$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6501df39-8d41-3057-9031-7e7e336b5e95.roa File: 6501df39-8d41-3057-9031-7e7e336b5e95.roa (raw, json) Hash identifier: AqNlQ6f6BBto8p+1Q05cEYSQL1hMfajWemPsMTeD6Rc= Subject key identifier: 8A:28:57:CC:C7:D5:F5:01:00:5D:5A:60:B3:E9:00:D0:36:93:DE:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D6D4ED8A198BFE5927C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6501df39-8d41-3057-9031-7e7e336b5e95.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:81df::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:6d:4e:d8:a1:98:bf:e5:92:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9dc03443-445f-4557-81e6-4fd63a219617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7b:38:43:37:a1:08:c0:8b:b6:75:38:bb:fc: c9:91:1e:d6:5a:0b:32:bb:d4:df:7d:4b:dc:9d:33: ea:06:40:8c:58:65:59:a1:33:f7:0d:38:f1:6e:1d: 4f:63:12:8e:70:d4:96:e0:53:1a:78:15:d4:51:4e: 39:98:ad:03:2f:c3:fa:0a:ff:5b:84:8a:0d:8c:1a: f4:42:f4:50:d4:b5:9e:64:f7:16:68:3c:cd:23:ba: a9:73:76:c9:39:0a:86:54:e6:bc:8f:e8:61:d1:53: 5e:36:80:b2:de:34:bc:23:60:a5:3b:e1:25:65:f1: f8:24:4f:f7:2e:55:50:51:1c:d7:eb:cf:9a:18:06: 15:47:52:e5:25:3b:b5:28:77:65:11:e7:36:c5:31: 6e:21:8d:b9:22:b6:4f:9a:f6:35:11:36:28:29:90: fb:09:a5:e9:4c:1d:6a:99:34:a6:bd:fa:ae:5a:6f: 3e:ae:e1:f2:a8:a8:9e:d6:44:ff:64:d1:5a:cd:67: 23:d0:4e:2c:c0:2a:f6:aa:a4:db:aa:b7:78:37:2e: 71:79:ff:e0:0c:6f:ef:fb:a9:80:e3:2d:83:f1:a1: d9:94:21:48:97:27:a9:93:74:d6:14:a8:60:6a:c6: 68:9b:8e:3d:61:d5:b1:8b:48:99:32:d3:60:a4:91: a4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:28:57:CC:C7:D5:F5:01:00:5D:5A:60:B3:E9:00:D0:36:93:DE:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6501df39-8d41-3057-9031-7e7e336b5e95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:81df::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:60:e4:55:7d:c1:34:bb:81:e4:8c:59:4e:d3:50:11:bd:2c: 19:c4:08:8e:20:67:09:d6:cd:86:92:a6:3c:44:a3:4b:91:f6: d3:b7:aa:e6:2f:98:98:4e:5b:6e:96:fe:f1:11:0d:5c:20:38: 48:33:01:c6:01:48:cc:12:7a:29:9f:34:0a:18:53:59:39:99: cf:f6:47:3f:3c:d3:02:ba:94:6e:ac:5b:91:96:16:4c:90:e1: 21:cf:f9:43:49:b4:3b:ba:69:7c:db:24:03:80:1a:c9:29:57: b1:32:61:74:11:25:41:7b:96:9e:d0:e4:d3:f8:ae:37:41:08: cc:f1:b8:6d:dd:08:07:39:bf:26:66:d3:9b:48:a0:40:6b:9d: 37:5b:8e:47:19:b7:f3:45:24:f3:80:32:7a:be:01:ca:d4:49: dc:ee:49:a8:8e:ef:d2:b9:01:d1:3d:28:34:e0:0e:09:04:53: e1:ff:06:3e:6c:b7:1f:9a:7b:5d:64:32:b5:ce:89:6d:a9:71: a9:d5:9b:31:82:ad:8f:a8:94:26:56:83:1f:49:5c:3c:64:e0: 36:dd:79:16:dd:6b:08:78:0c:f0:4e:af:88:1c:30:50:bf:38: 0b:34:be:b9:6b:89:fa:2a:3c:a5:21:b1:18:ec:07:99:c5:bb: e6:86:c2:4c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebW1O2KGYv+WSfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OWRjMDM0NDMtNDQ1Zi00NTU3LTgxZTYtNGZkNjNhMjE5NjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3s4QzehCMCLtnU4u/zJkR7WWgsyu9TffUvc nTPqBkCMWGVZoTP3DTjxbh1PYxKOcNSW4FMaeBXUUU45mK0DL8P6Cv9bhIoNjBr0 QvRQ1LWeZPcWaDzNI7qpc3bJOQqGVOa8j+hh0VNeNoCy3jS8I2ClO+ElZfH4JE/3 LlVQURzX68+aGAYVR1LlJTu1KHdlEec2xTFuIY25IrZPmvY1ETYoKZD7CaXpTB1q mTSmvfquWm8+ruHyqKie1kT/ZNFazWcj0E4swCr2qqTbqrd4Ny5xef/gDG/v+6mA 4y2D8aHZlCFIlyepk3TWFKhgasZom449YdWxi0iZMtNgpJGkGQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIooV8zH1fUBAF1aYLPpANA2k97pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjUwMWRmMzktOGQ0MS0z MDU3LTkwMzEtN2U3ZTMzNmI1ZTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYHf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJNg5FV9wTS7geSMWU7TUBG9LBnECI4gZwnWzYaSpjxEo0uR9tO3 quYvmJhOW26W/vERDVwgOEgzAcYBSMwSeimfNAoYU1k5mc/2Rz880wK6lG6sW5GW FkyQ4SHP+UNJtDu6aXzbJAOAGskpV7EyYXQRJUF7lp7Q5NP4rjdBCMzxuG3dCAc5 vyZm05tIoEBrnTdbjkcZt/NFJPOAMnq+AcrUSdzuSaiO79K5AdE9KDTgDgkEU+H/ Bj5stx+ae11kMrXOiW2pcanVmzGCrY+olCZWgx9JXDxk4DbdeRbdawh4DPBOr4gc MFC/OAs0vrlrifoqPKUhsRjsB5nFu+aGwkw= -----END CERTIFICATE-----Generated at Mon Apr 7 09:48:53 2025 by rpki-client