$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68bfbb86-0e54-3da3-adeb-89951ee49e78.roa File: 68bfbb86-0e54-3da3-adeb-89951ee49e78.roa (raw, json) Hash identifier: gqCH74GIZQtVenpcZ0VpZAtUaBA/1SHaYgkcAt4KyFw= Subject key identifier: DE:2D:90:0D:3E:FB:A1:6B:02:4C:1E:2F:E3:28:B0:52:AE:7E:5E:91 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BDB8A85533EE977E088C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68bfbb86-0e54-3da3-adeb-89951ee49e78.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 21508 IP address blocks: 2001:559:37d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:db:8a:85:53:3e:e9:77:e0:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f55c96d3-980c-427e-9950-8cae8755d067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2e:a0:d4:99:bf:ab:fb:9d:da:d6:25:8c:75: fd:de:92:2a:99:b0:25:61:57:35:a3:04:d0:cc:09: 87:6f:35:e8:78:a9:39:d4:0b:10:f2:8b:a5:7f:97: 5f:c1:93:84:f8:fc:92:11:55:39:81:3f:8d:f3:15: 54:74:33:6c:2e:0c:d1:a8:1e:04:e2:08:5e:13:d4: 57:7a:d8:1d:2c:74:24:c7:3c:48:4b:eb:8c:79:4d: 4c:cd:97:70:60:02:9b:88:e6:0b:fe:87:bf:7c:26: e5:c1:16:aa:05:fc:e1:ff:c5:2e:fb:7e:bc:f3:d2: de:11:dc:4f:95:b4:83:ac:42:e8:52:d4:18:a3:8f: 39:ce:f7:f8:aa:14:2b:e1:42:a3:d9:5f:09:28:0e: 09:03:94:3d:62:14:ac:a6:a0:f4:33:59:b1:98:62: 0a:ce:ec:04:96:a6:e6:d2:60:51:27:72:a8:90:c2: a8:88:bc:84:7c:38:b5:e0:f7:1d:71:97:32:14:56: 8f:8a:3d:3b:f6:31:12:ad:de:67:0f:e8:76:4a:6c: 0a:f9:16:cb:8c:80:b2:19:d6:2d:10:7d:db:49:dc: f2:e5:a6:1e:b0:49:ff:bb:69:d4:b7:7c:b5:d6:7f: 10:a9:2c:22:1f:d2:6e:7a:d4:d4:b0:be:24:bb:8f: 89:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2D:90:0D:3E:FB:A1:6B:02:4C:1E:2F:E3:28:B0:52:AE:7E:5E:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68bfbb86-0e54-3da3-adeb-89951ee49e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:37d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:e0:b1:83:ef:f3:a5:82:2c:4f:bf:fc:bb:74:cc:4c:ca:28: 2d:83:d5:4e:16:dc:03:f3:1c:e0:1a:ed:1e:35:27:b1:fa:97: 87:1f:bd:f2:14:b0:1b:f8:05:f7:6d:48:cb:b6:dc:21:9c:dc: ae:4a:3e:c9:9d:cf:5f:2e:c2:b0:f1:48:66:14:0f:a4:80:da: d3:34:90:5e:0f:9e:fd:f7:1d:9d:52:60:3b:9b:b1:36:18:a4: 56:46:eb:7a:ca:e0:27:d2:35:a8:94:88:6f:d1:f7:45:63:86: bf:a8:7c:ee:c6:fa:7b:94:48:7d:a9:f7:a8:6b:aa:77:c4:60: 03:9f:e7:36:63:7d:ae:01:4a:46:82:49:3d:a3:31:8c:15:03: 57:c2:de:32:2e:0e:24:22:f5:2a:2a:76:8c:b5:25:78:3f:56: c9:6b:58:b9:ae:24:8f:ac:93:b5:f4:32:80:86:d4:c2:5a:28: b7:4b:d7:39:16:a5:f5:d2:aa:19:46:d6:13:fa:90:04:30:cf: fd:0f:64:69:79:78:15:db:f3:95:c1:df:3f:17:e6:55:9d:85: be:b2:ee:56:53:2a:d2:36:94:94:97:ea:e8:14:70:eb:08:8e: 8c:12:c3:a2:bf:64:2f:07:13:12:b3:1f:a0:2e:e9:8c:d6:ab: 99:7e:d6:4e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea9uKhVM+6XfgiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjU1Yzk2ZDMtOTgwYy00MjdlLTk5NTAtOGNhZTg3NTVkMDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S6g1Jm/q/ud2tYljHX93pIqmbAlYVc1owTQ zAmHbzXoeKk51AsQ8oulf5dfwZOE+PySEVU5gT+N8xVUdDNsLgzRqB4E4gheE9RX etgdLHQkxzxIS+uMeU1MzZdwYAKbiOYL/oe/fCblwRaqBfzh/8Uu+36889LeEdxP lbSDrELoUtQYo485zvf4qhQr4UKj2V8JKA4JA5Q9YhSspqD0M1mxmGIKzuwElqbm 0mBRJ3KokMKoiLyEfDi14PcdcZcyFFaPij079jESrd5nD+h2SmwK+RbLjICyGdYt EH3bSdzy5aYesEn/u2nUt3y11n8QqSwiH9JuetTUsL4ku4+JRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN4tkA0++6FrAkweL+MosFKufl6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjhiZmJiODYtMGU1NC0z ZGEzLWFkZWItODk5NTFlZTQ5ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQN9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADDgsYPv86WCLE+//Lt0zEzKKC2D1U4W3APzHOAa7R41J7H6l4cf vfIUsBv4BfdtSMu23CGc3K5KPsmdz18uwrDxSGYUD6SA2tM0kF4Pnv33HZ1SYDub sTYYpFZG63rK4CfSNaiUiG/R90Vjhr+ofO7G+nuUSH2p96hrqnfEYAOf5zZjfa4B SkaCST2jMYwVA1fC3jIuDiQi9Soqdoy1JXg/VslrWLmuJI+sk7X0MoCG1MJaKLdL 1zkWpfXSqhlG1hP6kAQwz/0PZGl5eBXb85XB3z8X5lWdhb6y7lZTKtI2lJSX6ugU cOsIjowSw6K/ZC8HExKzH6Au6YzWq5l+1k4= -----END CERTIFICATE-----Generated at Mon Apr 7 06:34:06 2025 by rpki-client