raw, json) Hash identifier: FMKHiSECUd/lQWAxSfYKjz9ajNwp2hDuUiGZY/cFjcM= Subject key identifier: 38:89:50:CA:57:4F:D9:27:6F:B6:31:3D:2A:D4:24:76:59:82:7D:80 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BB8805E4BFED88C594E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5933674e-a139-3d6a-9420-6b75a3e20e53.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7016 IP address blocks: 2001:559:32e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:b8:80:5e:4b:fe:d8:8c:59:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ab9f658c-dbcb-4c3e-acfa-7555df2e707f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:a1:72:1a:50:35:50:f4:12:22:42:2c:89: a0:1b:8e:66:c1:53:e8:78:16:7c:7e:7e:0d:b8:cb: 32:9c:cb:ca:b0:b9:aa:55:c6:1a:82:ec:0b:85:25: 80:fd:d5:42:d1:14:6c:81:cd:24:a2:aa:e2:c6:66: 19:f6:9b:6a:a1:c0:d2:b3:56:8d:a3:fa:5c:31:29: 39:05:72:00:76:d6:5c:19:92:35:51:be:f5:1b:6d: c2:41:fb:27:51:3b:50:a6:41:f3:98:73:5b:3f:7d: 08:ad:6e:ce:b7:a3:ee:3d:f4:83:0c:34:a6:d0:75: 28:15:65:77:ac:07:72:7a:a7:be:e6:f6:94:7d:92: 80:e4:c7:5a:6b:01:d2:7c:f9:0a:60:7b:7b:40:03: f2:fa:e8:a0:f0:4d:18:68:25:8b:94:b8:15:31:c2: 2f:59:99:65:cb:da:29:57:c3:47:57:06:0a:ed:bd: a2:09:d8:94:b4:a0:d9:e1:4a:c9:db:26:7e:9f:68: e7:9e:36:40:eb:b8:ad:20:4d:c8:52:c1:50:6c:18: 67:b4:b7:4b:e5:2a:fe:27:bd:74:d0:47:9f:25:88: 6b:04:33:e0:2e:c5:e6:32:1f:e1:ad:cf:3a:d9:af: 03:f1:72:9e:1a:96:56:64:58:a1:88:55:03:b6:b7: ac:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:89:50:CA:57:4F:D9:27:6F:B6:31:3D:2A:D4:24:76:59:82:7D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5933674e-a139-3d6a-9420-6b75a3e20e53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:32e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:80:41:f5:72:32:83:38:49:d9:3b:33:12:35:0d:8f:4b:ab: 5b:32:5a:12:8a:0e:6c:6e:5d:98:81:ea:81:be:e7:34:61:90: 03:31:f5:4d:be:d1:89:6f:37:12:a0:c0:fb:48:b3:7d:11:ef: 0a:a2:1a:09:8d:ce:a5:99:5e:23:9c:11:f3:fc:ad:51:34:f7: 72:5b:84:44:d3:bf:9b:47:98:88:08:51:f0:42:7f:05:41:dc: 9b:d7:4b:57:02:56:5a:d7:42:f3:b4:73:4a:b8:91:87:53:06: 28:6a:52:d5:86:1b:1b:b6:34:b3:dd:d7:a2:fe:5f:d6:65:41: 20:52:37:0b:12:a3:20:b6:00:51:f8:40:b3:a2:24:d5:3a:fc: 6b:e9:32:9e:e9:55:ed:44:fe:e5:99:29:0e:d1:a2:a9:9d:47: 41:7d:c6:01:64:15:24:7b:3d:42:2e:d3:59:63:61:eb:0e:4a: 7d:d6:f5:2e:e4:24:51:57:1a:83:e6:6d:1a:7a:3e:25:ad:3e: 94:1e:d3:4f:7c:8e:f5:4b:9b:13:22:67:f9:1f:29:cb:5a:14: 7a:79:fd:52:d0:d0:9c:ad:58:24:83:21:d6:37:1b:55:14:16: 84:a1:ae:78:05:c7:5d:10:5e:b4:f1:e4:8e:f9:ee:7d:a9:78: 44:82:79:04 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea7iAXkv+2IxZTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YWI5ZjY1OGMtZGJjYi00YzNlLWFjZmEtNzU1NWRmMmU3MDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LmhchpQNVD0EiJCLImgG45mwVPoeBZ8fn4N uMsynMvKsLmqVcYaguwLhSWA/dVC0RRsgc0koqrixmYZ9ptqocDSs1aNo/pcMSk5 BXIAdtZcGZI1Ub71G23CQfsnUTtQpkHzmHNbP30IrW7Ot6PuPfSDDDSm0HUoFWV3 rAdyeqe+5vaUfZKA5MdaawHSfPkKYHt7QAPy+uig8E0YaCWLlLgVMcIvWZlly9op V8NHVwYK7b2iCdiUtKDZ4UrJ2yZ+n2jnnjZA67itIE3IUsFQbBhntLdL5Sr+J710 0EefJYhrBDPgLsXmMh/hrc862a8D8XKeGpZWZFihiFUDtresawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDiJUMpXT9knb7YxPSrUJHZZgn2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTkzMzY3NGUtYTEzOS0z ZDZhLTk0MjAtNmI3NWEzZTIwZTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQMu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADOAQfVyMoM4Sdk7MxI1DY9Lq1syWhKKDmxuXZiB6oG+5zRhkAMx 9U2+0YlvNxKgwPtIs30R7wqiGgmNzqWZXiOcEfP8rVE093JbhETTv5tHmIgIUfBC fwVB3JvXS1cCVlrXQvO0c0q4kYdTBihqUtWGGxu2NLPd16L+X9ZlQSBSNwsSoyC2 AFH4QLOiJNU6/GvpMp7pVe1E/uWZKQ7RoqmdR0F9xgFkFSR7PUIu01ljYesOSn3W 9S7kJFFXGoPmbRp6PiWtPpQe0098jvVLmxMiZ/kfKctaFHp5/VLQ0JytWCSDIdY3 G1UUFoShrngFx10QXrTx5I757n2peESCeQQ= -----END CERTIFICATE-----Generated at Mon Apr 7 06:20:11 2025 by rpki-client