$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8525998b-e977-3d4c-9a0c-eff7eb25b740.roa File: 8525998b-e977-3d4c-9a0c-eff7eb25b740.roa (raw, json) Hash identifier: GnogdKXJnAfnFAgZPnlpS1MhSGk6QUxX8RsWSxmWPyQ= Subject key identifier: FF:C2:9F:1B:3B:D4:66:9E:E1:0C:10:E4:0B:F5:21:F3:06:12:41:9C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4D30D1EA70892A8D0FD50 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8525998b-e977-3d4c-9a0c-eff7eb25b740.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 21508 IP address blocks: 2001:559:5da::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:d3:0d:1e:a7:08:92:a8:d0:fd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=5d43c70c-43d1-435c-ba35-9e9e0b1fe0c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:a4:e0:75:c5:b7:1f:96:a9:4e:ff:28:e0: 31:c7:89:73:3d:ec:00:79:c6:3d:48:cb:ec:18:a5: 1a:cf:c8:b0:0f:64:ee:9d:5d:49:1a:26:ce:8b:47: 0c:8c:da:ce:06:be:ec:f6:db:e9:7c:4f:9f:0f:b1: b1:e2:9c:9e:26:8d:61:38:da:21:e0:70:b7:16:e3: 8d:a8:c0:b2:58:ce:d3:7e:26:ce:71:79:70:b6:5e: 95:21:91:54:14:b1:98:43:46:b7:b4:33:ee:b4:61: bf:2f:3b:73:22:af:8f:db:b1:ba:26:61:62:1b:25: c9:e9:33:75:1d:d2:f2:6d:af:de:83:07:07:e0:42: 17:40:40:67:45:61:24:f4:63:cb:30:a7:83:bc:58: 74:90:50:52:72:b1:f3:70:92:12:d9:03:8c:07:37: 6d:bd:62:6f:54:15:a9:42:6c:5f:a3:d7:40:21:81: 85:1c:fc:d0:04:cc:aa:24:d7:d7:33:17:4d:ec:93: fb:33:4e:4c:ea:84:5b:3d:74:be:dc:7e:59:33:e9: 0a:da:ef:21:c9:fb:7e:7a:7f:24:b2:25:47:64:ef: 92:75:77:23:ab:af:03:94:01:b0:a7:40:9b:10:d3: 3d:a6:e3:ca:5f:67:e3:43:3e:21:16:da:f0:e8:f0: 27:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C2:9F:1B:3B:D4:66:9E:E1:0C:10:E4:0B:F5:21:F3:06:12:41:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8525998b-e977-3d4c-9a0c-eff7eb25b740.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:5da::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:94:37:04:40:cc:48:7b:12:51:0e:bf:c8:38:10:45:9c:47: 32:55:5f:55:5a:f8:b1:79:51:ab:b7:ed:da:ec:4d:6a:0f:9c: 1b:8b:71:9e:e5:0c:43:81:07:c8:48:24:02:39:dc:85:4e:c6: 81:9b:e3:85:d3:2c:d0:33:2d:6a:3a:bf:23:6c:45:3a:41:ff: c0:81:8e:e3:f3:65:72:48:32:79:9a:af:fa:59:e8:33:a8:40: ac:70:32:f8:ca:6c:1d:02:b0:8f:b5:1f:88:9f:bc:a5:97:10: 0c:2a:bf:db:50:4c:54:29:01:78:1d:e4:90:83:38:e0:ee:1e: a7:22:82:db:34:a8:73:3f:90:96:9f:25:5f:2c:bf:4a:3b:e0: 5b:5a:50:99:3e:89:4e:92:06:dd:30:b8:48:4f:8a:1a:b1:23: 63:43:91:88:aa:ae:cd:cf:de:c5:4b:5c:9b:de:ec:24:d7:fd: f2:16:fe:1c:01:4c:af:50:f7:2e:f8:cf:30:97:6d:00:ff:c6: 91:11:a4:ee:10:94:2f:46:61:b6:93:32:6b:46:3a:85:8f:5b: 9e:2a:05:98:ec:ae:99:cd:c0:52:08:b0:fa:1b:82:24:38:c7: ea:59:90:c2:7c:98:2b:2c:db:5a:0a:85:40:a2:64:1a:bb:d0: 58:e7:cb:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pNMNHqcIkqjQ/VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWQ0M2M3MGMtNDNkMS00MzVjLWJhMzUtOWU5ZTBiMWZlMGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3Gk4HXFtx+WqU7/KOAxx4lzPewAecY9SMvs GKUaz8iwD2TunV1JGibOi0cMjNrOBr7s9tvpfE+fD7Gx4pyeJo1hONoh4HC3FuON qMCyWM7TfibOcXlwtl6VIZFUFLGYQ0a3tDPutGG/LztzIq+P27G6JmFiGyXJ6TN1 HdLyba/egwcH4EIXQEBnRWEk9GPLMKeDvFh0kFBScrHzcJIS2QOMBzdtvWJvVBWp Qmxfo9dAIYGFHPzQBMyqJNfXMxdN7JP7M05M6oRbPXS+3H5ZM+kK2u8hyft+en8k siVHZO+SdXcjq68DlAGwp0CbENM9puPKX2fjQz4hFtrw6PAnTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP/Cnxs71Gae4QwQ5Av1IfMGEkGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODUyNTk5OGItZTk3Ny0z ZDRjLTlhMGMtZWZmN2ViMjViNzQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQXa MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADeUNwRAzEh7ElEOv8g4EEWcRzJVX1Va+LF5Uau37drsTWoPnBuL cZ7lDEOBB8hIJAI53IVOxoGb44XTLNAzLWo6vyNsRTpB/8CBjuPzZXJIMnmar/pZ 6DOoQKxwMvjKbB0CsI+1H4ifvKWXEAwqv9tQTFQpAXgd5JCDOODuHqcigts0qHM/ kJafJV8sv0o74FtaUJk+iU6SBt0wuEhPihqxI2NDkYiqrs3P3sVLXJve7CTX/fIW /hwBTK9Q9y74zzCXbQD/xpERpO4QlC9GYbaTMmtGOoWPW54qBZjsrpnNwFIIsPob giQ4x+pZkMJ8mCss21oKhUCiZBq70Fjny2A= -----END CERTIFICATE-----Generated at Sat Apr 12 13:52:15 2025 by rpki-client