$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8affa84a-f811-315f-bcdf-300e06274acb.roa File: 8affa84a-f811-315f-bcdf-300e06274acb.roa (raw, json) Hash identifier: 3svv+VR4NZGIwAL+OKOuwqsL+CtnC+Mdm06CRSYZ5Z0= Subject key identifier: 35:C2:C8:6B:6D:F9:6B:44:4B:A0:74:CD:62:25:DB:00:BD:A4:72:7B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DA438108FD3443BB48C00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8affa84a-f811-315f-bcdf-300e06274acb.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:558:fe02::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:a4:38:10:8f:d3:44:3b:b4:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=59107352-eded-4b92-b1a3-038b4d5253d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:37:5a:fc:42:2e:70:27:ff:99:c3:26:46: eb:22:40:fb:83:d1:91:8f:0e:4e:a4:20:08:47:c6: 17:d5:ed:8e:d5:89:66:19:34:fb:38:60:06:d1:f7: 77:fb:c1:cb:e1:6c:e9:b4:04:35:71:cc:e0:57:f8: c1:86:cc:55:c9:63:b5:1f:f4:bc:e7:34:18:26:d9: 57:ff:6a:1d:87:25:58:f2:74:7d:3f:46:5d:15:bc: 14:2a:d4:da:11:21:2b:9e:76:5d:bc:dd:9d:c0:d5: a6:cf:e6:ad:53:1c:d1:b2:fd:f1:86:c2:01:78:db: 26:ca:94:d6:65:d5:8b:2e:d9:8b:67:bf:4d:cc:12: 9b:95:8b:fc:b7:83:ff:97:06:c5:6d:76:83:15:e1: 0a:77:95:0c:e7:04:22:f3:b3:cc:3f:d8:78:9c:c6: 64:e8:11:48:d3:26:a6:34:e3:4f:ff:04:a8:ff:b3: b2:c1:95:42:34:fe:8b:51:1c:58:6b:a3:4d:c4:b6: ee:dc:c0:24:d4:a1:23:5d:88:3b:c4:74:73:09:c1: 89:20:26:77:b6:c2:0d:61:36:ad:13:d6:99:55:51: fd:f2:d4:02:33:bd:03:c8:7b:d2:43:77:07:3c:70: 7c:db:16:bc:40:5f:88:01:85:55:fc:54:b4:cb:3e: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C2:C8:6B:6D:F9:6B:44:4B:A0:74:CD:62:25:DB:00:BD:A4:72:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8affa84a-f811-315f-bcdf-300e06274acb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:fe02::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:93:28:8d:22:25:af:29:f8:76:95:46:51:6f:21:5f:a0:f4: 08:e7:29:27:6e:de:bc:1f:a1:3f:74:f2:a9:1b:f3:bf:9b:8b: 34:b2:8b:1c:9c:58:68:ab:e2:40:b6:80:d1:65:23:90:02:47: ab:74:a1:0f:6f:fb:ae:41:c9:b7:5c:a4:3b:98:0d:56:9d:d2: 65:d1:b8:3f:a9:e9:8c:7d:25:f4:f1:31:a3:fe:3f:0b:fe:a3: d2:62:ae:09:11:3b:ba:aa:25:5e:5b:85:5b:46:2a:ee:18:ab: 9e:58:86:dc:83:66:ff:48:5e:04:8d:ff:39:ee:ba:74:c1:07: 6b:b1:5c:90:e7:2e:08:22:27:03:0f:a8:8b:7e:4f:dc:a1:fa: d9:74:b7:5d:c2:69:3a:91:07:73:8b:f7:70:1d:9d:bb:4e:ed: b7:31:ef:25:ab:37:d6:93:fd:77:86:1b:c4:9e:92:5b:01:8d: 0d:f8:30:e7:b1:dd:86:36:b1:4b:6a:23:56:f5:0e:fe:e1:94: b9:47:84:79:72:a3:d0:50:ef:1f:aa:8a:00:79:56:58:13:53: 6a:04:a8:26:c7:29:a5:3f:28:1c:37:53:1a:b3:0d:c1:f9:bd: a5:a6:00:a6:68:aa:85:83:65:91:70:e4:c7:3a:d5:a0:5e:33: 73:9c:d9:d1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebaQ4EI/TRDu0jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NTkxMDczNTItZWRlZC00YjkyLWIxYTMtMDM4YjRkNTI1M2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtY3WvxCLnAn/5nDJkbrIkD7g9GRjw5OpCAI R8YX1e2O1YlmGTT7OGAG0fd3+8HL4WzptAQ1cczgV/jBhsxVyWO1H/S85zQYJtlX /2odhyVY8nR9P0ZdFbwUKtTaESErnnZdvN2dwNWmz+atUxzRsv3xhsIBeNsmypTW ZdWLLtmLZ79NzBKblYv8t4P/lwbFbXaDFeEKd5UM5wQi87PMP9h4nMZk6BFI0yam NONP/wSo/7OywZVCNP6LURxYa6NNxLbu3MAk1KEjXYg7xHRzCcGJICZ3tsINYTat E9aZVVH98tQCM70DyHvSQ3cHPHB82xa8QF+IAYVV/FS0yz6KIwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDXCyGtt+WtES6B0zWIl2wC9pHJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGFmZmE4NGEtZjgxMS0z MTVmLWJjZGYtMzAwZTA2Mjc0YWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBIAEFWP4C MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACuTKI0iJa8p+HaVRlFvIV+g9AjnKSdu3rwfoT908qkb87+bizSy ixycWGir4kC2gNFlI5ACR6t0oQ9v+65BybdcpDuYDVad0mXRuD+p6Yx9JfTxMaP+ Pwv+o9JirgkRO7qqJV5bhVtGKu4Yq55YhtyDZv9IXgSN/znuunTBB2uxXJDnLggi JwMPqIt+T9yh+tl0t13CaTqRB3OL93AdnbtO7bcx7yWrN9aT/XeGG8SeklsBjQ34 MOex3YY2sUtqI1b1Dv7hlLlHhHlyo9BQ7x+qigB5VlgTU2oEqCbHKaU/KBw3Uxqz DcH5vaWmAKZoqoWDZZFw5Mc61aBeM3Oc2dE= -----END CERTIFICATE-----Generated at Sun Apr 6 12:08:19 2025 by rpki-client