$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/864cf245-f4f4-3751-ae3a-f4ce0218ac82.roa File: 864cf245-f4f4-3751-ae3a-f4ce0218ac82.roa (raw, json) Hash identifier: CEFEc2/0Ve3rlQwfOQ4n4HdSsp/CIUL8O1iJaANzTuw= Subject key identifier: 67:11:CA:9B:F5:F3:9A:42:EB:10:A2:F2:45:B0:25:A0:2A:29:2C:1A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C91EEC272779DE31FAD20 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/864cf245-f4f4-3751-ae3a-f4ce0218ac82.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:8676::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:91:ee:c2:72:77:9d:e3:1f:ad:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=6ed42e8b-dd4e-44b0-a243-dfe26ad67148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:66:2d:c4:ff:05:45:c9:27:c5:0f:b0:0d: 55:b2:3f:ee:60:75:c8:b2:fe:71:7c:bd:3b:4e:9f: 50:ca:2a:0b:a4:fa:4c:e4:cc:37:10:8a:2b:d0:b0: aa:dd:17:ca:54:26:b4:0d:0a:79:87:96:ba:40:91: 3b:b9:29:58:0b:55:6f:77:6d:14:6e:e3:e3:f8:10: 23:a0:f5:ab:28:80:c4:a0:1c:85:ba:10:44:ce:b7: 25:7a:d3:84:36:19:e6:52:28:31:db:9f:b7:b8:54: d3:33:66:4d:5d:3b:2c:58:08:bc:11:0f:f7:08:32: 0e:91:75:c9:cd:45:2d:c8:28:d2:66:93:63:ad:ca: 83:21:78:39:f5:60:c5:38:34:11:72:85:77:d5:d0: ff:84:7c:5a:fb:ad:36:56:5b:5c:df:56:d9:b3:08: 42:d7:66:10:7b:33:f2:ab:ad:c8:ea:2d:c4:af:6b: e1:fa:19:23:90:ac:1d:cb:ec:e4:2a:dd:99:5b:30: 75:96:16:2c:5b:0c:2b:05:97:8d:7a:c7:b7:27:b4: 3d:19:6b:00:69:3d:76:cb:f5:3e:9e:70:3f:08:b5: 64:24:7f:51:98:99:ee:37:7a:7b:b0:0d:0e:d9:78: 26:5f:f8:0f:d6:15:81:51:ba:e8:fc:50:d1:91:84: 86:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:11:CA:9B:F5:F3:9A:42:EB:10:A2:F2:45:B0:25:A0:2A:29:2C:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/864cf245-f4f4-3751-ae3a-f4ce0218ac82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8676::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:6c:c1:e8:a7:ff:c9:a9:ae:d9:48:11:3f:53:46:dd:b2:db: 9f:4d:62:12:3a:c8:51:62:73:8b:c5:9a:4a:8b:8f:58:fc:16: f2:db:1a:09:f8:29:53:9a:58:29:bd:c0:35:e3:b8:23:46:cb: ea:fe:6c:6f:41:73:52:f4:d9:4d:17:59:20:b1:d9:0e:db:cc: a1:20:8f:14:f0:28:e8:f8:0a:17:1d:a7:32:3d:79:77:0a:ca: 06:c5:1f:bd:09:f5:6b:ec:34:fc:6b:ff:ca:f8:24:a3:e0:b8: 0e:f6:77:e5:38:64:65:58:d8:61:3f:68:d5:3f:43:aa:43:e7: 8b:e7:9c:b1:1f:68:0f:d3:92:5c:c8:53:f0:e1:62:f5:56:b0: 87:e1:38:02:cd:28:83:cf:1e:fd:d2:b0:bf:b0:d9:19:bf:be: 70:f9:88:ff:2a:4b:17:c3:44:95:47:43:50:82:fa:34:84:18: d7:02:c8:cb:67:ee:80:d6:b3:2b:61:f4:8f:a5:62:d1:d6:78: 8f:8e:dd:69:1f:35:37:f9:40:3f:0e:2f:83:64:d3:7c:8b:67: 1d:15:1b:07:96:93:57:4c:02:46:93:84:f2:3d:cd:9f:99:0c: 12:45:a5:7c:e6:23:2e:30:da:ca:12:20:b2:3c:eb:29:c0:1d: 6b:8b:58:2f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebJHuwnJ3neMfrSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NmVkNDJlOGItZGQ0ZS00NGIwLWEyNDMtZGZlMjZhZDY3MTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNpmLcT/BUXJJ8UPsA1Vsj/uYHXIsv5xfL07 Tp9QyioLpPpM5Mw3EIor0LCq3RfKVCa0DQp5h5a6QJE7uSlYC1Vvd20UbuPj+BAj oPWrKIDEoByFuhBEzrcletOENhnmUigx25+3uFTTM2ZNXTssWAi8EQ/3CDIOkXXJ zUUtyCjSZpNjrcqDIXg59WDFODQRcoV31dD/hHxa+602Vltc31bZswhC12YQezPy q63I6i3Er2vh+hkjkKwdy+zkKt2ZWzB1lhYsWwwrBZeNese3J7Q9GWsAaT12y/U+ nnA/CLVkJH9RmJnuN3p7sA0O2XgmX/gP1hWBUbro/FDRkYSGAwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGcRypv185pC6xCi8kWwJaAqKSwaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODY0Y2YyNDUtZjRmNC0z NzUxLWFlM2EtZjRjZTAyMThhYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYZ2 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHxswein/8mprtlIET9TRt2y259NYhI6yFFic4vFmkqLj1j8FvLb Ggn4KVOaWCm9wDXjuCNGy+r+bG9Bc1L02U0XWSCx2Q7bzKEgjxTwKOj4ChcdpzI9 eXcKygbFH70J9WvsNPxr/8r4JKPguA72d+U4ZGVY2GE/aNU/Q6pD54vnnLEfaA/T klzIU/DhYvVWsIfhOALNKIPPHv3SsL+w2Rm/vnD5iP8qSxfDRJVHQ1CC+jSEGNcC yMtn7oDWsyth9I+lYtHWeI+O3WkfNTf5QD8OL4Nk03yLZx0VGweWk1dMAkaThPI9 zZ+ZDBJFpXzmIy4w2soSILI86ynAHWuLWC8= -----END CERTIFICATE-----Generated at Sun Apr 6 17:16:04 2025 by rpki-client