$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b90221-5afe-3bb3-ad02-98e3f73f1eb2.roa File: 69b90221-5afe-3bb3-ad02-98e3f73f1eb2.roa (raw, json) Hash identifier: gw3+5JSj5COtRL57wuae7gNLcZLVKc8Cw+UDW3o6A1M= Subject key identifier: FD:FC:84:92:37:F4:FE:91:CE:64:C6:EE:EA:28:9E:F1:5F:E1:FF:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DB5121A2F63688AB20D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b90221-5afe-3bb3-ad02-98e3f73f1eb2.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:c41e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:b5:12:1a:2f:63:68:8a:b2:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ff76c73c-dfd6-43ad-84d0-90fdc64ed3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1f:da:9b:e3:7d:59:b7:32:af:94:17:49:5d: f9:03:ed:31:7c:bb:e9:4c:f7:e4:71:f3:71:a7:9b: d0:8a:52:c3:4a:e8:4e:34:da:1c:97:e3:78:67:91: cb:c9:d0:7d:c3:c6:21:dd:f8:16:74:81:7b:a7:25: c2:9e:75:b0:4f:1a:26:4b:66:35:05:52:2d:3a:24: a7:aa:6f:a3:8a:03:43:15:1f:68:92:4e:16:18:fc: a8:d1:1a:ac:a8:c9:8f:d9:e3:3f:24:e7:20:2c:59: 90:c9:9d:9b:a3:cd:61:ad:69:1e:a3:4d:07:03:aa: 81:00:d6:93:ee:12:aa:4d:f2:2a:34:d0:ff:00:db: e3:7f:92:9e:e5:7c:27:e2:cd:38:61:8c:c0:1a:70: 4b:0a:a5:9e:a6:56:07:1a:a6:53:5d:8c:f1:83:a2: e9:20:c7:95:bf:e5:09:d7:f1:51:7f:29:f7:4a:b0: 64:24:be:69:30:94:c6:6e:48:7b:05:7d:0e:a0:86: c0:51:40:41:ec:cf:e0:e4:6d:e6:97:bc:f5:af:f3: e0:7e:ad:fa:2f:92:b5:ac:2d:1d:8d:26:24:7b:c6: 56:f3:d9:3d:1f:7e:5b:2a:0e:51:9a:0e:6a:b5:3c: ae:a6:91:94:cc:4c:b3:be:77:63:ba:7d:5f:c9:1c: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FC:84:92:37:F4:FE:91:CE:64:C6:EE:EA:28:9E:F1:5F:E1:FF:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/69b90221-5afe-3bb3-ad02-98e3f73f1eb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c41e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:3f:36:6b:95:89:b9:58:da:f5:c3:dd:0b:e7:21:99:ce:da: 71:58:eb:a3:41:a0:66:82:c4:84:49:a1:19:3a:51:a3:e6:eb: d6:42:d0:a4:85:c5:05:c8:1b:da:e1:94:14:aa:ef:c7:ac:e4: d9:74:82:6e:28:61:44:63:a0:95:94:d2:5e:89:75:82:4f:02: ed:82:62:ae:84:6d:69:1b:18:43:05:40:63:72:c8:e5:1b:50: d5:7d:46:04:8e:e7:a8:6b:57:1b:ca:ec:ef:5b:26:63:a0:3c: 2b:d5:0e:21:86:a5:e8:85:a0:0c:4b:09:20:e2:f6:8c:e5:1d: 10:3c:df:71:ed:21:28:ca:1b:cf:23:d1:27:81:59:66:f0:61: cd:cb:2e:7e:98:0b:15:46:51:5d:47:2d:5f:c7:80:ad:b4:d4: 0f:e3:ec:6c:21:f2:66:1b:a9:1b:63:35:1d:9d:8d:07:1e:2a: 70:b4:a1:7f:26:07:11:f4:8e:ed:34:dd:10:e4:9e:d7:6d:2b: cb:a9:29:48:11:21:32:b4:c5:70:61:b6:78:f9:d5:fe:3c:b2: 1a:a4:64:6b:96:07:6c:6b:f5:2d:3b:b9:d0:6f:af:85:3a:8f: ea:19:3c:b8:42:24:2d:fd:1e:6c:5e:15:df:32:ae:96:33:c7: e3:a3:ee:ea -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebbUSGi9jaIqyDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmY3NmM3M2MtZGZkNi00M2FkLTg0ZDAtOTBmZGM2NGVkM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR/am+N9Wbcyr5QXSV35A+0xfLvpTPfkcfNx p5vQilLDSuhONNocl+N4Z5HLydB9w8Yh3fgWdIF7pyXCnnWwTxomS2Y1BVItOiSn qm+jigNDFR9okk4WGPyo0RqsqMmP2eM/JOcgLFmQyZ2bo81hrWkeo00HA6qBANaT 7hKqTfIqNND/ANvjf5Ke5Xwn4s04YYzAGnBLCqWeplYHGqZTXYzxg6LpIMeVv+UJ 1/FRfyn3SrBkJL5pMJTGbkh7BX0OoIbAUUBB7M/g5G3ml7z1r/Pgfq36L5K1rC0d jSYke8ZW89k9H35bKg5Rmg5qtTyuppGUzEyzvndjun1fyRy6swIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP38hJI39P6RzmTG7uoonvFf4f9DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjliOTAyMjEtNWFmZS0z YmIzLWFkMDItOThlM2Y3M2YxZWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcQe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGA/NmuViblY2vXD3QvnIZnO2nFY66NBoGaCxIRJoRk6UaPm69ZC 0KSFxQXIG9rhlBSq78es5Nl0gm4oYURjoJWU0l6JdYJPAu2CYq6EbWkbGEMFQGNy yOUbUNV9RgSO56hrVxvK7O9bJmOgPCvVDiGGpeiFoAxLCSDi9ozlHRA833HtISjK G88j0SeBWWbwYc3LLn6YCxVGUV1HLV/HgK201A/j7Gwh8mYbqRtjNR2djQceKnC0 oX8mBxH0ju003RDkntdtK8upKUgRITK0xXBhtnj51f48shqkZGuWB2xr9S07udBv r4U6j+oZPLhCJC39HmxeFd8yrpYzx+Oj7uo= -----END CERTIFICATE-----Generated at Sun Apr 6 11:54:28 2025 by rpki-client