$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/723f799a-6460-31cb-be9e-84911b00c2f0.roa File: 723f799a-6460-31cb-be9e-84911b00c2f0.roa (raw, json) Hash identifier: ZMLAZ2h/ov+UmBCAeT2/kI8gmvYO12caB3RNw5h6ke8= Subject key identifier: FA:81:BD:EC:30:40:CA:8D:12:F9:7C:40:5F:33:59:50:DC:F0:6E:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C78F4B1CE6DFF50A5BF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/723f799a-6460-31cb-be9e-84911b00c2f0.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:558:20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:78:f4:b1:ce:6d:ff:50:a5:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c125a1cc-b69d-4fcd-a8ce-31829b49c563 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b6:fc:c4:62:aa:04:d5:b6:9f:db:e4:88:33: 02:f4:1f:1e:dd:b4:69:18:2b:aa:d6:20:63:9a:70: eb:3b:33:ef:18:19:4f:f4:2f:ae:45:3a:a2:f1:44: 6a:5a:ec:02:e0:9f:38:0a:c7:d6:1e:4f:26:64:54: a2:b5:18:8e:a3:28:73:48:aa:19:a1:4f:f5:8a:f6: 24:35:13:04:3a:66:30:e8:e1:32:b5:54:b8:d0:e3: 25:3d:d3:06:27:0e:06:4e:bb:2f:00:29:ee:66:85: f5:7b:35:4d:60:1c:ff:98:da:d2:9c:8c:0b:63:2f: 44:6b:2f:b3:53:51:23:85:9f:f7:c5:3d:8b:9a:6c: e8:43:50:18:78:49:bf:81:41:9e:9a:de:fa:4c:91: 06:9f:4e:73:e9:c7:76:e2:8a:f4:4a:ba:b0:b8:28: 28:ad:a3:00:62:49:f7:fb:21:65:54:bd:db:bd:51: 1c:4b:3c:58:45:53:0d:d8:09:04:8b:86:01:9a:20: 13:13:8f:75:a1:45:d8:04:f6:55:a0:45:e5:43:ef: 65:8c:d8:25:6f:f8:c2:0a:5a:aa:e2:ba:19:61:ac: 06:4c:a5:30:8f:6a:48:97:5a:90:d0:10:73:02:47: 45:4a:37:76:cd:62:1e:8f:98:76:b0:bd:37:55:67: b7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:81:BD:EC:30:40:CA:8D:12:F9:7C:40:5F:33:59:50:DC:F0:6E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/723f799a-6460-31cb-be9e-84911b00c2f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1b:c7:5b:0d:68:d8:40:1e:37:56:a8:98:50:ba:2a:be:ae: 77:cd:1f:60:f4:1a:39:c3:3a:89:3c:6f:c9:4e:03:d5:04:e9: d9:4c:a7:3c:aa:ea:b3:d8:72:19:da:25:80:f2:ed:a0:3c:cc: bb:7a:af:33:ac:50:5f:4a:d6:a2:2e:79:48:f8:62:40:dc:dd: ad:28:b1:68:a1:1e:49:e0:6a:6c:3f:a9:a7:50:0d:6b:8b:a0: 93:a3:28:d6:8b:fd:e8:dd:7f:8a:32:23:c6:72:3b:7e:d8:c9: d2:8e:45:b4:d3:2c:6f:ed:d3:82:8d:7d:ef:3f:5f:c2:b1:36: d7:5e:f3:c6:7e:2c:cf:d2:54:63:cb:fd:87:a1:fd:3c:eb:2a: 5c:7d:44:44:99:d0:0d:54:5d:02:99:a3:67:a9:8c:82:02:b7: 92:be:51:3c:20:f8:2c:c7:ca:05:5c:3a:f8:85:1d:87:37:17: 8e:82:7a:46:16:a7:0e:13:5d:38:3c:b9:fc:0d:6e:92:2d:45: c7:83:6c:83:60:ed:b9:6f:52:c4:55:e2:85:d5:3a:ec:50:6f: b7:74:a9:5d:05:53:bd:4c:42:2d:b7:60:0d:13:ea:60:cc:c6: fe:aa:08:bb:a2:5f:22:54:c2:d8:a5:ec:c0:52:93:81:df:76: b8:8d:ba:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebHj0sc5t/1Clv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzEyNWExY2MtYjY5ZC00ZmNkLWE4Y2UtMzE4MjliNDljNTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Lb8xGKqBNW2n9vkiDMC9B8e3bRpGCuq1iBj mnDrOzPvGBlP9C+uRTqi8URqWuwC4J84CsfWHk8mZFSitRiOoyhzSKoZoU/1ivYk NRMEOmYw6OEytVS40OMlPdMGJw4GTrsvACnuZoX1ezVNYBz/mNrSnIwLYy9Eay+z U1EjhZ/3xT2LmmzoQ1AYeEm/gUGemt76TJEGn05z6cd24or0SrqwuCgoraMAYkn3 +yFlVL3bvVEcSzxYRVMN2AkEi4YBmiATE491oUXYBPZVoEXlQ+9ljNglb/jCClqq 4roZYawGTKUwj2pIl1qQ0BBzAkdFSjd2zWIej5h2sL03VWe3qQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPqBvewwQMqNEvl8QF8zWVDc8G44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzIzZjc5OWEtNjQ2MC0z MWNiLWJlOWUtODQ5MTFiMDBjMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFWAAg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABsbx1sNaNhAHjdWqJhQuiq+rnfNH2D0GjnDOok8b8lOA9UE6dlM pzyq6rPYchnaJYDy7aA8zLt6rzOsUF9K1qIueUj4YkDc3a0osWihHkngamw/qadQ DWuLoJOjKNaL/ejdf4oyI8ZyO37YydKORbTTLG/t04KNfe8/X8KxNtde88Z+LM/S VGPL/Yeh/TzrKlx9RESZ0A1UXQKZo2epjIICt5K+UTwg+CzHygVcOviFHYc3F46C ekYWpw4TXTg8ufwNbpItRceDbINg7blvUsRV4oXVOuxQb7d0qV0FU71MQi23YA0T 6mDMxv6qCLuiXyJUwtil7MBSk4HfdriNuvI= -----END CERTIFICATE-----Generated at Sun Apr 6 20:41:57 2025 by rpki-client