$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f22c41a-dec5-3ff5-b4f9-b34a9c30b377.roa File: 5f22c41a-dec5-3ff5-b4f9-b34a9c30b377.roa (raw, json) Hash identifier: 8AV+4+X7fSdQUpgv1o2lFgYsS/QPr79rR0Guf6DEbU0= Subject key identifier: C9:19:3E:03:9F:ED:30:0F:5E:01:F6:DA:7D:02:C7:56:B9:C2:63:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DB5B173967C7EA2564460 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f22c41a-dec5-3ff5-b4f9-b34a9c30b377.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:c53a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:b5:b1:73:96:7c:7e:a2:56:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=3e9bb6cb-bda8-4737-a24a-8ba42d79d979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:aa:39:82:22:a7:8b:ae:99:99:b7:b7:16:61: 26:52:87:ce:fa:d1:90:88:cc:d0:81:64:cb:c9:b8: ab:85:6d:cf:44:b4:38:c6:00:ab:5f:31:e3:82:0b: d6:8a:d2:c8:d1:74:dc:67:82:21:eb:fc:5c:d6:2f: b2:a0:23:be:3a:58:23:e5:79:20:36:52:ea:06:c2: 2a:4e:6d:1e:39:cb:b0:3f:47:4d:8c:17:45:a8:35: 75:bc:c8:92:39:d6:97:0e:5f:7d:d7:75:12:08:38: 82:53:62:7e:76:0b:d9:38:58:e5:58:58:46:23:19: 46:25:ea:76:fa:f5:16:65:8a:1b:8b:f6:14:7a:64: 37:45:37:19:cb:da:14:07:3f:ae:6b:89:40:ed:90: 62:ad:9f:d3:d6:65:4d:eb:b1:35:2f:ca:fe:85:26: ad:e3:36:72:03:07:04:96:31:46:fc:26:de:d5:b2: 3c:6a:80:16:cf:cf:ca:11:64:4a:d9:c6:67:3e:4d: c2:d3:0e:04:cf:c6:42:b4:f2:21:d4:f5:37:d3:4f: 89:9c:39:33:0d:1a:cd:a1:06:e2:76:9f:32:22:c8: 6a:4b:03:35:7f:18:b7:0b:97:5c:f4:b0:c4:25:47: a0:64:3d:8b:5d:4b:88:e1:27:26:c0:f1:8a:ce:75: 3a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:19:3E:03:9F:ED:30:0F:5E:01:F6:DA:7D:02:C7:56:B9:C2:63:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f22c41a-dec5-3ff5-b4f9-b34a9c30b377.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c53a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:fa:1b:33:fc:a1:44:2e:bb:08:27:b6:a9:32:f8:a5:7a:44: 65:46:9d:d7:86:9c:bc:9d:ae:a6:46:f1:2b:4f:30:df:bf:c8: 42:bb:da:5c:cc:44:05:26:c9:2d:32:95:c0:a6:6c:d5:f3:68: 3a:31:7b:ef:a1:57:91:b7:55:51:22:07:66:a3:ee:a3:ab:ae: 70:96:a1:36:a4:66:4e:7f:9c:d3:ce:72:e8:46:c9:b0:07:50: 8c:d9:3e:25:10:1e:16:08:98:e3:f1:a1:ce:66:fb:be:67:4d: 91:92:8d:fd:b4:d1:25:78:86:a3:f7:f7:24:50:a1:45:c9:ce: ca:8d:fc:a0:f6:37:3e:1c:16:85:ea:21:cd:5a:f9:80:d6:d1: 76:8e:4b:ae:13:72:2e:e3:85:70:1e:79:14:c8:c1:78:8d:70: a7:ce:83:86:2c:b4:bf:49:bc:b8:5f:90:a3:6d:7d:9c:9b:1b: 38:40:39:d8:07:11:29:33:bc:fb:65:ae:af:06:9d:99:71:f0: 3b:13:8d:f8:6a:6e:8b:6e:c1:c7:cb:eb:1e:c2:17:56:7e:42: 6f:70:cf:48:47:10:28:74:cd:2e:c1:1b:25:2e:9c:b5:3c:11: 37:59:62:fe:76:5b:6f:3d:98:b1:40:b4:e9:65:cc:9f:e9:e1: c5:e3:6b:56 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebbWxc5Z8fqJWRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk M2U5YmI2Y2ItYmRhOC00NzM3LWEyNGEtOGJhNDJkNzlkOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6o5giKni66Zmbe3FmEmUofO+tGQiMzQgWTL ybirhW3PRLQ4xgCrXzHjggvWitLI0XTcZ4Ih6/xc1i+yoCO+Olgj5XkgNlLqBsIq Tm0eOcuwP0dNjBdFqDV1vMiSOdaXDl9913USCDiCU2J+dgvZOFjlWFhGIxlGJep2 +vUWZYobi/YUemQ3RTcZy9oUBz+ua4lA7ZBirZ/T1mVN67E1L8r+hSat4zZyAwcE ljFG/Cbe1bI8aoAWz8/KEWRK2cZnPk3C0w4Ez8ZCtPIh1PU300+JnDkzDRrNoQbi dp8yIshqSwM1fxi3C5dc9LDEJUegZD2LXUuI4ScmwPGKznU6OwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMkZPgOf7TAPXgH22n0Cx1a5wmPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWYyMmM0MWEtZGVjNS0z ZmY1LWI0ZjktYjM0YTljMzBiMzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcU6 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAz6GzP8oUQuuwgntqky+KV6RGVGndeGnLydrqZG8StPMN+/yEK7 2lzMRAUmyS0ylcCmbNXzaDoxe++hV5G3VVEiB2aj7qOrrnCWoTakZk5/nNPOcuhG ybAHUIzZPiUQHhYImOPxoc5m+75nTZGSjf200SV4hqP39yRQoUXJzsqN/KD2Nz4c FoXqIc1a+YDW0XaOS64Tci7jhXAeeRTIwXiNcKfOg4YstL9JvLhfkKNtfZybGzhA OdgHESkzvPtlrq8GnZlx8DsTjfhqbotuwcfL6x7CF1Z+Qm9wz0hHECh0zS7BGyUu nLU8ETdZYv52W289mLFAtOllzJ/p4cXja1Y= -----END CERTIFICATE-----Generated at Sun Apr 6 12:02:15 2025 by rpki-client