$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fa72f83-3a58-3e59-85ad-0b7e913d3f2a.roa File: 6fa72f83-3a58-3e59-85ad-0b7e913d3f2a.roa (raw, json) Hash identifier: AUXRGO8cjZiFhUDpeTXiIcLWvmZgYFy4hHto+k89R0k= Subject key identifier: EF:5B:E4:8F:8F:D0:09:D4:D1:C9:B8:73:C6:DB:E3:4F:50:0A:45:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D88FD31AE6E7F8A0B6100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fa72f83-3a58-3e59-85ad-0b7e913d3f2a.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33662 IP address blocks: 2001:559:82e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:88:fd:31:ae:6e:7f:8a:0b:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f0f8b29a-0c31-47c9-a0d1-b14ffe140abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:15:e4:2c:ba:06:5f:50:d6:84:d5:5e:31: 1d:da:38:92:54:08:a6:8e:40:0e:9c:12:49:ad:dd: 5f:67:32:c4:13:01:f4:f9:e8:65:7c:7e:35:96:17: ae:e4:f1:07:ac:7a:38:68:d9:a0:ae:12:16:ae:f5: 92:90:bb:1b:dd:b0:3b:6d:00:b9:35:f5:c0:f3:23: f5:70:72:58:0a:98:81:80:a0:e5:c7:db:19:9c:94: 38:61:e8:4f:46:d7:01:52:8a:63:5c:44:a1:77:11: 26:fa:bc:4d:4d:c2:4e:ea:f6:fb:86:70:79:e7:27: 1d:a5:97:71:0c:f3:af:48:75:ef:85:13:95:f8:b4: 18:d0:50:f3:af:ec:54:8a:9c:03:c3:cf:c2:f8:b1: 85:24:99:74:e9:c9:88:04:a8:53:84:55:1f:0c:8e: d3:d3:eb:8a:80:03:67:9a:3a:20:8b:e5:25:04:31: ea:82:b9:0e:7d:49:94:fc:33:05:ef:57:04:77:b9: 82:4a:ff:00:2e:65:46:e1:c2:3a:b0:24:9f:ad:71: 95:ec:5a:29:77:17:f9:53:e6:32:1a:2c:fc:34:27: 53:d8:77:d0:72:15:24:c2:15:ee:78:70:06:be:66: 60:a2:15:be:07:b8:22:af:58:3d:40:28:ef:4d:24: a7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5B:E4:8F:8F:D0:09:D4:D1:C9:B8:73:C6:DB:E3:4F:50:0A:45:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6fa72f83-3a58-3e59-85ad-0b7e913d3f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:82e0::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:10:84:eb:7f:b5:f2:2e:0d:45:a5:5f:2c:da:84:9d:82:54: 1f:cc:2e:ef:86:a8:54:3f:8b:f4:33:e5:ef:bb:43:aa:d0:80: 0e:7f:48:a8:f9:d1:f8:ae:49:cd:e8:d5:cb:34:86:bd:d0:dd: 7f:7a:a8:90:61:33:ae:db:a2:5a:9d:1c:69:75:c1:9f:48:c6: 80:a1:41:6b:87:ad:5c:cd:92:36:c5:be:d8:cb:78:48:df:f6: 85:c2:2c:50:13:2f:0a:51:34:f2:07:37:63:be:4e:2e:ef:c7: 6a:55:b8:6f:b9:8d:9d:aa:cc:8f:4c:cc:9f:7a:87:68:98:73: 03:34:f7:b6:58:04:f4:04:0c:aa:40:2e:ae:b3:25:77:46:63: 67:9f:6d:ee:de:57:fa:d3:74:92:29:5e:26:22:57:19:4e:2f: 71:ee:c4:41:f5:13:12:56:1c:a8:4b:50:05:02:62:75:cd:a3: 74:28:6f:44:1c:fd:ba:83:e5:80:09:e2:98:cd:f1:8f:94:43: 01:54:0d:37:a0:8b:c0:f9:27:7e:8b:db:25:e9:a2:b7:5b:de: 96:93:d8:41:ff:1c:8f:63:5f:8d:f4:a8:79:c7:51:45:92:62: 42:59:40:d1:70:03:1f:58:a5:b3:db:c1:2c:c2:7e:e8:7c:ed: 20:34:a5:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebYj9Ma5uf4oLYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjBmOGIyOWEtMGMzMS00N2M5LWEwZDEtYjE0ZmZlMTQwYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxUV5Cy6Bl9Q1oTVXjEd2jiSVAimjkAOnBJJ rd1fZzLEEwH0+ehlfH41lheu5PEHrHo4aNmgrhIWrvWSkLsb3bA7bQC5NfXA8yP1 cHJYCpiBgKDlx9sZnJQ4YehPRtcBUopjXEShdxEm+rxNTcJO6vb7hnB55ycdpZdx DPOvSHXvhROV+LQY0FDzr+xUipwDw8/C+LGFJJl06cmIBKhThFUfDI7T0+uKgANn mjogi+UlBDHqgrkOfUmU/DMF71cEd7mCSv8ALmVG4cI6sCSfrXGV7Fopdxf5U+Yy Giz8NCdT2HfQchUkwhXueHAGvmZgohW+B7gir1g9QCjvTSSnJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFO9b5I+P0AnU0cm4c8bb409QCkX/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmZhNzJmODMtM2E1OC0z ZTU5LTg1YWQtMGI3ZTkxM2QzZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYLg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANEQhOt/tfIuDUWlXyzahJ2CVB/MLu+GqFQ/i/Qz5e+7Q6rQgA5/ SKj50fiuSc3o1cs0hr3Q3X96qJBhM67bolqdHGl1wZ9IxoChQWuHrVzNkjbFvtjL eEjf9oXCLFATLwpRNPIHN2O+Ti7vx2pVuG+5jZ2qzI9MzJ96h2iYcwM097ZYBPQE DKpALq6zJXdGY2efbe7eV/rTdJIpXiYiVxlOL3HuxEH1ExJWHKhLUAUCYnXNo3Qo b0Qc/bqD5YAJ4pjN8Y+UQwFUDTegi8D5J36L2yXpordb3paT2EH/HI9jX430qHnH UUWSYkJZQNFwAx9YpbPbwSzCfuh87SA0pcg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:11 2025 by rpki-client