$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f890915-d44f-3b15-b1d0-66994664b1a9.roa File: 5f890915-d44f-3b15-b1d0-66994664b1a9.roa (raw, json) Hash identifier: CL7dzuNoMvHIBA1Z3/Q1aw3tpiekrkrHCi+g2RiDFz4= Subject key identifier: A1:D3:B8:66:D6:C9:B9:72:DE:09:03:FE:57:D1:4F:CF:0F:FD:D2:AB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D6EBFFD95B9BC24FEF300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f890915-d44f-3b15-b1d0-66994664b1a9.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:838b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:6e:bf:fd:95:b9:bc:24:fe:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e8f56fa5-f2b9-41b2-b2d1-054c8d420052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c2:f1:49:33:ba:9c:10:d1:4f:e0:f8:41:38: a3:3c:e6:63:6a:10:b3:39:e6:c9:8b:c1:b8:c6:c1: 6a:4c:6e:18:8e:37:b2:a4:55:2b:8c:c9:d5:2e:a0: 93:e0:54:c4:80:73:d3:dc:55:f7:c1:1f:5e:89:58: 34:96:14:b6:03:18:25:5a:00:c0:53:ae:d0:54:99: ca:b7:6f:d8:88:a2:ec:eb:a9:5f:c7:00:fc:b7:54: 8b:4e:3c:e5:ec:2e:d3:ae:68:80:8f:48:6f:1f:87: b7:38:6f:4d:1b:81:81:ba:77:96:35:81:c2:cc:85: 2d:3c:8d:b2:2a:5a:e6:c2:e2:a3:88:88:5d:a9:5c: b7:ef:36:90:9f:a8:08:db:22:1b:8b:5b:ee:1f:02: 08:1c:8b:ce:88:af:39:95:5f:68:53:dc:92:12:81: e9:d2:0c:6a:93:b2:e5:a7:78:12:f3:a2:c6:af:61: 25:35:dd:4c:94:6d:1d:47:70:81:3c:9f:e8:b4:e4: b8:fc:8f:4f:ae:f2:87:44:4a:e4:e6:76:40:6b:d0: 00:a4:02:59:13:3e:e5:f8:bb:ca:0b:4d:e9:e2:b6: 5d:3a:c0:81:06:58:4f:ff:83:72:da:57:9c:8f:06: e7:ff:dc:3f:91:2c:d8:c1:e9:28:aa:7d:cb:1d:51: ad:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D3:B8:66:D6:C9:B9:72:DE:09:03:FE:57:D1:4F:CF:0F:FD:D2:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f890915-d44f-3b15-b1d0-66994664b1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:838b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:3f:0c:8b:f9:4b:45:e4:27:84:b8:77:58:3d:ae:13:d2:ba: b9:28:a7:7e:da:0c:37:66:dc:4a:a1:5e:e4:68:e0:ae:12:6a: c3:f0:3e:7c:97:43:f1:c8:2c:0c:de:d8:6f:48:24:5b:0c:5b: a9:b2:c0:ff:44:9f:91:62:5a:91:3e:67:76:65:72:a0:34:d5: 81:3b:42:3d:a6:92:a2:fd:1f:33:ba:3c:08:95:4c:99:4e:4e: 3e:f5:72:1a:21:78:48:d1:2a:18:9c:84:b9:6f:90:9f:ba:23: 22:a5:8c:a9:dd:c7:89:3f:d2:2e:df:13:18:6d:a3:c3:4b:3d: 5d:0e:02:5d:1b:b3:7b:24:3f:fe:be:e6:65:8a:c4:2a:4e:56: 66:ba:1e:f4:f2:fc:0c:85:3d:3a:41:3a:f0:0e:35:df:7f:2b: 1d:70:ad:25:d6:b2:c0:b5:5c:d8:8c:93:54:25:80:c4:9a:8f: 7c:d2:d3:c6:70:d4:c4:2d:af:8c:82:d2:82:4a:b8:ff:03:7f: bf:67:17:55:93:69:d2:f4:20:64:b1:10:42:20:47:56:0d:af: fe:96:bd:26:01:23:79:39:58:0f:bd:d9:81:21:38:ae:96:14: 01:02:62:7f:b7:74:3c:f9:7b:b3:aa:64:ec:16:c7:d6:c2:68: 81:59:8f:61 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebW6//ZW5vCT+8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZThmNTZmYTUtZjJiOS00MWIyLWIyZDEtMDU0YzhkNDIwMDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MLxSTO6nBDRT+D4QTijPOZjahCzOebJi8G4 xsFqTG4YjjeypFUrjMnVLqCT4FTEgHPT3FX3wR9eiVg0lhS2AxglWgDAU67QVJnK t2/YiKLs66lfxwD8t1SLTjzl7C7TrmiAj0hvH4e3OG9NG4GBuneWNYHCzIUtPI2y KlrmwuKjiIhdqVy37zaQn6gI2yIbi1vuHwIIHIvOiK85lV9oU9ySEoHp0gxqk7Ll p3gS86LGr2ElNd1MlG0dR3CBPJ/otOS4/I9PrvKHRErk5nZAa9AApAJZEz7l+LvK C03p4rZdOsCBBlhP/4Ny2lecjwbn/9w/kSzYwekoqn3LHVGtpQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKHTuGbWybly3gkD/lfRT88P/dKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWY4OTA5MTUtZDQ0Zi0z YjE1LWIxZDAtNjY5OTQ2NjRiMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYOL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJo/DIv5S0XkJ4S4d1g9rhPSurkop37aDDdm3EqhXuRo4K4SasPw PnyXQ/HILAze2G9IJFsMW6mywP9En5FiWpE+Z3ZlcqA01YE7Qj2mkqL9HzO6PAiV TJlOTj71choheEjRKhichLlvkJ+6IyKljKndx4k/0i7fExhto8NLPV0OAl0bs3sk P/6+5mWKxCpOVma6HvTy/AyFPTpBOvAONd9/Kx1wrSXWssC1XNiMk1QlgMSaj3zS 08Zw1MQtr4yC0oJKuP8Df79nF1WTadL0IGSxEEIgR1YNr/6WvSYBI3k5WA+92YEh OK6WFAECYn+3dDz5e7OqZOwWx9bCaIFZj2E= -----END CERTIFICATE-----Generated at Mon Apr 7 06:23:00 2025 by rpki-client