$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f9c3cba-8179-3e4a-8d43-19cc1e6a375f.roa File: 8f9c3cba-8179-3e4a-8d43-19cc1e6a375f.roa (raw, json) Hash identifier: qILRfUo9RL5k7/T5k6s7oVFg1+gtXpF5aWbvjvwS6Zo= Subject key identifier: F9:3E:FC:2C:21:56:E6:84:CA:9C:24:A2:4C:52:FD:3B:72:15:F6:9F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C168A859B93D8121051D8 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f9c3cba-8179-3e4a-8d43-19cc1e6a375f.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33662 IP address blocks: 2001:559:283::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:16:8a:85:9b:93:d8:12:10:51:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b9c6ea30-9f39-4bd0-9675-ac177928e07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:92:7e:18:4b:dc:e8:52:eb:84:a0:96:b8: 41:1a:3e:d7:3c:ac:1c:25:57:1c:d9:ff:6d:b6:8f: da:73:bf:29:55:1a:27:2a:03:70:c6:dd:f0:a7:77: ed:e4:75:74:98:aa:d8:c2:1d:78:05:a2:7e:34:ed: fa:45:bf:9e:c4:e8:18:3d:1b:7d:23:7f:c0:54:bd: 81:08:3f:8c:51:d2:e7:38:60:7e:aa:d9:87:16:f5: 0a:9d:22:94:c3:d3:01:71:c3:b3:f3:37:07:f5:07: ac:aa:f1:35:81:47:3e:ab:93:21:52:53:0c:c7:98: e9:6b:1a:e5:a7:e3:7b:13:d9:d4:3a:de:39:20:22: f7:d0:23:1d:00:4b:3f:40:a3:3c:cd:b5:b1:48:19: a3:a0:f6:41:73:71:55:6c:e3:56:9c:d1:b6:68:19: fa:24:ef:41:f7:b6:d9:2f:3c:54:f2:18:77:e5:99: 02:e3:4a:91:a5:a8:ba:d1:65:d5:41:e9:6d:6a:e6: ef:01:40:6f:55:6a:0d:40:d6:89:05:6d:1a:97:08: bd:77:26:48:2c:53:f0:6b:ec:b8:72:75:29:90:0a: 12:a3:1f:af:7c:34:28:7f:9a:ec:b1:6f:b3:5a:1d: 23:c8:87:fd:90:05:21:0b:df:cc:ed:6a:c6:f4:a1: bd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3E:FC:2C:21:56:E6:84:CA:9C:24:A2:4C:52:FD:3B:72:15:F6:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8f9c3cba-8179-3e4a-8d43-19cc1e6a375f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:283::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:15:a0:64:53:cc:75:1a:5f:9e:4c:37:3e:4e:b6:ac:3c:4a: 27:f8:a6:be:52:5a:bf:3e:99:1a:8a:eb:84:91:f9:84:fa:c7: 78:18:fa:2a:93:d0:95:32:a4:bd:77:38:b7:97:af:9e:09:8a: f3:fd:9f:4f:e3:47:2c:43:f7:da:28:f7:73:3f:cd:92:18:2e: d4:ce:00:cf:c7:f1:32:2c:a4:48:13:b2:a4:63:79:88:46:be: d5:e7:4e:d2:2a:7c:2e:62:5e:36:3f:b7:f7:81:75:25:5e:2b: e3:88:67:fe:6f:b7:0b:f2:9a:93:49:c6:58:bb:ba:15:93:f6: 4d:91:b6:ae:6e:9f:b7:ba:24:38:50:28:d6:c8:01:cf:5f:f0: 97:19:84:7e:8a:d2:e5:3f:c4:51:7f:d8:50:b6:6b:0a:d9:92: 93:8e:0c:05:1f:0d:75:78:21:25:b9:1f:fc:db:7c:f9:20:ac: ec:dd:ac:57:62:7e:62:18:80:c4:9c:26:f6:fe:cb:1f:ae:32: d4:84:a6:da:85:b8:f4:90:c5:27:93:eb:54:c3:e6:a6:ae:e3: 7a:d8:57:16:83:90:62:88:f7:61:5e:62:ec:2c:4d:66:6c:c8: fb:35:99:58:ac:44:db:8a:1a:e7:96:52:be:a5:1a:e7:f2:49: 4f:f0:b2:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebBaKhZuT2BIQUdgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjljNmVhMzAtOWYzOS00YmQwLTk2NzUtYWMxNzc5MjhlMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPWSfhhL3OhS64SglrhBGj7XPKwcJVcc2f9t to/ac78pVRonKgNwxt3wp3ft5HV0mKrYwh14BaJ+NO36Rb+exOgYPRt9I3/AVL2B CD+MUdLnOGB+qtmHFvUKnSKUw9MBccOz8zcH9QesqvE1gUc+q5MhUlMMx5jpaxrl p+N7E9nUOt45ICL30CMdAEs/QKM8zbWxSBmjoPZBc3FVbONWnNG2aBn6JO9B97bZ LzxU8hh35ZkC40qRpai60WXVQeltaubvAUBvVWoNQNaJBW0alwi9dyZILFPwa+y4 cnUpkAoSox+vfDQof5rssW+zWh0jyIf9kAUhC9/M7WrG9KG9oQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPk+/CwhVuaEypwkokxS/TtyFfafMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGY5YzNjYmEtODE3OS0z ZTRhLThkNDMtMTljYzFlNmEzNzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQKD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACkVoGRTzHUaX55MNz5Otqw8Sif4pr5SWr8+mRqK64SR+YT6x3gY +iqT0JUypL13OLeXr54JivP9n0/jRyxD99oo93M/zZIYLtTOAM/H8TIspEgTsqRj eYhGvtXnTtIqfC5iXjY/t/eBdSVeK+OIZ/5vtwvympNJxli7uhWT9k2Rtq5un7e6 JDhQKNbIAc9f8JcZhH6K0uU/xFF/2FC2awrZkpOODAUfDXV4ISW5H/zbfPkgrOzd rFdifmIYgMScJvb+yx+uMtSEptqFuPSQxSeT61TD5qau43rYVxaDkGKI92FeYuws TWZsyPs1mVisRNuKGueWUr6lGufySU/wss0= -----END CERTIFICATE-----Generated at Mon Apr 7 06:22:36 2025 by rpki-client