$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/881f1d1b-ae1c-3420-b783-763a111b8fc9.roa File: 881f1d1b-ae1c-3420-b783-763a111b8fc9.roa (raw, json) Hash identifier: Ky8wMZqnnL2RJ87l5eMU/YWxOB6Rvfo+L+zeg/uIDzQ= Subject key identifier: 29:E3:89:73:39:C5:C4:77:FC:E8:3B:5D:11:5C:99:55:CB:B5:89:F4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DAD4E3766B31BF9852180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/881f1d1b-ae1c-3420-b783-763a111b8fc9.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:8525::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:ad:4e:37:66:b3:1b:f9:85:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e8fa7bf1-6a19-4485-8027-1bfd776d70a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f9:11:66:da:17:21:7f:84:2f:27:42:2b:64: 45:30:4b:47:88:d3:98:8e:95:ab:9a:e0:22:e6:fa: 84:33:d1:27:72:09:97:29:30:c4:9e:4b:2c:db:4a: a0:9c:85:96:cf:cc:be:b6:1e:3a:34:03:26:70:9a: 7f:45:4a:a4:59:38:f6:e8:0c:51:f7:dc:55:ef:57: 91:b8:ab:df:7f:0c:be:04:25:bb:04:ca:1f:08:24: 6e:47:f5:dd:49:79:1a:1a:33:14:ca:a6:7c:da:f6: e6:eb:ae:4e:22:14:db:4e:03:91:cc:c3:3b:d0:d9: 43:11:25:b6:01:3e:5d:5c:58:03:02:b4:b8:84:84: 57:78:51:44:74:56:2e:04:63:fc:0b:d8:ac:09:3a: 03:49:f6:2d:99:28:0a:d6:77:5e:b3:ea:9b:53:9f: 6b:b7:5a:16:bf:53:a8:8f:bf:a2:b0:9b:93:e1:38: 2e:ca:df:22:58:1e:0d:ef:98:70:33:0f:50:c7:5d: 17:3c:61:fd:d3:c2:da:f9:ae:26:78:b6:e5:6c:66: 7c:1d:a1:83:65:98:76:7d:de:8c:89:87:47:11:04: 8f:d5:ba:0a:18:46:c9:76:a3:fc:dd:0a:2d:60:fb: dc:9e:94:76:8f:f7:3a:3d:54:ed:37:b6:7c:6f:87: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E3:89:73:39:C5:C4:77:FC:E8:3B:5D:11:5C:99:55:CB:B5:89:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/881f1d1b-ae1c-3420-b783-763a111b8fc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8525::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:df:d3:13:db:94:d1:a1:bd:20:4a:40:bd:ff:72:bd:53:05: 62:ed:d6:73:1f:15:5c:6a:0e:29:e0:a4:d3:38:d6:ef:80:68: e1:51:3f:2f:d3:c3:61:af:52:b8:42:66:35:71:cc:4f:5a:3c: d9:fe:77:5d:0d:a3:2a:8c:a3:f6:39:d2:46:c9:fa:c9:87:12: 95:8e:d9:6a:89:f0:21:6e:24:5b:63:28:1b:dc:ad:f8:d7:a9: f3:51:71:f0:69:ef:20:d9:2d:ef:0b:e3:96:fc:e1:9c:f1:b0: 50:05:7d:39:64:89:da:43:8d:d0:99:95:a1:0f:c7:be:1c:25: 29:4a:3c:5f:26:52:33:31:7a:75:a7:e7:f7:be:9f:84:ed:ed: f1:19:b3:59:dc:b4:55:50:a9:02:6e:4d:4a:0d:78:4b:e4:7c: 40:2e:62:ff:09:0d:0a:13:64:12:3f:3f:7e:65:17:61:75:2b: d5:1c:a0:25:c3:8b:04:20:ba:b9:b5:57:69:49:c3:b8:60:07: 59:b4:4d:97:42:1a:3b:a5:79:23:84:db:49:7a:5f:61:de:48: dc:b1:f9:a0:7c:3d:05:e3:80:77:05:d2:ba:81:a6:ad:6b:25: ce:dd:f4:ec:6f:64:89:a3:3e:14:a2:f0:52:53:60:3d:5d:de: bd:9a:db:0f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEieba1ON2azG/mFIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZThmYTdiZjEtNmExOS00NDg1LTgwMjctMWJmZDc3NmQ3MGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/kRZtoXIX+ELydCK2RFMEtHiNOYjpWrmuAi 5vqEM9EncgmXKTDEnkss20qgnIWWz8y+th46NAMmcJp/RUqkWTj26AxR99xV71eR uKvffwy+BCW7BMofCCRuR/XdSXkaGjMUyqZ82vbm665OIhTbTgORzMM70NlDESW2 AT5dXFgDArS4hIRXeFFEdFYuBGP8C9isCToDSfYtmSgK1ndes+qbU59rt1oWv1Oo j7+isJuT4Tguyt8iWB4N75hwMw9Qx10XPGH908La+a4meLblbGZ8HaGDZZh2fd6M iYdHEQSP1boKGEbJdqP83QotYPvcnpR2j/c6PVTtN7Z8b4d60wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCnjiXM5xcR3/Og7XRFcmVXLtYn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODgxZjFkMWItYWUxYy0z NDIwLWI3ODMtNzYzYTExMWI4ZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYUl MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHbf0xPblNGhvSBKQL3/cr1TBWLt1nMfFVxqDingpNM41u+AaOFR Py/Tw2GvUrhCZjVxzE9aPNn+d10NoyqMo/Y50kbJ+smHEpWO2WqJ8CFuJFtjKBvc rfjXqfNRcfBp7yDZLe8L45b84ZzxsFAFfTlkidpDjdCZlaEPx74cJSlKPF8mUjMx enWn5/e+n4Tt7fEZs1nctFVQqQJuTUoNeEvkfEAuYv8JDQoTZBI/P35lF2F1K9Uc oCXDiwQgurm1V2lJw7hgB1m0TZdCGjuleSOE20l6X2HeSNyx+aB8PQXjgHcF0rqB pq1rJc7d9OxvZImjPhSi8FJTYD1d3r2a2w8= -----END CERTIFICATE-----Generated at Sun Apr 6 12:10:42 2025 by rpki-client