$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f15cad2-84b0-3684-aca6-c23dece7843a.roa File: 8f15cad2-84b0-3684-aca6-c23dece7843a.roa (raw, json) Hash identifier: CXTjxGkd3tXellQ/WFd4x3glCDeWTm3uErz/jjIGZoo= Subject key identifier: FF:B1:66:C7:04:87:F3:DF:FD:61:F0:FA:29:38:26:61:05:4A:F2:17 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E1B775E31AB5EE104E840 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f15cad2-84b0-3684-aca6-c23dece7843a.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:8247::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:1b:77:5e:31:ab:5e:e1:04:e8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=cb52e358-b939-4a77-8050-2e21cc8427d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7c:8e:41:b7:fc:4c:33:25:7a:e8:bb:72:5a: 67:67:96:f6:9e:96:6a:87:d1:b5:bd:59:d2:3c:60: 9d:d6:e2:c4:35:36:94:55:af:3f:89:98:ea:6b:80: 72:8f:61:8d:f5:29:58:1f:39:cd:9b:1e:c4:8c:30: ff:cd:9e:a9:f4:9b:b9:f3:e8:33:04:04:25:70:45: 77:3a:bc:d3:67:0a:a5:9f:e8:89:cb:35:cb:ee:15: 1b:c4:1c:fc:19:43:92:db:8b:fd:f1:0f:88:bc:50: 51:82:8a:57:8d:bf:11:5d:7e:f4:72:22:17:4d:ef: 43:02:d9:a5:8e:c6:e1:41:44:71:07:a6:4d:a1:61: 95:22:01:6f:eb:4a:fe:b1:d9:df:7a:f0:e7:54:67: b8:f2:88:9a:da:80:b6:17:eb:54:86:e9:c8:d9:3b: ec:8e:7c:e8:44:ad:ee:9f:99:65:73:93:21:a7:57: c2:26:c9:92:9d:d9:56:33:e5:f0:4b:fe:7d:50:c8: d6:03:80:8d:41:fb:c7:6f:93:a2:71:5c:ab:d8:bb: ba:79:5b:62:16:0a:90:ab:52:b6:b3:c9:2e:42:51: 7a:98:17:ab:fa:42:55:ba:42:93:f5:bf:bb:96:85: 96:e0:a5:3c:7a:cf:c7:0a:f5:f5:28:67:f3:3f:f6: 1d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:B1:66:C7:04:87:F3:DF:FD:61:F0:FA:29:38:26:61:05:4A:F2:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f15cad2-84b0-3684-aca6-c23dece7843a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8247::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ab:8b:3c:0b:6e:0f:c7:44:86:a7:d2:ae:76:47:ab:36:c5: a1:c3:8e:ea:f0:5a:4a:19:ed:a3:cf:4c:ce:ae:9f:11:b8:7e: bf:23:6d:29:ae:ac:f1:be:eb:67:9d:4d:eb:5d:f7:66:ac:cf: 44:3e:d9:57:7b:5d:4a:1a:ac:05:9d:1f:1e:ce:bf:19:1d:00: c1:79:b5:89:a8:9f:da:69:c0:7d:a1:25:f3:c2:c0:0d:42:18: 76:c7:f9:6a:37:04:44:8d:36:10:43:69:2a:6b:f9:92:6e:84: df:40:4d:94:9d:12:d9:dc:a8:36:19:af:fb:0e:15:bf:94:5f: 71:36:41:58:33:9f:5b:4f:a3:2a:53:45:f0:39:2c:78:e1:81: 36:44:b7:48:12:7c:19:25:f1:9c:b8:b7:77:3f:c8:67:45:b6: 3b:c4:42:b9:66:fd:51:52:43:67:8f:22:84:77:e3:0c:f8:82: 56:9a:7d:77:e9:ed:40:9a:2f:7d:7d:39:56:63:05:9f:86:d1: 80:e6:b2:cb:67:ef:a5:8d:27:b1:9a:dc:fc:c0:66:13:79:c9: 0e:be:b0:b6:c8:64:9e:a9:c4:86:8c:53:42:74:9f:74:4c:9b: 0b:ac:5d:f9:99:e2:d9:d7:84:52:5d:fb:f0:0f:7e:86:4e:9a: 5d:42:0c:65 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebht3XjGrXuEE6EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Y2I1MmUzNTgtYjkzOS00YTc3LTgwNTAtMmUyMWNjODQyN2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHyOQbf8TDMleui7clpnZ5b2npZqh9G1vVnS PGCd1uLENTaUVa8/iZjqa4Byj2GN9SlYHznNmx7EjDD/zZ6p9Ju58+gzBAQlcEV3 OrzTZwqln+iJyzXL7hUbxBz8GUOS24v98Q+IvFBRgopXjb8RXX70ciIXTe9DAtml jsbhQURxB6ZNoWGVIgFv60r+sdnfevDnVGe48oia2oC2F+tUhunI2TvsjnzoRK3u n5llc5Mhp1fCJsmSndlWM+XwS/59UMjWA4CNQfvHb5OicVyr2Lu6eVtiFgqQq1K2 s8kuQlF6mBer+kJVukKT9b+7loWW4KU8es/HCvX1KGfzP/YdnQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFP+xZscEh/Pf/WHw+ik4JmEFSvIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGYxNWNhZDItODRiMC0z Njg0LWFjYTYtYzIzZGVjZTc4NDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADarizwLbg/HRIan0q52R6s2xaHDjurwWkoZ7aPPTM6unxG4fr8j bSmurPG+62edTetd92asz0Q+2Vd7XUoarAWdHx7OvxkdAMF5tYmon9ppwH2hJfPC wA1CGHbH+Wo3BESNNhBDaSpr+ZJuhN9ATZSdEtncqDYZr/sOFb+UX3E2QVgzn1tP oypTRfA5LHjhgTZEt0gSfBkl8Zy4t3c/yGdFtjvEQrlm/VFSQ2ePIoR34wz4glaa fXfp7UCaL319OVZjBZ+G0YDmsstn76WNJ7Ga3PzAZhN5yQ6+sLbIZJ6pxIaMU0J0 n3RMmwusXfmZ4tnXhFJd+/APfoZOml1CDGU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:22:45 2025 by rpki-client