$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81fbd95d-9aed-330c-86c7-fb2520cb6b0a.roa File: 81fbd95d-9aed-330c-86c7-fb2520cb6b0a.roa (raw, json) Hash identifier: dCsD5M3Dv3SzGxf21pzSurz2pyshlolsTH1T2BgZiJs= Subject key identifier: A6:9B:70:98:12:8D:E0:F1:F7:B7:B5:3D:EE:3D:D9:E6:0B:54:9C:39 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D9BAFF1DDEA08F309DC00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81fbd95d-9aed-330c-86c7-fb2520cb6b0a.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33668 IP address blocks: 2001:559:c150::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:9b:af:f1:dd:ea:08:f3:09:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7b8aa950-4da0-4c11-bf4d-3bac923b1d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:43:ec:c8:c6:5a:6d:ab:5c:b1:73:c3:ff:38: 3a:8c:e5:92:15:10:28:e8:75:ee:47:74:bd:7e:fb: 05:cb:0f:68:15:c0:0e:2c:1f:06:4c:21:51:82:65: fb:1f:6a:dd:e3:38:69:26:9d:56:a5:53:e2:89:49: 41:c3:f6:16:ac:71:92:7c:11:7f:1b:6d:c6:42:00: 8b:dd:93:d1:88:36:71:fe:01:44:0f:26:02:df:d5: 34:54:e9:9f:23:96:d5:47:cc:0c:a0:00:c8:e0:89: e2:2a:23:d9:55:1f:33:2e:c5:5a:ab:b6:86:74:72: 5d:b6:ca:c2:52:82:85:03:74:8e:51:48:4c:16:6c: ba:e3:56:77:3c:63:0f:e6:88:21:16:70:15:71:59: 74:aa:d5:9c:7b:cf:14:1a:9a:f8:54:64:b9:2e:93: b7:76:0a:c1:72:fd:46:1a:64:df:7e:67:00:20:74: 98:ca:f4:31:55:0a:c6:69:0d:85:fc:42:42:73:9f: dd:47:33:ab:ad:21:27:31:42:22:46:c8:19:39:a0: 8a:93:7f:94:65:bd:36:49:69:38:f3:5e:37:ce:1d: 16:a6:48:cf:67:71:fd:38:4c:63:8b:db:a1:61:7e: 9c:d5:70:6f:8a:cf:07:ca:b2:b9:60:2c:f3:38:a8: 70:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9B:70:98:12:8D:E0:F1:F7:B7:B5:3D:EE:3D:D9:E6:0B:54:9C:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/81fbd95d-9aed-330c-86c7-fb2520cb6b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c150::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:9d:61:8a:31:5d:3c:c2:2c:76:aa:b1:92:c7:db:68:52:77: 3b:47:80:d2:91:7d:f2:7c:0c:d7:05:fa:d5:ae:29:32:81:d5: cb:71:9d:1a:d6:c8:f7:33:c0:e9:68:98:0e:00:83:26:45:30: 6b:b0:82:2c:7a:d1:f7:8c:df:38:9b:60:40:9a:84:3c:d8:33: f7:24:9c:e3:00:af:84:ad:d4:89:53:f3:a5:2b:43:4c:1a:00: 84:9a:f8:bb:0a:58:97:48:9a:fb:ef:5a:71:05:3f:e8:25:3a: 30:01:8c:3e:e9:22:1e:e5:e2:d7:f2:fc:30:8a:da:0a:ac:47: 13:1b:5c:13:00:0c:99:2c:4a:46:92:48:6e:3e:6b:c6:bb:9a: 14:60:4a:a2:ef:57:21:40:12:a9:34:93:a0:67:90:d8:27:9a: a7:72:33:ef:33:73:f0:60:87:a7:31:e1:39:87:75:e9:1c:af: 78:f3:82:4b:e8:9b:ec:81:12:37:ca:fb:bf:43:7a:e6:12:c2: c7:70:87:11:f4:0c:d5:26:b3:71:d1:01:57:32:ab:e2:ca:d4: be:f1:ff:2b:48:56:31:47:6c:0a:9d:4d:28:2d:7a:3f:e4:3c: 32:99:40:aa:49:e3:78:a7:ad:86:9a:df:2f:b7:e0:50:17:98: 36:12:d7:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebZuv8d3qCPMJ3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk N2I4YWE5NTAtNGRhMC00YzExLWJmNGQtM2JhYzkyM2IxZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEPsyMZabatcsXPD/zg6jOWSFRAo6HXuR3S9 fvsFyw9oFcAOLB8GTCFRgmX7H2rd4zhpJp1WpVPiiUlBw/YWrHGSfBF/G23GQgCL 3ZPRiDZx/gFEDyYC39U0VOmfI5bVR8wMoADI4IniKiPZVR8zLsVaq7aGdHJdtsrC UoKFA3SOUUhMFmy641Z3PGMP5oghFnAVcVl0qtWce88UGpr4VGS5LpO3dgrBcv1G GmTffmcAIHSYyvQxVQrGaQ2F/EJCc5/dRzOrrSEnMUIiRsgZOaCKk3+UZb02SWk4 8143zh0WpkjPZ3H9OExji9uhYX6c1XBvis8HyrK5YCzzOKhwiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKabcJgSjeDx97e1Pe492eYLVJw5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODFmYmQ5NWQtOWFlZC0z MzBjLTg2YzctZmIyNTIwY2I2YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcFQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAImdYYoxXTzCLHaqsZLH22hSdztHgNKRffJ8DNcF+tWuKTKB1ctx nRrWyPczwOlomA4AgyZFMGuwgix60feM3zibYECahDzYM/cknOMAr4St1IlT86Ur Q0waAISa+LsKWJdImvvvWnEFP+glOjABjD7pIh7l4tfy/DCK2gqsRxMbXBMADJks SkaSSG4+a8a7mhRgSqLvVyFAEqk0k6BnkNgnmqdyM+8zc/Bgh6cx4TmHdekcr3jz gkvom+yBEjfK+79DeuYSwsdwhxH0DNUms3HRAVcyq+LK1L7x/ytIVjFHbAqdTSgt ej/kPDKZQKpJ43inrYaa3y+34FAXmDYS1w8= -----END CERTIFICATE-----Generated at Mon Apr 7 06:03:12 2025 by rpki-client