$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/653d0529-c954-3a4d-9b9d-27fd4c5e8698.roa File: 653d0529-c954-3a4d-9b9d-27fd4c5e8698.roa (raw, json) Hash identifier: wjjHNPxnU27eweAMh/dI2tXm+18TlbxuPJFWVUaNihE= Subject key identifier: F7:24:02:7D:69:DA:0E:8A:6B:15:9B:4E:E2:91:DC:8D:19:0D:6C:4B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CACCBDD41C304E3832E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/653d0529-c954-3a4d-9b9d-27fd4c5e8698.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:25a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:ac:cb:dd:41:c3:04:e3:83:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b635ca0f-7e40-4f8d-988f-89eda354989c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d2:ee:a1:12:18:76:3e:67:ae:b7:d9:29:03: 18:eb:9a:3d:18:f6:74:07:7d:32:22:b7:49:12:c6: 4c:e0:2b:65:c1:8a:df:8d:76:0b:d0:18:45:d2:3a: 5a:5b:33:86:92:0f:9f:90:ef:be:16:da:f1:95:a4: ea:9b:a0:76:fe:73:0b:69:3e:b7:4c:02:33:fa:bc: ef:ea:ef:19:ba:d7:96:63:cd:94:0e:13:6c:30:7d: b1:8b:63:5f:31:d1:fe:89:46:bb:b3:5f:02:79:88: 93:dd:9e:fe:6f:e2:ee:6d:0e:29:a6:6d:30:a5:ff: 49:fb:c6:01:db:2a:24:7f:97:2c:57:fa:1e:73:ac: ae:e5:00:c7:dc:9d:ea:f2:1a:9f:ea:4f:85:99:c3: 38:97:6e:50:01:19:f2:55:02:06:cf:2d:aa:b4:03: b8:56:b3:9b:ca:7a:6d:ac:d9:d9:71:f0:4e:a3:eb: 86:4b:90:b6:00:29:75:ed:c0:41:88:43:ad:65:3d: f6:a0:0b:71:93:e9:f4:0a:dd:60:14:aa:7a:2b:57: 2f:f8:45:03:1e:1c:f2:dd:6f:0f:e8:e3:cf:e4:c6: 29:7f:e7:1f:aa:18:92:54:98:24:61:9d:2b:61:7c: a8:d4:72:ef:32:e9:4d:9a:dc:04:e1:33:4c:be:34: 90:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:24:02:7D:69:DA:0E:8A:6B:15:9B:4E:E2:91:DC:8D:19:0D:6C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/653d0529-c954-3a4d-9b9d-27fd4c5e8698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:25a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c4:08:4c:62:18:7a:a4:e8:3d:76:7c:9c:8c:1a:e7:b8:3d: 72:c1:a9:dd:65:a1:d2:64:b3:64:e0:6f:2b:95:a1:28:02:31: 37:46:3c:12:10:23:1c:e4:d9:c0:77:c2:be:37:14:ee:64:5f: 03:d7:ce:9e:2b:e6:64:8a:a7:0e:2d:d7:9b:1f:83:10:17:77: 19:25:a7:c2:27:ee:ab:ee:92:68:8f:92:09:50:9b:e5:6c:b6: 11:67:a7:41:7a:8e:85:8b:bd:d3:4e:a8:41:0c:12:c5:90:82: f9:97:49:89:5d:ca:41:f2:07:74:95:b8:20:47:21:e7:7a:39: 33:c8:6d:bf:63:c4:c4:a5:18:12:2f:2f:57:4f:ec:5e:18:60: ed:f2:d3:e6:9b:59:a9:ef:56:9b:6b:30:e5:34:8a:ac:f8:c5: 54:6f:66:7d:8b:34:dd:51:3f:b0:09:9b:9b:1c:a9:6d:67:ca: d3:df:6b:58:8b:a8:85:84:6e:f5:b8:2d:0c:ce:d0:c0:2a:64: 1c:d2:d8:06:b4:d9:6e:6c:2a:35:16:ad:1e:5e:e4:a1:7f:82: bf:28:29:e2:ae:eb:1e:de:27:ec:ff:55:76:e1:cd:6c:a6:c1: 55:da:0c:cd:55:18:fd:80:6d:53:4e:6e:67:cb:9d:50:5c:07: 59:99:f0:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebKzL3UHDBOODLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjYzNWNhMGYtN2U0MC00ZjhkLTk4OGYtODllZGEzNTQ5ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9LuoRIYdj5nrrfZKQMY65o9GPZ0B30yIrdJ EsZM4CtlwYrfjXYL0BhF0jpaWzOGkg+fkO++FtrxlaTqm6B2/nMLaT63TAIz+rzv 6u8ZuteWY82UDhNsMH2xi2NfMdH+iUa7s18CeYiT3Z7+b+LubQ4ppm0wpf9J+8YB 2yokf5csV/oec6yu5QDH3J3q8hqf6k+FmcM4l25QARnyVQIGzy2qtAO4VrObynpt rNnZcfBOo+uGS5C2ACl17cBBiEOtZT32oAtxk+n0Ct1gFKp6K1cv+EUDHhzy3W8P 6OPP5MYpf+cfqhiSVJgkYZ0rYXyo1HLvMulNmtwE4TNMvjSQcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPckAn1p2g6KaxWbTuKR3I0ZDWxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjUzZDA1MjktYzk1NC0z YTRkLTliOWQtMjdmZDRjNWU4Njk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQJa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHTECExiGHqk6D12fJyMGue4PXLBqd1lodJks2TgbyuVoSgCMTdG PBIQIxzk2cB3wr43FO5kXwPXzp4r5mSKpw4t15sfgxAXdxklp8In7qvukmiPkglQ m+VsthFnp0F6joWLvdNOqEEMEsWQgvmXSYldykHyB3SVuCBHIed6OTPIbb9jxMSl GBIvL1dP7F4YYO3y0+abWanvVptrMOU0iqz4xVRvZn2LNN1RP7AJm5scqW1nytPf a1iLqIWEbvW4LQzO0MAqZBzS2Aa02W5sKjUWrR5e5KF/gr8oKeKu6x7eJ+z/VXbh zWymwVXaDM1VGP2AbVNObmfLnVBcB1mZ8GU= -----END CERTIFICATE-----Generated at Mon Apr 7 09:37:02 2025 by rpki-client