$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/855e6a4f-783d-310e-9dc4-e96ecb5ee205.roa File: 855e6a4f-783d-310e-9dc4-e96ecb5ee205.roa (raw, json) Hash identifier: Mhk2SQeQhk+PpUcZLYzI8Pm/KYs07QK5FnmWzQuVg+o= Subject key identifier: 3F:D3:0E:77:6B:16:CE:F7:8D:7C:BE:AA:81:87:2C:40:D5:E8:39:09 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848A1362A4251F1FCB8952EC500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/855e6a4f-783d-310e-9dc4-e96ecb5ee205.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 7016 IP address blocks: 2001:559:4b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:2a:42:51:f1:fc:b8:95:2e:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=56389a6d-3a8c-4988-8030-0017ca6cc936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:54:28:be:34:06:45:eb:07:20:b0:ff:46:b6: e0:30:48:b8:f6:f6:51:af:c5:39:41:79:93:cb:02: 86:ab:c4:64:49:b4:84:c8:bb:8c:d4:37:86:92:39: fd:40:60:6a:47:bb:80:2f:84:1f:c8:d6:19:09:17: ff:47:aa:dd:fb:43:9a:ea:08:48:9c:6d:bf:f5:be: 88:09:46:47:81:5a:9c:79:31:be:5b:26:44:8d:a2: 39:02:fd:6c:fd:ae:a3:75:df:d0:f5:95:ca:ca:b7: 3e:e6:a4:2f:1b:4c:23:ab:7d:83:4a:b7:1c:13:59: 3a:bf:af:39:2a:6d:21:38:3d:65:dd:cc:4c:85:d2: f2:b8:d7:80:4e:ce:10:e0:b3:a0:25:26:05:0e:16: a5:59:99:d6:7a:34:bf:28:51:a3:f6:d8:12:30:13: 1f:2e:65:6c:6f:0b:0a:01:2e:46:02:7a:d1:89:55: ab:88:dc:d3:95:c8:43:98:95:cc:ae:45:fd:47:07: 22:ea:c1:54:81:ad:27:4c:0d:66:72:b9:53:de:3d: 23:4b:19:15:c9:0d:d1:c7:e0:fb:62:75:0b:1b:62: 68:f6:a7:ea:ca:26:b3:dd:c3:85:b8:c3:1e:78:2a: 21:1d:00:bf:46:7b:6b:4a:db:b2:92:0c:99:91:81: 6f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:D3:0E:77:6B:16:CE:F7:8D:7C:BE:AA:81:87:2C:40:D5:E8:39:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/855e6a4f-783d-310e-9dc4-e96ecb5ee205.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:4b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:83:fc:d9:19:9c:23:40:ac:0b:01:94:f2:9d:53:9e:3e:96: 3b:6a:66:06:32:3c:bc:2b:f5:3c:7d:20:5a:29:50:04:a1:b5: 49:eb:e2:d0:67:be:6a:67:b9:f6:23:d8:23:27:23:a2:05:bf: 02:1f:82:84:48:54:02:fe:62:64:41:cb:d0:d8:d8:a0:7c:4b: 00:c5:f1:d7:ee:44:7d:84:85:a0:06:31:66:13:2f:12:5b:ec: 9c:d8:e5:36:77:cf:65:00:94:96:7e:65:94:56:2c:6f:b1:5d: ee:fa:e6:48:52:e6:76:fb:81:f9:35:09:d8:76:a0:56:41:28: 55:ae:b8:c1:6b:73:c7:ba:74:1b:d0:98:c6:26:38:c1:c8:09: ab:2e:8e:a7:85:d3:c5:46:90:15:a7:5e:f4:10:1d:d1:a4:53: e6:eb:5a:6d:87:3b:a5:3b:3f:93:98:04:88:27:52:51:90:60: b0:15:46:cb:f6:7f:92:51:55:a9:7c:78:2e:be:07:34:2c:e7: de:82:2b:9b:0b:db:c8:c0:fd:54:77:03:fe:29:a2:36:28:fb: 40:f0:75:0f:31:ab:99:1f:56:06:ab:54:95:11:d1:15:2d:a9: fb:31:0a:88:80:72:9e:6e:b7:6e:13:ac:16:64:8f:a7:9e:ed: 25:cf:fb:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNipCUfH8uJUuxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NTYzODlhNmQtM2E4Yy00OTg4LTgwMzAtMDAxN2NhNmNjOTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01QovjQGResHILD/RrbgMEi49vZRr8U5QXmT ywKGq8RkSbSEyLuM1DeGkjn9QGBqR7uAL4QfyNYZCRf/R6rd+0Oa6ghInG2/9b6I CUZHgVqceTG+WyZEjaI5Av1s/a6jdd/Q9ZXKyrc+5qQvG0wjq32DSrccE1k6v685 Km0hOD1l3cxMhdLyuNeATs4Q4LOgJSYFDhalWZnWejS/KFGj9tgSMBMfLmVsbwsK AS5GAnrRiVWriNzTlchDmJXMrkX9Rwci6sFUga0nTA1mcrlT3j0jSxkVyQ3Rx+D7 YnULG2Jo9qfqyiaz3cOFuMMeeCohHQC/RntrStuykgyZkYFv9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD/TDndrFs73jXy+qoGHLEDV6DkJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU1ZTZhNGYtNzgzZC0z MTBlLTlkYzQtZTk2ZWNiNWVlMjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQS1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA6D/NkZnCNArAsBlPKdU54+ljtqZgYyPLwr9Tx9IFopUAShtUnr 4tBnvmpnufYj2CMnI6IFvwIfgoRIVAL+YmRBy9DY2KB8SwDF8dfuRH2EhaAGMWYT LxJb7JzY5TZ3z2UAlJZ+ZZRWLG+xXe765khS5nb7gfk1Cdh2oFZBKFWuuMFrc8e6 dBvQmMYmOMHICasujqeF08VGkBWnXvQQHdGkU+brWm2HO6U7P5OYBIgnUlGQYLAV Rsv2f5JRVal8eC6+BzQs596CK5sL28jA/VR3A/4pojYo+0DwdQ8xq5kfVgarVJUR 0RUtqfsxCoiAcp5ut24TrBZkj6ee7SXP+5A= -----END CERTIFICATE-----Generated at Mon Apr 7 05:55:41 2025 by rpki-client