$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ace35b2-b9cd-3618-85c2-a20c79d812d7.roa File: 5ace35b2-b9cd-3618-85c2-a20c79d812d7.roa (raw, json) Hash identifier: jCCiVrn1HgmUTcVFd4C8yQcOu20SWcGUL1AWXVyeV/k= Subject key identifier: 37:F5:8B:62:D5:09:E5:D2:42:2B:5A:33:3C:6B:0B:D6:60:F0:04:63 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DA59EE3E298B82E1B0F7C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ace35b2-b9cd-3618-85c2-a20c79d812d7.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:2a7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:a5:9e:e3:e2:98:b8:2e:1b:0f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=268a3fc7-0c67-44b7-9a5f-3644f54610c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b7:18:a0:67:9f:a9:ca:61:da:d0:45:d6:38: 13:63:14:f4:c2:69:e1:e6:33:f5:fe:a9:b7:a1:1a: 7f:06:d1:19:63:e0:d5:ec:0b:cd:b5:96:1e:18:7b: ad:f4:41:ac:05:8f:34:57:8a:83:fe:f4:c4:41:7a: f2:5c:d7:ad:d6:4b:67:d1:21:1f:cb:4c:d6:dd:a9: 86:04:a0:a1:8f:f3:ed:3e:56:64:d0:30:77:5a:27: 40:eb:2e:0f:1b:82:2f:64:69:95:0f:7c:5d:62:b9: f9:a6:ed:5d:86:42:dd:40:54:45:57:a3:b8:f6:42: 08:2c:a3:ca:7e:92:8c:35:53:75:32:f2:da:f3:7e: 58:98:13:58:3b:a4:c0:64:bd:53:9e:03:56:85:41: 62:58:0b:fd:34:40:6d:20:59:50:fa:f7:50:c8:f8: 33:78:cb:0a:b9:92:13:c6:0f:0a:dc:b3:da:57:78: 23:71:c0:b2:a7:84:dc:c3:82:14:58:19:a4:da:0c: 0e:b2:24:5b:0d:89:5e:75:40:20:ae:81:39:e7:28: 4d:4b:c6:07:2e:30:67:b4:82:0d:04:55:aa:5a:43: 5c:38:da:fa:fb:47:fd:df:ff:6b:a2:fa:6c:1b:56: 12:cc:d6:94:c3:a6:df:3e:2a:5b:ae:a6:d3:ba:84: 83:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F5:8B:62:D5:09:E5:D2:42:2B:5A:33:3C:6B:0B:D6:60:F0:04:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5ace35b2-b9cd-3618-85c2-a20c79d812d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:2a7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ff:db:fb:12:47:a6:5a:40:b0:48:2a:6f:a2:bd:b5:86:ea: df:6e:91:03:00:fb:4f:75:95:f9:1f:dd:34:b3:be:b9:a3:8e: ed:ec:f2:ab:15:96:55:9e:0b:5a:37:dd:a2:71:c7:4e:66:48: 22:45:c3:df:63:79:36:bd:03:6a:31:e3:2c:d0:77:b4:0e:f8: 21:56:27:09:25:01:6b:5c:77:c1:55:7e:ed:9f:a5:83:b1:a7: fb:5e:2a:b6:6a:ce:b6:14:a7:bb:c9:4d:80:77:52:3e:27:d2: 38:15:7b:00:36:72:a6:ad:ef:c6:fd:ef:95:ce:c5:ac:12:f5: 1f:fd:d5:6f:84:2d:f2:45:8d:13:6d:2f:f4:a6:8e:d5:36:27: 7f:4f:b2:12:a6:90:e8:04:ce:31:4d:46:46:e4:11:1a:63:38: e4:18:25:e7:ff:28:92:c6:19:fe:b3:1e:fd:08:0c:1f:9d:52: d9:71:fd:c7:62:80:18:5e:b3:58:0c:f5:2e:08:14:a5:aa:33: 1b:fb:9e:88:b8:cf:3a:5f:d3:52:06:ee:bd:9b:ab:f6:d9:70: 81:e1:a8:f0:e2:6a:b2:4c:7b:b5:89:e9:47:70:38:e3:9b:29: 52:83:45:8c:cf:96:f1:ec:76:24:67:75:fa:5a:63:77:42:2b: 70:13:57:15 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebaWe4+KYuC4bD3wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MjY4YTNmYzctMGM2Ny00NGI3LTlhNWYtMzY0NGY1NDYxMGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbcYoGefqcph2tBF1jgTYxT0wmnh5jP1/qm3 oRp/BtEZY+DV7AvNtZYeGHut9EGsBY80V4qD/vTEQXryXNet1ktn0SEfy0zW3amG BKChj/PtPlZk0DB3WidA6y4PG4IvZGmVD3xdYrn5pu1dhkLdQFRFV6O49kIILKPK fpKMNVN1MvLa835YmBNYO6TAZL1TngNWhUFiWAv9NEBtIFlQ+vdQyPgzeMsKuZIT xg8K3LPaV3gjccCyp4Tcw4IUWBmk2gwOsiRbDYledUAgroE55yhNS8YHLjBntIIN BFWqWkNcONr6+0f93/9rovpsG1YSzNaUw6bfPipbrqbTuoSDNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDf1i2LVCeXSQitaMzxrC9Zg8ARjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWFjZTM1YjItYjljZC0z NjE4LTg1YzItYTIwYzc5ZDgxMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQKn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAH/2/sSR6ZaQLBIKm+ivbWG6t9ukQMA+091lfkf3TSzvrmjju3s 8qsVllWeC1o33aJxx05mSCJFw99jeTa9A2ox4yzQd7QO+CFWJwklAWtcd8FVfu2f pYOxp/teKrZqzrYUp7vJTYB3Uj4n0jgVewA2cqat78b975XOxawS9R/91W+ELfJF jRNtL/SmjtU2J39PshKmkOgEzjFNRkbkERpjOOQYJef/KJLGGf6zHv0IDB+dUtlx /cdigBhes1gM9S4IFKWqMxv7noi4zzpf01IG7r2bq/bZcIHhqPDiarJMe7WJ6Udw OOObKVKDRYzPlvHsdiRndfpaY3dCK3ATVxU= -----END CERTIFICATE-----Generated at Sun Feb 16 21:02:28 2025 by rpki-client