$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f8db4e3-e5e2-3e0d-9b33-8f3220654e00.roa File: 5f8db4e3-e5e2-3e0d-9b33-8f3220654e00.roa (raw, json) Hash identifier: 7rmdPISrAG9NKsG7QHrNvW4CcfkKwZHqZcjUTEjWp60= Subject key identifier: 52:5A:35:5C:36:74:AA:2B:DD:02:78:02:08:A6:06:9B:5B:D2:F4:95 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848A1362A250DBCE5C5D4FD2A80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f8db4e3-e5e2-3e0d-9b33-8f3220654e00.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 33668 IP address blocks: 2001:559:318::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2a:25:0d:bc:e5:c5:d4:fd:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=d72db7d0-2852-4593-a8d6-c8f7ea247e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a2:01:20:db:72:54:5f:7d:de:23:a1:55:9d: e8:f1:55:d1:bc:95:ea:41:7a:76:57:42:76:5b:32: e8:1a:aa:77:fb:48:e8:d7:2e:7a:fd:85:78:12:81: 7e:17:3c:90:ed:6e:d9:59:ff:ff:d6:e8:c5:df:0f: 5a:2e:0f:72:6e:7a:3d:f7:ab:5d:4e:c0:33:f9:70: 3e:7e:c1:9b:ae:49:13:7f:55:ee:c8:5c:cf:27:ce: 6d:13:41:60:c1:fd:fc:b1:8c:88:99:1d:af:90:bd: 50:8a:ce:2d:05:af:a7:69:f1:0e:da:02:57:b8:00: d9:94:3a:99:c3:70:48:4b:c1:a5:1c:a6:a7:69:87: 80:84:19:98:ae:fe:ed:bc:75:97:be:81:1d:2b:be: 54:0b:43:e2:16:97:0b:ab:b5:90:9e:27:81:23:04: 05:b7:b4:d2:33:8a:b1:63:bb:e3:23:eb:1f:2b:fd: 62:46:03:6a:fb:f4:5a:18:81:4e:63:61:bd:ac:50: fa:be:8e:f5:e3:5e:13:81:5a:3d:37:9f:f7:1d:9e: a4:ff:2e:c1:d2:a4:49:ef:05:a7:5f:be:1b:e7:1e: 24:e0:60:9f:91:be:d9:a8:17:98:bd:1c:c6:81:52: 2f:e3:0b:61:e0:c4:b8:4e:28:25:ac:e6:86:75:4b: ba:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5A:35:5C:36:74:AA:2B:DD:02:78:02:08:A6:06:9B:5B:D2:F4:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5f8db4e3-e5e2-3e0d-9b33-8f3220654e00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:318::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:ef:98:81:8c:02:9d:89:44:c2:ff:f8:6e:4f:8f:30:0f:de: a7:ec:9d:89:96:b7:e1:d0:b4:fa:dc:95:ed:04:61:dd:45:c6: d7:db:38:02:dd:d8:a1:25:89:32:49:83:c5:bd:82:18:28:d6: db:00:57:13:7e:9e:d4:63:4c:5e:0f:73:91:7d:06:3c:97:ec: fc:57:d0:f9:15:0b:4b:9b:bb:df:95:07:92:df:d7:7b:cb:08: 40:14:cc:a8:9c:f3:24:30:16:dc:f7:75:7e:4a:ab:a0:fa:d8: 19:ad:de:cf:9f:f1:4d:fa:81:7c:23:91:ad:6b:fd:47:00:a2: 5d:5e:ad:9c:c0:b8:b6:31:f0:67:e0:67:32:c6:07:d8:54:91: 7d:31:db:d7:78:6d:09:38:c3:9d:f1:61:3a:df:1a:ed:b6:ef: 6c:b7:07:79:df:56:6f:40:52:30:dc:a7:dc:82:73:b4:57:0f: 55:2e:32:03:02:c3:69:c9:06:fe:35:ec:1d:e7:4c:45:bd:3f: 5f:91:b3:68:b2:5a:4e:fe:38:cd:d2:50:a9:a9:39:29:3d:e6: d7:69:52:80:73:be:1c:ac:0c:ff:28:b2:67:d6:a5:0a:3f:53: d9:14:45:26:50:de:59:e6:27:35:80:79:9b:e3:1a:26:8d:41: b4:69:19:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNiolDbzlxdT9KoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk ZDcyZGI3ZDAtMjg1Mi00NTkzLWE4ZDYtYzhmN2VhMjQ3ZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKIBINtyVF993iOhVZ3o8VXRvJXqQXp2V0J2 WzLoGqp3+0jo1y56/YV4EoF+FzyQ7W7ZWf//1ujF3w9aLg9ybno996tdTsAz+XA+ fsGbrkkTf1XuyFzPJ85tE0Fgwf38sYyImR2vkL1Qis4tBa+nafEO2gJXuADZlDqZ w3BIS8GlHKanaYeAhBmYrv7tvHWXvoEdK75UC0PiFpcLq7WQnieBIwQFt7TSM4qx Y7vjI+sfK/1iRgNq+/RaGIFOY2G9rFD6vo71414TgVo9N5/3HZ6k/y7B0qRJ7wWn X74b5x4k4GCfkb7ZqBeYvRzGgVIv4wth4MS4TiglrOaGdUu6ewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFJaNVw2dKor3QJ4AgimBptb0vSVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWY4ZGI0ZTMtZTVlMi0z ZTBkLTliMzMtOGYzMjIwNjU0ZTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQMY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFHvmIGMAp2JRML/+G5PjzAP3qfsnYmWt+HQtPrcle0EYd1Fxtfb OALd2KEliTJJg8W9ghgo1tsAVxN+ntRjTF4Pc5F9BjyX7PxX0PkVC0ubu9+VB5Lf 13vLCEAUzKic8yQwFtz3dX5Kq6D62Bmt3s+f8U36gXwjka1r/UcAol1erZzAuLYx 8GfgZzLGB9hUkX0x29d4bQk4w53xYTrfGu2272y3B3nfVm9AUjDcp9yCc7RXD1Uu MgMCw2nJBv417B3nTEW9P1+Rs2iyWk7+OM3SUKmpOSk95tdpUoBzvhysDP8osmfW pQo/U9kURSZQ3lnmJzWAeZvjGiaNQbRpGSU= -----END CERTIFICATE-----Generated at Mon Apr 7 06:30:24 2025 by rpki-client