$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97ea8da7-9173-363c-9055-e6f1483db788.roa File: 97ea8da7-9173-363c-9055-e6f1483db788.roa (raw, json) Hash identifier: Ox6O4zWwS5Gfq8yTvvTh1iQksBtRiewcu3r7KYO3yMM= Subject key identifier: 1E:F9:7B:9B:76:8A:2B:FC:D7:94:90:FF:19:5F:71:76:12:D0:26:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D73DF5A2CC1198B8FB480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97ea8da7-9173-363c-9055-e6f1483db788.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:c47e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:73:df:5a:2c:c1:19:8b:8f:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=50406a4b-505a-4063-8fba-d60232f32ab7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7e:1d:7e:1e:7b:7f:db:35:68:c6:b6:0d:08: d0:97:95:9b:bf:55:71:72:14:c5:e8:6e:82:0e:50: ef:a2:1b:c8:e6:6a:4a:a5:dd:6b:98:cf:ec:07:4a: 01:5f:27:7f:27:2e:3e:35:91:d4:ae:b9:e5:78:06: d1:31:cf:61:39:7a:15:ae:99:6e:79:62:dd:51:b8: ec:82:91:c2:44:0a:c9:de:58:83:74:b2:29:b5:e3: 69:fc:7f:8b:c6:2d:02:d9:02:b5:29:7b:e0:e6:cb: 9d:05:16:60:8e:e5:13:7b:d2:45:b2:dd:c1:93:55: 66:46:5a:b6:0f:ab:ce:0f:fd:99:d1:7c:33:ee:f1: 54:d9:04:12:c2:fe:20:2d:7f:02:46:43:fb:53:7f: c3:c5:cd:12:fb:91:e7:2e:ab:60:df:12:aa:be:aa: eb:c4:75:f4:78:ac:ef:29:1a:d2:d9:8d:f5:f0:10: 64:45:a4:9c:45:0c:f5:40:c5:c8:0e:93:66:a0:4b: fb:a5:d3:70:b9:d4:49:fb:c1:33:29:6e:92:b1:52: 9d:ff:da:fa:53:4c:5f:7b:ee:60:4b:57:31:b5:7c: 8c:2a:b2:ba:d5:68:77:e8:a7:99:33:0a:db:4c:60: 96:75:22:0a:00:eb:10:0c:c8:50:51:f9:25:e1:b0: dd:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F9:7B:9B:76:8A:2B:FC:D7:94:90:FF:19:5F:71:76:12:D0:26:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/97ea8da7-9173-363c-9055-e6f1483db788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c47e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:f4:e2:3c:55:3d:26:61:5c:db:56:3e:e1:4b:75:71:18:46: ce:be:eb:ff:08:15:b4:bf:ce:bd:ee:58:2b:27:cb:46:3a:7a: bf:96:aa:26:04:a3:73:7e:37:97:46:ae:70:e2:7b:89:e1:53: 97:05:96:8e:d6:f8:8a:c4:e3:b3:b3:1e:6f:05:f1:e1:85:b9: ea:20:a7:0c:48:8d:50:fb:5f:d4:0c:8e:67:88:d4:78:af:10: 29:dc:eb:7c:1a:5f:72:00:54:b8:f3:af:63:e4:74:93:46:2a: 04:fd:8b:df:3a:26:57:18:f7:1e:be:04:15:46:73:a5:0e:d2: f2:b0:fa:0f:14:8f:8d:e3:12:d3:d7:7f:6b:b5:85:ea:87:4f: 4f:31:23:75:a6:5f:30:c3:d2:9b:f5:79:a1:bc:8e:8a:ba:06: 45:1c:9d:be:55:f8:c1:4b:88:b7:30:da:56:10:ad:83:b2:73: 3b:7f:2e:10:ad:6a:6e:86:25:07:3b:eb:a8:1d:65:f2:61:45: b1:c9:06:68:80:21:87:d6:f0:cb:aa:8b:f1:1e:94:25:63:cf: 32:45:d3:93:84:ef:cd:e0:6b:19:c7:86:a9:96:03:c3:64:34: 3b:36:c2:c2:e8:bc:b9:44:5a:79:cc:bd:ea:e2:41:c6:a0:cd: b1:fd:7b:29 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebXPfWizBGYuPtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NTA0MDZhNGItNTA1YS00MDYzLThmYmEtZDYwMjMyZjMyYWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH4dfh57f9s1aMa2DQjQl5Wbv1VxchTF6G6C DlDvohvI5mpKpd1rmM/sB0oBXyd/Jy4+NZHUrrnleAbRMc9hOXoVrplueWLdUbjs gpHCRArJ3liDdLIpteNp/H+Lxi0C2QK1KXvg5sudBRZgjuUTe9JFst3Bk1VmRlq2 D6vOD/2Z0Xwz7vFU2QQSwv4gLX8CRkP7U3/Dxc0S+5HnLqtg3xKqvqrrxHX0eKzv KRrS2Y318BBkRaScRQz1QMXIDpNmoEv7pdNwudRJ+8EzKW6SsVKd/9r6U0xfe+5g S1cxtXyMKrK61Wh36KeZMwrbTGCWdSIKAOsQDMhQUfkl4bDdowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB75e5t2iiv815SQ/xlfcXYS0CZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTdlYThkYTctOTE3My0z NjNjLTkwNTUtZTZmMTQ4M2RiNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcR+ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAK/04jxVPSZhXNtWPuFLdXEYRs6+6/8IFbS/zr3uWCsny0Y6er+W qiYEo3N+N5dGrnDie4nhU5cFlo7W+IrE47OzHm8F8eGFueogpwxIjVD7X9QMjmeI 1HivECnc63waX3IAVLjzr2PkdJNGKgT9i986JlcY9x6+BBVGc6UO0vKw+g8Uj43j EtPXf2u1heqHT08xI3WmXzDD0pv1eaG8joq6BkUcnb5V+MFLiLcw2lYQrYOyczt/ LhCtam6GJQc766gdZfJhRbHJBmiAIYfW8Muqi/EelCVjzzJF05OE783gaxnHhqmW A8NkNDs2wsLovLlEWnnMveriQcagzbH9eyk= -----END CERTIFICATE-----Generated at Mon Apr 7 06:21:59 2025 by rpki-client