$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db80c57-b9a3-357f-b3a8-5a3cf1813914.roa File: 8db80c57-b9a3-357f-b3a8-5a3cf1813914.roa (raw, json) Hash identifier: Iq0Lw2Saw/WZ7vXC5HrRj9s0jjvH3m8gjWwJEO5BMXY= Subject key identifier: F5:82:8E:5C:40:69:E5:9C:3F:F1:5C:AC:FC:FA:DC:44:32:0C:EA:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858493243E7908D1D3CD73C8DC080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db80c57-b9a3-357f-b3a8-5a3cf1813914.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 7016 IP address blocks: 2001:559:400a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:e7:90:8d:1d:3c:d7:3c:8d:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=86b05070-20db-4eb1-8900-e5aa9a218f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2d:57:0c:e9:ea:c8:53:2b:ca:39:d3:20:fc: a1:36:a1:94:9f:77:4d:00:c9:70:4d:cb:88:0c:0e: cd:06:5d:8d:34:d6:8b:b0:f2:c7:b0:15:fd:d3:27: aa:82:be:7f:8f:57:4b:88:77:e5:95:1c:1b:bc:ea: 80:52:eb:99:22:06:a4:08:ca:7a:73:75:81:47:0c: 9e:38:d1:81:ab:b0:2f:27:1c:09:3d:ea:c9:2c:6f: a0:ad:53:44:eb:ef:0b:fd:95:bc:60:1a:43:4c:d5: f2:5e:e3:c7:3f:cd:82:90:f4:98:82:4a:86:4b:92: 74:a2:2b:00:0b:a9:60:13:88:6d:d1:9a:ae:b7:2c: ca:87:3c:02:0d:1a:cb:8e:f4:6b:68:a6:33:1b:cc: fa:c2:55:bc:94:46:d9:88:27:16:1e:72:44:33:6b: 7f:07:ff:30:18:68:0d:0c:9b:7b:96:59:74:07:be: 15:ec:da:c1:6f:86:db:f3:67:6d:77:5a:47:43:29: 5d:88:03:46:9d:35:6f:5e:40:e7:e4:3b:af:96:6f: 58:aa:0d:1f:71:12:d7:73:db:64:be:53:fa:72:5f: e7:a9:ad:0f:c3:16:47:d1:92:ff:73:09:ca:dd:dd: 21:e7:79:a8:77:db:1e:60:9c:8e:ef:62:02:42:de: c2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:82:8E:5C:40:69:E5:9C:3F:F1:5C:AC:FC:FA:DC:44:32:0C:EA:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8db80c57-b9a3-357f-b3a8-5a3cf1813914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:400a::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:cf:e5:05:9f:69:15:ff:e5:03:f1:89:91:ec:66:23:03:0b: 60:b0:47:7a:df:94:0d:2e:a8:ba:19:0c:23:2e:3f:f2:11:0e: a4:31:6e:87:a9:cb:37:e7:aa:41:d4:ee:25:4b:ed:01:1b:cf: 9b:db:cc:b3:ce:a6:dc:06:28:09:50:0d:36:6f:68:55:f3:ed: e9:a4:7f:2d:38:d5:fe:1e:1c:21:eb:34:27:ff:f5:55:f0:20: 53:93:7f:cc:90:8e:6a:c8:0d:4b:16:96:65:9e:ed:03:08:dd: 6f:9a:c0:42:0f:04:68:4c:b6:ea:2f:c4:27:8f:c4:28:10:61: 48:e7:b1:bd:2b:a6:66:57:bc:4e:d9:57:f9:f9:24:e0:dc:ec: 17:0b:85:cc:a2:75:2d:76:c6:d8:ef:36:76:b0:4f:9a:aa:88: f1:82:5c:c5:60:90:d4:85:13:41:f3:e9:41:69:6f:ba:23:f3: 1d:98:4d:94:51:c2:2d:53:1a:5e:b4:f9:0c:37:56:d1:e3:b5: af:b4:eb:16:c6:e2:7c:92:f8:72:77:df:e6:00:19:3f:79:90: 46:4b:72:79:01:ab:e0:73:5e:e8:25:a1:3d:5e:b3:2f:c2:60: 78:e6:4f:6a:18:e8:61:2c:18:5c:ff:b0:0a:47:88:09:00:b7: 93:04:41:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkyQ+eQjR081zyNwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk ODZiMDUwNzAtMjBkYi00ZWIxLTg5MDAtZTVhYTlhMjE4ZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky1XDOnqyFMryjnTIPyhNqGUn3dNAMlwTcuI DA7NBl2NNNaLsPLHsBX90yeqgr5/j1dLiHfllRwbvOqAUuuZIgakCMp6c3WBRwye ONGBq7AvJxwJPerJLG+grVNE6+8L/ZW8YBpDTNXyXuPHP82CkPSYgkqGS5J0oisA C6lgE4ht0ZqutyzKhzwCDRrLjvRraKYzG8z6wlW8lEbZiCcWHnJEM2t/B/8wGGgN DJt7lll0B74V7NrBb4bb82dtd1pHQyldiANGnTVvXkDn5Duvlm9Yqg0fcRLXc9tk vlP6cl/nqa0PwxZH0ZL/cwnK3d0h53mod9seYJyO72ICQt7CgQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPWCjlxAaeWcP/FcrPz63EQyDOrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGRiODBjNTctYjlhMy0z NTdmLWIzYTgtNWEzY2YxODEzOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWUAK MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANXP5QWfaRX/5QPxiZHsZiMDC2CwR3rflA0uqLoZDCMuP/IRDqQx boepyzfnqkHU7iVL7QEbz5vbzLPOptwGKAlQDTZvaFXz7emkfy041f4eHCHrNCf/ 9VXwIFOTf8yQjmrIDUsWlmWe7QMI3W+awEIPBGhMtuovxCePxCgQYUjnsb0rpmZX vE7ZV/n5JODc7BcLhcyidS12xtjvNnawT5qqiPGCXMVgkNSFE0Hz6UFpb7oj8x2Y TZRRwi1TGl60+Qw3VtHjta+06xbG4nyS+HJ33+YAGT95kEZLcnkBq+BzXugloT1e sy/CYHjmT2oY6GEsGFz/sApHiAkAt5MEQVA= -----END CERTIFICATE-----Generated at Mon Apr 7 06:21:41 2025 by rpki-client