$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f2b6f5-4b2a-349b-a497-1ed0e8d1e301.roa File: 87f2b6f5-4b2a-349b-a497-1ed0e8d1e301.roa (raw, json) Hash identifier: Zrk4nUczDZft/MjXwdKFlSy08R2tTi6Vc6OHc8KGsUo= Subject key identifier: E2:E0:64:93:FE:D9:58:B5:51:CC:36:E1:77:B1:F8:EA:A8:41:5C:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BC11243D929C234B9F280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f2b6f5-4b2a-349b-a497-1ed0e8d1e301.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7016 IP address blocks: 2001:559:c524::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:c1:12:43:d9:29:c2:34:b9:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ddb8ee4e-ba5d-4482-bd04-ce6670a819bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:71:99:a4:f7:85:4e:ad:f2:b8:44:62:24:4c: d6:2c:0c:19:86:f2:14:a5:5a:a4:71:b2:f2:bd:66: 04:8e:0a:5b:d9:f5:96:23:fc:00:93:a3:a2:b8:01: 1a:00:3e:51:ef:70:a3:07:49:12:d1:7f:a7:42:3f: ba:1d:64:de:11:e0:f9:ce:76:9b:53:14:6c:6d:08: 82:62:3e:f0:a5:cf:25:55:ee:e1:d4:77:40:39:5b: f6:6a:e2:62:09:8d:d0:74:48:fb:53:84:f2:00:70: f2:3a:77:0b:d5:82:fe:05:d6:43:eb:38:12:24:2c: b1:9e:67:70:58:ed:60:5c:14:7d:21:88:34:7d:34: f0:a6:24:7a:ff:a2:37:b5:d2:6f:a7:f9:52:ad:62: 0a:2f:c7:99:5e:22:36:86:fd:b0:4b:cb:5f:1a:50: e9:b6:a1:8a:09:d8:5c:8e:0f:bd:f7:d7:47:31:d0: 9d:9a:0d:7f:45:78:04:09:cd:0b:7c:5c:90:6a:c7: 58:a7:1a:e5:d0:2e:dc:26:43:b3:6e:67:7a:90:ac: 10:5e:48:87:d3:8f:93:af:7f:43:5d:cc:38:83:74: 58:46:38:f2:ed:11:7c:17:5a:bf:fa:a1:3e:68:a6: 6e:ba:1b:c5:5b:8d:36:37:36:2d:14:bc:a0:cd:0c: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E0:64:93:FE:D9:58:B5:51:CC:36:E1:77:B1:F8:EA:A8:41:5C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87f2b6f5-4b2a-349b-a497-1ed0e8d1e301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c524::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:8f:00:04:e5:6c:36:5f:6e:ea:14:c5:1f:fe:3b:a0:32:f9: 0b:20:7f:f1:3b:21:b5:e9:1a:d3:36:da:74:5f:5d:23:af:65: 22:ae:16:f1:e4:ff:d8:3d:f4:69:00:94:38:31:20:77:c8:ee: 27:e2:bc:fb:a7:c8:f6:0a:a1:3d:fe:1b:45:64:a9:8a:25:83: 8b:c6:d7:57:ce:70:c2:ce:59:a4:1b:2d:ba:09:c8:b9:21:1a: 8b:bb:74:78:2f:1c:3b:7d:f4:db:58:28:95:2e:29:f6:5e:f0: 32:01:e0:b7:14:99:30:22:26:22:d4:ed:a3:9d:a8:c9:18:84: 68:5b:d9:cc:4f:32:2a:21:4c:fa:31:84:53:e2:86:ef:80:f9: 25:5e:69:0c:29:94:f4:51:40:a6:0f:4f:59:78:0e:ec:5d:44: 8a:2d:98:55:a1:f3:ec:d3:80:ec:fa:04:c2:7a:7f:a3:cd:27: f2:cb:1c:c6:b8:7f:6d:0c:2f:6e:2d:54:7f:46:4b:59:e1:e9: 66:85:2e:84:0b:84:34:3e:3c:15:4e:eb:0f:ae:15:a5:c2:98: bf:2a:8e:d4:73:a1:8c:0a:98:d5:ef:37:af:a0:4c:34:30:ac: 56:35:d9:28:49:85:ad:9a:e5:9c:3c:1d:21:e7:80:7c:68:4c: a2:a0:b0:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea8ESQ9kpwjS58oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZGRiOGVlNGUtYmE1ZC00NDgyLWJkMDQtY2U2NjcwYTgxOWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnGZpPeFTq3yuERiJEzWLAwZhvIUpVqkcbLy vWYEjgpb2fWWI/wAk6OiuAEaAD5R73CjB0kS0X+nQj+6HWTeEeD5znabUxRsbQiC Yj7wpc8lVe7h1HdAOVv2auJiCY3QdEj7U4TyAHDyOncL1YL+BdZD6zgSJCyxnmdw WO1gXBR9IYg0fTTwpiR6/6I3tdJvp/lSrWIKL8eZXiI2hv2wS8tfGlDptqGKCdhc jg+999dHMdCdmg1/RXgECc0LfFyQasdYpxrl0C7cJkOzbmd6kKwQXkiH04+Tr39D Xcw4g3RYRjjy7RF8F1q/+qE+aKZuuhvFW402NzYtFLygzQwJYQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOLgZJP+2Vi1Ucw24Xex+OqoQVwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODdmMmI2ZjUtNGIyYS0z NDliLWE0OTctMWVkMGU4ZDFlMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcUk MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAISPAATlbDZfbuoUxR/+O6Ay+Qsgf/E7IbXpGtM22nRfXSOvZSKu FvHk/9g99GkAlDgxIHfI7ifivPunyPYKoT3+G0VkqYolg4vG11fOcMLOWaQbLboJ yLkhGou7dHgvHDt99NtYKJUuKfZe8DIB4LcUmTAiJiLU7aOdqMkYhGhb2cxPMioh TPoxhFPihu+A+SVeaQwplPRRQKYPT1l4DuxdRIotmFWh8+zTgOz6BMJ6f6PNJ/LL HMa4f20ML24tVH9GS1nh6WaFLoQLhDQ+PBVO6w+uFaXCmL8qjtRzoYwKmNXvN6+g TDQwrFY12ShJha2a5Zw8HSHngHxoTKKgsBQ= -----END CERTIFICATE-----Generated at Mon Apr 7 06:05:08 2025 by rpki-client