$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/605b1a5f-f2f8-35cb-906d-8c0cffc617ba.roa File: 605b1a5f-f2f8-35cb-906d-8c0cffc617ba.roa (raw, json) Hash identifier: fpdIMSBSbqPp1rGb1C45cAnlNap/ZdXR0eIlz9cmMK8= Subject key identifier: 2A:22:D4:44:13:86:A4:84:1C:D8:C8:8B:4D:5B:25:FC:B9:98:4B:48 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CBEF7139E00BB355041D0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/605b1a5f-f2f8-35cb-906d-8c0cffc617ba.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 2001:559:534::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:be:f7:13:9e:00:bb:35:50:41:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=778626af-659c-4d48-a23d-2e436066c390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:3a:ed:ed:b4:1a:fe:2d:0f:fb:85:d5:42: 1a:3b:70:06:6f:86:d0:88:37:26:e8:72:ae:68:b7: e4:88:52:a6:0b:92:dc:f1:f2:0e:b1:1a:04:4f:4a: 01:93:3c:80:6a:26:a7:b8:ec:cc:cd:c6:5a:2c:d7: 92:a9:f7:ec:37:05:4c:07:06:c8:4c:a6:56:38:2b: 59:76:d2:21:ba:ec:07:38:db:d9:e5:65:64:d1:06: dd:b9:51:06:47:c5:6a:90:6f:25:d3:f8:0d:e3:1b: e1:83:5f:32:c9:fd:f8:bc:0a:b4:82:b1:d6:6e:47: a3:b9:99:01:b9:18:48:60:91:33:a3:83:f0:1d:ed: fb:9c:ad:3a:70:05:9c:68:21:72:76:85:b2:95:e8: 5f:9d:ce:bd:c8:f0:30:5f:df:ef:08:a2:71:07:83: 9e:01:aa:ef:29:a5:96:14:83:c3:a2:cd:f7:53:18: cf:43:ad:95:19:bd:bd:0b:e7:7b:ba:31:d4:f9:74: 1d:1c:34:48:86:96:5e:bc:e9:8e:f6:4c:06:40:b9: 5b:63:c4:27:5a:d9:e5:aa:38:13:96:e8:08:c6:05: c4:0f:d2:27:be:d4:f0:53:28:42:e9:2b:8c:12:32: 8f:6c:b8:bb:47:d2:0b:69:5e:8f:ef:53:7a:08:5d: 16:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:22:D4:44:13:86:A4:84:1C:D8:C8:8B:4D:5B:25:FC:B9:98:4B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/605b1a5f-f2f8-35cb-906d-8c0cffc617ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:534::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:5e:a9:d7:21:4e:53:ed:7d:cf:89:a4:99:17:d6:19:08:66: c4:9f:ea:7b:49:30:56:46:b0:fe:12:c5:01:7d:82:38:25:f6: d4:6a:82:57:c1:d4:4b:13:63:34:0e:d6:84:ad:a9:b5:6a:6c: 17:2e:09:7c:70:b4:ec:2a:61:62:3c:3e:4d:97:1f:10:e8:88: 6d:f4:00:86:64:c8:60:37:a7:6e:df:d8:c2:c4:6f:3e:f3:2b: 1c:26:8d:ba:a1:f8:2c:3a:ce:69:84:61:cd:db:f8:e2:3a:4e: dd:2a:48:b4:5f:42:34:a8:22:3d:d9:bf:4a:82:cd:81:98:be: e4:43:a1:2c:7a:d5:a2:26:17:ba:55:aa:0e:a7:64:4e:f3:b3: 06:ac:11:cb:a1:d5:d8:e1:c3:7e:76:e7:09:32:c1:54:a1:e9: ba:c3:47:9c:52:e4:85:03:07:94:b6:6c:8a:73:6d:ca:78:88: 08:e2:36:af:af:e3:4e:c3:45:41:27:7c:c2:37:aa:c2:6c:bd: 39:c5:b3:39:6d:59:69:56:71:57:af:7c:a9:3a:ef:cc:b8:df: a9:42:bd:2b:79:07:a4:76:06:b7:6e:b9:ad:bf:e2:15:af:dc: 2a:b9:0e:45:ec:f2:5f:65:53:8f:db:52:9d:f6:83:f9:bd:83: 6a:42:6e:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebL73E54AuzVQQdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Nzc4NjI2YWYtNjU5Yy00ZDQ4LWEyM2QtMmU0MzYwNjZjMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx867e20Gv4tD/uF1UIaO3AGb4bQiDcm6HKu aLfkiFKmC5Lc8fIOsRoET0oBkzyAaianuOzMzcZaLNeSqffsNwVMBwbITKZWOCtZ dtIhuuwHONvZ5WVk0QbduVEGR8VqkG8l0/gN4xvhg18yyf34vAq0grHWbkejuZkB uRhIYJEzo4PwHe37nK06cAWcaCFydoWylehfnc69yPAwX9/vCKJxB4OeAarvKaWW FIPDos33UxjPQ62VGb29C+d7ujHU+XQdHDRIhpZevOmO9kwGQLlbY8QnWtnlqjgT lugIxgXED9InvtTwUyhC6SuMEjKPbLi7R9ILaV6P71N6CF0WKwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCoi1EQThqSEHNjIi01bJfy5mEtIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjA1YjFhNWYtZjJmOC0z NWNiLTkwNmQtOGMwY2ZmYzYxN2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQU0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9eqdchTlPtfc+JpJkX1hkIZsSf6ntJMFZGsP4SxQF9gjgl9tRq glfB1EsTYzQO1oStqbVqbBcuCXxwtOwqYWI8Pk2XHxDoiG30AIZkyGA3p27f2MLE bz7zKxwmjbqh+Cw6zmmEYc3b+OI6Tt0qSLRfQjSoIj3Zv0qCzYGYvuRDoSx61aIm F7pVqg6nZE7zswasEcuh1djhw3525wkywVSh6brDR5xS5IUDB5S2bIpzbcp4iAji Nq+v407DRUEnfMI3qsJsvTnFszltWWlWcVevfKk678y436lCvSt5B6R2Brduua2/ 4hWv3Cq5DkXs8l9lU4/bUp32g/m9g2pCbr8= -----END CERTIFICATE-----Generated at Sun Apr 6 18:24:11 2025 by rpki-client