$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75c72c47-c369-384f-9e89-7372f1f6c20d.roa File: 75c72c47-c369-384f-9e89-7372f1f6c20d.roa (raw, json) Hash identifier: cXrOo5/YG/EU+JHqUxLW9D+kDchPto0D4ISxJHQQ9zY= Subject key identifier: 29:A1:14:31:2F:B5:4C:62:41:3F:C0:08:F8:9B:B5:9E:18:FF:0F:56 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C93D9EF351AA8A596E000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75c72c47-c369-384f-9e89-7372f1f6c20d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:c0e3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:93:d9:ef:35:1a:a8:a5:96:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=2bd84f86-2030-4eb9-8790-0db47fe8b23d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c2:21:62:9f:f7:27:b7:d5:af:3f:25:59:52: 2a:4b:33:d2:84:b7:4b:9e:07:e3:8c:80:d1:c0:e9: f5:a3:9d:bc:c5:18:1f:51:35:87:ed:c9:a2:de:6d: 46:44:19:79:48:9e:f2:ae:53:5f:bc:39:ec:48:77: ae:f6:fc:ac:31:5c:27:f0:da:97:61:fe:76:82:50: 10:6b:40:9d:5f:7e:7e:a6:89:ed:d3:e3:e6:21:28: 36:a3:58:e8:ce:f3:ed:3c:be:fb:e8:c5:1a:11:bb: 74:c5:50:b7:e2:31:a9:2a:76:d9:a6:fb:43:e7:11: ad:34:03:69:6e:f2:39:06:61:fc:b0:b0:38:c8:f1: 8a:2c:2e:ad:68:4d:00:77:c1:3a:1d:71:cb:ac:d3: ea:96:ef:61:76:c7:2a:b5:eb:e0:b5:56:9f:8b:95: 71:c8:7c:5c:08:a4:75:4b:7b:5c:f1:f4:d7:c9:11: 93:04:ca:35:46:09:c2:86:59:be:c0:99:84:a3:e2: 8b:2e:a8:08:46:f8:73:01:a7:09:20:9f:de:66:7f: 19:5c:3f:c3:06:f7:4f:f1:86:6f:de:9e:c9:cf:d4: 8f:53:d9:3b:f8:8b:97:5e:0e:4b:de:da:b3:7b:89: 24:76:b3:0c:d0:4b:46:2b:1a:97:7a:0d:10:22:0a: f8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A1:14:31:2F:B5:4C:62:41:3F:C0:08:F8:9B:B5:9E:18:FF:0F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/75c72c47-c369-384f-9e89-7372f1f6c20d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c0e3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:04:10:7d:86:eb:bd:3b:f9:c2:50:59:85:f2:52:ec:ef:af: a0:f2:6a:7d:f2:8e:ac:69:94:c3:02:c4:a9:33:d0:b5:06:1a: 3d:36:1c:e8:18:0c:51:31:12:b5:86:30:6a:47:b0:93:fc:b5: 92:47:30:06:86:67:49:6a:05:cf:b2:f7:04:11:17:db:d8:27: db:fe:f2:f6:98:f5:41:f7:de:ce:77:ce:2f:de:28:7d:81:16: af:28:53:e9:f7:3e:67:5f:e6:8e:7b:12:64:0a:ba:98:0b:8b: 18:c5:57:c2:77:df:33:c2:c1:98:5f:a2:64:33:27:9f:8d:b8: 31:2c:29:1c:f7:bd:bb:af:b3:c1:f8:ac:55:ff:f1:b6:c3:21: 8d:80:0c:1f:da:4b:ae:37:8b:df:6e:6d:18:67:b9:99:13:14: 19:69:3f:a6:25:8a:0e:0e:b1:6d:fc:13:ff:f6:f6:0e:69:d9: 1b:92:d1:53:ed:9c:07:67:51:f0:ea:a2:54:79:4d:fd:48:e7: 0a:1b:85:9a:c6:35:8a:d4:5b:7c:47:98:a4:9b:d9:03:23:a1: b2:6f:ff:63:2b:a8:3e:18:80:8c:82:60:c6:c0:0a:f6:d3:fd: 8a:6f:39:e1:52:94:cf:2a:d1:a7:07:cc:da:1e:72:e8:86:95: 9b:84:e6:9e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebJPZ7zUaqKWW4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MmJkODRmODYtMjAzMC00ZWI5LTg3OTAtMGRiNDdmZThiMjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsIhYp/3J7fVrz8lWVIqSzPShLdLngfjjIDR wOn1o528xRgfUTWH7cmi3m1GRBl5SJ7yrlNfvDnsSHeu9vysMVwn8NqXYf52glAQ a0CdX35+pont0+PmISg2o1jozvPtPL776MUaEbt0xVC34jGpKnbZpvtD5xGtNANp bvI5BmH8sLA4yPGKLC6taE0Ad8E6HXHLrNPqlu9hdscqtevgtVafi5VxyHxcCKR1 S3tc8fTXyRGTBMo1RgnChlm+wJmEo+KLLqgIRvhzAacJIJ/eZn8ZXD/DBvdP8YZv 3p7Jz9SPU9k7+IuXXg5L3tqze4kkdrMM0EtGKxqXeg0QIgr4vQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCmhFDEvtUxiQT/ACPibtZ4Y/w9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzVjNzJjNDctYzM2OS0z ODRmLTllODktNzM3MmYxZjZjMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcDj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFgEEH2G6707+cJQWYXyUuzvr6Dyan3yjqxplMMCxKkz0LUGGj02 HOgYDFExErWGMGpHsJP8tZJHMAaGZ0lqBc+y9wQRF9vYJ9v+8vaY9UH33s53zi/e KH2BFq8oU+n3Pmdf5o57EmQKupgLixjFV8J33zPCwZhfomQzJ5+NuDEsKRz3vbuv s8H4rFX/8bbDIY2ADB/aS643i99ubRhnuZkTFBlpP6Ylig4OsW38E//29g5p2RuS 0VPtnAdnUfDqolR5Tf1I5wobhZrGNYrUW3xHmKSb2QMjobJv/2MrqD4YgIyCYMbA CvbT/YpvOeFSlM8q0acHzNoecuiGlZuE5p4= -----END CERTIFICATE-----Generated at Sun Apr 6 22:44:58 2025 by rpki-client