$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b4a5c8a-57b6-315c-8948-3872ee4e0ff1.roa File: 6b4a5c8a-57b6-315c-8948-3872ee4e0ff1.roa (raw, json) Hash identifier: rQk34DKuWNBBAF3IgGdzzUvTYtfwmeQv+6jZNAQqnUY= Subject key identifier: 26:53:35:0E:31:71:3F:7A:05:24:CC:10:C2:03:2D:24:01:53:CA:E5 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D26058EDD9D5E0F0DC380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b4a5c8a-57b6-315c-8948-3872ee4e0ff1.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7016 IP address blocks: 2001:559:48b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:26:05:8e:dd:9d:5e:0f:0d:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=a7d1ba78-47ce-41d3-9dc2-f53d240585d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9b:73:16:7d:56:2c:2b:1f:45:12:81:96:8e: f4:87:7b:0a:b7:c2:44:8b:cd:30:7d:9a:08:71:02: c3:3c:ab:03:78:82:db:8e:d9:72:fd:d2:c7:2c:ed: 7d:7f:f5:87:7c:c6:85:fd:e8:75:70:7e:30:ef:d5: 19:41:77:15:34:12:64:ee:3a:30:21:89:84:4c:00: 0b:b4:fc:92:c0:24:9d:1d:66:2f:eb:e3:d9:a2:ab: 95:b2:dd:25:ed:9b:e9:c6:ae:7c:86:9d:74:85:d9: 24:b3:5b:21:ea:82:04:dd:76:82:da:b2:55:f5:e4: ec:f5:56:db:3d:52:a9:d5:a2:fd:e6:1a:f0:9b:aa: 85:3a:c8:ef:58:34:ff:1c:fb:3f:61:bf:6c:fe:db: 6e:36:7e:84:b2:ab:b2:e0:f4:fd:06:f0:5f:14:ac: 81:27:91:ea:c8:b9:47:52:71:15:7a:ea:47:9e:e5: 8b:93:32:f1:b9:f6:31:5f:a1:1b:dd:b3:97:87:8b: 19:82:d6:f9:90:e1:a3:54:98:12:08:ab:b9:76:de: d1:74:af:81:39:c1:cc:ac:a6:79:5d:19:c1:a8:ac: da:28:3c:e4:12:c1:3d:5e:be:a2:43:70:ae:7d:43: 14:43:2f:96:ea:ea:8e:ed:d7:b3:27:c8:1d:d6:a0: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:53:35:0E:31:71:3F:7A:05:24:CC:10:C2:03:2D:24:01:53:CA:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6b4a5c8a-57b6-315c-8948-3872ee4e0ff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:48b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:97:9b:57:36:ca:fc:29:f5:61:5a:5c:3c:8d:b0:c6:df:aa: d9:0c:4f:29:72:4e:54:be:2c:a1:95:60:b8:57:3d:b7:7d:8f: a6:39:e1:58:30:ed:b0:00:ff:72:5b:9e:7c:42:9a:bf:dd:0c: 93:e0:e2:20:23:7d:0c:c9:a8:25:aa:03:5d:3e:16:e4:c9:ce: b2:f2:29:fc:29:df:81:da:48:a5:a1:30:9a:b0:00:8d:e5:f1: 60:e0:f1:8f:a7:ad:4b:09:3a:49:89:a8:66:94:8c:25:4e:79: 66:07:24:5d:ff:20:dc:8f:73:64:1d:ce:0c:2c:d4:70:ac:a6: c1:bf:b5:94:a0:28:3a:0f:24:24:5f:ae:e1:33:f6:b1:37:c0: f8:5c:ac:9d:ce:e2:ce:39:25:1b:d2:b4:74:57:6c:d1:33:8f: 27:a8:25:d0:4c:e8:a5:06:c0:fb:aa:e6:81:97:05:ed:fc:7d: 9e:18:0d:e7:33:2a:a8:d7:03:7a:fb:f8:50:8e:eb:31:f4:b9: ea:48:1f:bb:be:5b:5d:ab:1e:08:4f:d0:ea:2e:ae:25:04:37: 2f:77:b3:70:e9:24:f4:ff:74:89:75:fd:ca:07:0d:5c:e0:02: bb:af:ec:0d:42:fd:1a:82:e4:a3:e3:75:43:e7:18:b6:db:57: 22:6a:89:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebSYFjt2dXg8Nw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YTdkMWJhNzgtNDdjZS00MWQzLTlkYzItZjUzZDI0MDU4NWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5tzFn1WLCsfRRKBlo70h3sKt8JEi80wfZoI cQLDPKsDeILbjtly/dLHLO19f/WHfMaF/eh1cH4w79UZQXcVNBJk7jowIYmETAAL tPySwCSdHWYv6+PZoquVst0l7Zvpxq58hp10hdkks1sh6oIE3XaC2rJV9eTs9Vbb PVKp1aL95hrwm6qFOsjvWDT/HPs/Yb9s/ttuNn6Esquy4PT9BvBfFKyBJ5HqyLlH UnEVeupHnuWLkzLxufYxX6Eb3bOXh4sZgtb5kOGjVJgSCKu5dt7RdK+BOcHMrKZ5 XRnBqKzaKDzkEsE9Xr6iQ3CufUMUQy+W6uqO7dezJ8gd1qAT3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCZTNQ4xcT96BSTMEMIDLSQBU8rlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmI0YTVjOGEtNTdiNi0z MTVjLTg5NDgtMzg3MmVlNGUwZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQSL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAM+Xm1c2yvwp9WFaXDyNsMbfqtkMTylyTlS+LKGVYLhXPbd9j6Y5 4Vgw7bAA/3JbnnxCmr/dDJPg4iAjfQzJqCWqA10+FuTJzrLyKfwp34HaSKWhMJqw AI3l8WDg8Y+nrUsJOkmJqGaUjCVOeWYHJF3/INyPc2Qdzgws1HCspsG/tZSgKDoP JCRfruEz9rE3wPhcrJ3O4s45JRvStHRXbNEzjyeoJdBM6KUGwPuq5oGXBe38fZ4Y DeczKqjXA3r7+FCO6zH0uepIH7u+W12rHghP0OouriUENy93s3DpJPT/dIl1/coH DVzgAruv7A1C/RqC5KPjdUPnGLbbVyJqiYI= -----END CERTIFICATE-----Generated at Mon Apr 7 06:33:54 2025 by rpki-client