$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94659905-1007-3832-9c8e-2cf73ab6f36b.roa File: 94659905-1007-3832-9c8e-2cf73ab6f36b.roa (raw, json) Hash identifier: m6S5nkKGtejTAUxqvX81jdKEC5m0MzGJ8FrzQBaJrA0= Subject key identifier: C3:54:0E:22:CE:F3:AF:82:EB:7C:6F:69:1B:B0:D6:F6:02:6E:BB:11 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E1C562B6E062D2CD99FA0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94659905-1007-3832-9c8e-2cf73ab6f36b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:8363::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:1c:56:2b:6e:06:2d:2c:d9:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=3e65dc90-8d40-4beb-b680-8ed0c84e690c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f3:4e:ac:94:47:9e:62:a7:ab:ef:5a:41:7e: 84:1b:89:e1:73:34:dd:29:a3:38:9e:6d:ba:24:24: 45:b0:af:17:b2:cc:c3:bb:bd:55:6a:ee:35:ce:43: 5d:6f:dd:16:83:b7:7c:a5:73:d7:8f:cb:c8:e2:8e: e0:28:d5:c0:95:82:08:59:54:2c:44:14:99:29:ed: 74:90:0e:e5:8e:b5:25:b8:22:db:20:6d:97:f2:27: 04:41:51:9e:c1:72:9e:af:68:4e:5c:3a:e6:bd:33: f7:14:ca:ef:f1:14:5b:2f:3d:82:e8:79:cc:84:a8: 0d:5e:c0:d4:3f:47:82:0b:a7:bf:b3:d5:a4:66:c8: f0:83:84:5d:8c:44:b5:2d:d8:e1:43:88:bb:e6:03: 9c:9a:b3:43:19:2b:25:7c:7a:95:f6:e2:9d:05:55: 9e:90:4b:6c:49:67:a2:50:52:1c:3e:b1:63:97:0a: 3d:20:d4:4d:d1:90:46:42:52:ac:c7:91:3f:ac:82: e2:dc:22:c7:b2:5c:db:5e:b9:b7:8c:d1:f4:81:37: 96:cc:fb:0c:ff:72:20:85:a8:98:b8:00:24:d1:ec: 58:b3:97:3e:cb:06:f8:0d:4e:ad:c1:45:21:e8:5e: 00:fd:7f:16:85:85:93:24:9f:6e:61:c3:f6:e5:6f: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:54:0E:22:CE:F3:AF:82:EB:7C:6F:69:1B:B0:D6:F6:02:6E:BB:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/94659905-1007-3832-9c8e-2cf73ab6f36b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8363::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:a6:c2:fb:71:ec:24:28:bd:a8:ce:c8:d0:95:87:e7:ee:5b: f0:d5:88:4b:97:52:2b:83:f7:a0:44:e0:2c:4d:88:df:9a:47: 69:e4:25:fc:46:8c:ee:0d:6d:60:c6:5b:b4:0a:c4:95:69:4a: f0:dd:44:2b:2f:4c:b3:08:84:1a:24:bf:0a:c9:08:d6:98:27: fd:03:23:a8:b9:cc:72:2e:08:14:72:da:d4:1d:0f:18:8d:55: db:0d:78:b2:59:83:b0:05:41:31:29:04:14:ae:85:68:f0:eb: 29:42:58:5b:9a:57:54:d4:75:88:a3:fc:b2:f6:2f:9b:66:13: e8:4d:55:31:9b:66:bc:b2:e8:cc:e3:e4:cd:42:29:a5:59:53: 8e:4a:07:35:7d:36:4d:b9:2c:4c:94:ad:07:ff:0a:8f:43:19: cf:ba:ef:19:4e:5c:98:aa:3c:6a:5c:9a:6e:8b:fc:a9:5e:ca: b3:c2:64:71:69:a4:b3:fa:3f:f6:e6:95:ee:54:9d:80:06:9f: 62:ba:1d:3f:24:82:7a:8f:5b:1d:61:dc:37:ff:d8:6f:86:42: 4c:92:55:48:07:a0:64:89:22:0b:ee:c7:88:59:52:be:ca:b3: d5:53:d2:6c:d5:1a:eb:93:43:65:5a:2b:8a:ad:dd:e6:de:78: 5d:82:ba:dc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebhxWK24GLSzZn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk M2U2NWRjOTAtOGQ0MC00YmViLWI2ODAtOGVkMGM4NGU2OTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/NOrJRHnmKnq+9aQX6EG4nhczTdKaM4nm26 JCRFsK8XsszDu71Vau41zkNdb90Wg7d8pXPXj8vI4o7gKNXAlYIIWVQsRBSZKe10 kA7ljrUluCLbIG2X8icEQVGewXKer2hOXDrmvTP3FMrv8RRbLz2C6HnMhKgNXsDU P0eCC6e/s9WkZsjwg4RdjES1LdjhQ4i75gOcmrNDGSslfHqV9uKdBVWekEtsSWei UFIcPrFjlwo9INRN0ZBGQlKsx5E/rILi3CLHslzbXrm3jNH0gTeWzPsM/3IghaiY uAAk0exYs5c+ywb4DU6twUUh6F4A/X8WhYWTJJ9uYcP25W/M4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMNUDiLO86+C63xvaRuw1vYCbrsRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTQ2NTk5MDUtMTAwNy0z ODMyLTljOGUtMmNmNzNhYjZmMzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYNj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFCmwvtx7CQovajOyNCVh+fuW/DViEuXUiuD96BE4CxNiN+aR2nk JfxGjO4NbWDGW7QKxJVpSvDdRCsvTLMIhBokvwrJCNaYJ/0DI6i5zHIuCBRy2tQd DxiNVdsNeLJZg7AFQTEpBBSuhWjw6ylCWFuaV1TUdYij/LL2L5tmE+hNVTGbZryy 6Mzj5M1CKaVZU45KBzV9Nk25LEyUrQf/Co9DGc+67xlOXJiqPGpcmm6L/KleyrPC ZHFppLP6P/bmle5UnYAGn2K6HT8kgnqPWx1h3Df/2G+GQkySVUgHoGSJIgvux4hZ Ur7Ks9VT0mzVGuuTQ2VaK4qt3ebeeF2Cutw= -----END CERTIFICATE-----Generated at Mon Apr 7 06:15:59 2025 by rpki-client