$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76954dd1-253d-3932-a26a-430a9b4dd690.roa File: 76954dd1-253d-3932-a26a-430a9b4dd690.roa (raw, json) Hash identifier: IDggcaFam0bnSg1TdvncLprUSgt5UU5M5XAn8V2JoAw= Subject key identifier: D6:F1:F3:62:BA:23:89:0E:FE:35:B6:2E:3F:CA:2F:71:BB:02:3D:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C898361A8B3C6B4191E00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76954dd1-253d-3932-a26a-430a9b4dd690.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:8200::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:89:83:61:a8:b3:c6:b4:19:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e2efb65c-1634-4e11-98dd-d8a36a06a6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7c:30:4d:13:f5:9c:e9:8d:2f:eb:8b:da:40: f3:38:67:f5:c6:36:3e:73:36:fb:d0:d2:6b:50:1d: 41:d8:7d:58:69:40:21:7f:d0:0d:4d:39:3d:e1:28: 13:71:e9:29:cc:d2:a6:4a:9b:94:43:5b:b5:1a:ae: bf:c8:f2:b0:e2:1a:cf:89:37:e3:7a:d3:c7:eb:a0: 5c:80:da:74:f4:24:18:00:54:83:f9:7d:ff:fd:8a: 3a:f5:05:3f:9b:cd:89:5c:e8:61:fb:56:4a:28:09: c5:91:7d:ad:53:34:65:77:cc:b8:77:25:38:7a:83: 80:39:73:03:34:88:fe:db:35:1e:28:63:4b:d2:d0: 5c:8e:cd:05:b8:8a:4d:95:52:10:57:42:d8:75:61: 46:00:ec:bf:f0:81:a0:04:7c:b2:07:82:ca:c7:2e: d1:b9:a5:92:ea:06:fa:42:40:2c:4e:4f:51:98:f6: 41:10:fa:48:6c:ba:17:57:16:52:2b:3b:92:85:00: a5:50:27:69:27:1d:de:61:83:a1:8e:0c:0e:12:e6: 12:dd:91:98:bf:a2:ed:ea:84:05:25:e4:cd:48:d6: 7a:7d:86:67:4d:38:65:b0:6e:94:f3:36:35:e0:4e: ce:ee:3e:a8:b5:cf:6d:fd:12:5d:b0:bc:fc:ba:b9: b9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F1:F3:62:BA:23:89:0E:FE:35:B6:2E:3F:CA:2F:71:BB:02:3D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76954dd1-253d-3932-a26a-430a9b4dd690.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8200::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:93:3f:f0:37:e3:bb:65:ab:5d:ab:b6:87:99:fd:17:ee:f0: 95:e8:a4:e8:56:65:0b:a4:e2:10:aa:c9:64:43:c0:e9:72:1d: 3b:2c:65:ea:88:f3:61:67:62:41:b8:64:36:6f:ed:be:45:4a: 78:ce:1a:c1:e4:98:f2:9a:2e:fd:7c:bc:f0:cf:78:b3:75:de: b8:c6:83:46:3d:29:b1:cc:3a:33:99:24:e5:a7:ba:67:f4:98: 7d:e8:39:14:43:24:3d:10:7a:eb:43:04:db:05:c7:be:32:81: a3:8d:1c:1e:d3:fd:cd:ba:de:ad:52:95:79:43:77:6d:5e:bd: 97:a6:aa:83:35:02:60:5a:d5:cb:03:99:a1:09:f4:2d:08:cd: d5:ac:f4:cb:1c:a5:f7:11:05:1b:34:be:37:80:b0:4d:9b:ee: 08:71:e1:31:96:63:68:bd:12:29:bf:ed:cb:61:ad:fd:1d:c3: 03:b3:f1:bf:1b:1c:c6:06:0e:40:ef:e4:84:2b:e9:27:19:1a: 5b:62:dd:30:a3:4d:5c:6f:50:c0:f8:a1:ff:3b:12:40:98:6c: 48:65:bb:15:2c:cd:b5:c3:e1:fb:72:88:bf:7d:87:d5:4e:5f: 76:92:14:d9:35:73:f3:91:1c:53:88:4b:03:e8:d7:f2:f1:b0: b7:6b:d4:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebImDYaizxrQZHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTJlZmI2NWMtMTYzNC00ZTExLTk4ZGQtZDhhMzZhMDZhNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHwwTRP1nOmNL+uL2kDzOGf1xjY+czb70NJr UB1B2H1YaUAhf9ANTTk94SgTcekpzNKmSpuUQ1u1Gq6/yPKw4hrPiTfjetPH66Bc gNp09CQYAFSD+X3//Yo69QU/m82JXOhh+1ZKKAnFkX2tUzRld8y4dyU4eoOAOXMD NIj+2zUeKGNL0tBcjs0FuIpNlVIQV0LYdWFGAOy/8IGgBHyyB4LKxy7RuaWS6gb6 QkAsTk9RmPZBEPpIbLoXVxZSKzuShQClUCdpJx3eYYOhjgwOEuYS3ZGYv6Lt6oQF JeTNSNZ6fYZnTThlsG6U8zY14E7O7j6otc9t/RJdsLz8urm5mwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNbx82K6I4kO/jW2Lj/KL3G7Aj3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzY5NTRkZDEtMjUzZC0z OTMyLWEyNmEtNDMwYTliNGRkNjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABaTP/A347tlq12rtoeZ/Rfu8JXopOhWZQuk4hCqyWRDwOlyHTss ZeqI82FnYkG4ZDZv7b5FSnjOGsHkmPKaLv18vPDPeLN13rjGg0Y9KbHMOjOZJOWn umf0mH3oORRDJD0QeutDBNsFx74ygaONHB7T/c263q1SlXlDd21evZemqoM1AmBa 1csDmaEJ9C0IzdWs9MscpfcRBRs0vjeAsE2b7ghx4TGWY2i9Eim/7cthrf0dwwOz 8b8bHMYGDkDv5IQr6ScZGlti3TCjTVxvUMD4of87EkCYbEhluxUszbXD4ftyiL99 h9VOX3aSFNk1c/ORHFOISwPo1/LxsLdr1Ng= -----END CERTIFICATE-----Generated at Sun Apr 6 19:18:32 2025 by rpki-client