$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a16420e-1806-3224-927d-04703e1a22d5.roa File: 9a16420e-1806-3224-927d-04703e1a22d5.roa (raw, json) Hash identifier: YRX+C+607AiucOuw9U+YRXENEkKFIQEsRKJb9f+MVaM= Subject key identifier: 3A:98:B5:0D:9C:76:E8:96:D8:F6:F2:F5:46:C3:FE:E7:88:D4:8A:1D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D72435157653B943291B0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a16420e-1806-3224-927d-04703e1a22d5.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:c0aa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:72:43:51:57:65:3b:94:32:91:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=fc42b832-86ba-4b58-8d5b-eefc39fc67d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:af:51:7a:0b:67:d7:9d:1e:a9:15:7c:33: 7e:cd:22:e7:bd:37:08:fa:c1:90:c2:16:d8:aa:94: 55:aa:e0:1e:a7:26:db:64:d6:a3:f0:60:85:9a:10: 1f:7f:20:01:aa:2c:98:48:da:8c:7b:95:94:02:26: 93:d2:06:ce:fe:73:5a:db:03:11:fb:58:93:a9:7d: be:c3:83:5e:aa:34:33:03:31:c0:da:f2:df:ea:98: b6:e1:8f:be:f3:16:37:d4:49:a5:65:c7:13:33:30: bf:c1:03:7c:e3:d3:66:7a:7a:38:c8:54:c6:67:1a: ec:3f:ce:b7:8c:00:a1:70:b6:25:b3:f4:39:67:c3: 98:f6:95:ea:1b:77:b1:19:40:ed:a5:c9:eb:b7:4c: 00:11:1f:b7:3e:6a:a4:1a:b5:ef:cb:19:a3:1d:c5: e8:e9:7f:6c:f0:38:13:07:b7:93:6d:cf:05:41:c5: 5e:0e:7a:4f:a4:c4:9c:08:9a:47:8c:3b:fd:be:4d: 83:12:3d:1d:88:f2:fd:7f:08:68:f7:5b:92:3c:ec: 87:78:f3:a5:13:f7:4d:c9:97:96:e4:47:4e:d6:cd: e2:15:0a:93:bb:cc:c2:bd:5b:5b:a7:8a:48:d5:a3: 61:f5:63:48:53:a0:0e:11:2a:3f:d7:4f:db:ec:ad: f9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:98:B5:0D:9C:76:E8:96:D8:F6:F2:F5:46:C3:FE:E7:88:D4:8A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9a16420e-1806-3224-927d-04703e1a22d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c0aa::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:7f:4c:eb:f0:ee:95:85:2c:b8:2b:5b:c4:03:ed:ba:2e:51: ba:80:fa:88:a0:ee:41:86:5b:ff:89:26:e3:3e:da:2f:0d:de: 8d:73:1a:03:84:94:20:fb:bc:90:da:97:7b:3c:1e:d5:7b:74: 84:b0:d1:14:26:87:bf:2e:ea:fd:4e:24:e9:ea:34:c2:f8:6f: 11:7b:2c:6e:22:1f:05:9e:28:af:f9:1c:68:14:46:6b:e7:e3: 3d:0b:0c:60:50:99:1e:ec:e9:4e:9a:50:85:ba:54:23:17:7b: 08:8a:01:f7:49:46:7e:4c:4b:af:73:d7:fa:3d:f3:12:26:0c: b2:64:80:7c:93:c5:0a:ec:0b:ad:b7:9f:5b:62:99:14:fe:c0: 13:94:f5:00:25:27:77:21:8e:35:43:b1:02:e6:15:6b:2a:3e: 2a:d0:ef:f2:d8:45:90:e2:7a:0e:61:07:67:46:54:d9:53:45: 1f:fc:3a:86:ce:22:fd:49:0c:6a:4c:d0:f0:c3:53:eb:30:1c: 70:6d:23:97:ed:a8:5c:5a:b7:88:87:ab:7c:10:2f:0b:af:24: 99:74:f8:f3:c2:1c:53:fe:f8:93:b6:59:db:97:56:06:b2:0a: 3a:5d:bd:0d:ad:4e:49:b3:4c:c6:e6:3a:67:b4:89:1e:4e:bc: 83:01:62:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebXJDUVdlO5QykbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmM0MmI4MzItODZiYS00YjU4LThkNWItZWVmYzM5ZmM2N2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw2vUXoLZ9edHqkVfDN+zSLnvTcI+sGQwhbY qpRVquAepybbZNaj8GCFmhAffyABqiyYSNqMe5WUAiaT0gbO/nNa2wMR+1iTqX2+ w4NeqjQzAzHA2vLf6pi24Y++8xY31EmlZccTMzC/wQN849Nmeno4yFTGZxrsP863 jAChcLYls/Q5Z8OY9pXqG3exGUDtpcnrt0wAER+3PmqkGrXvyxmjHcXo6X9s8DgT B7eTbc8FQcVeDnpPpMScCJpHjDv9vk2DEj0diPL9fwho91uSPOyHePOlE/dNyZeW 5EdO1s3iFQqTu8zCvVtbp4pI1aNh9WNIU6AOESo/10/b7K35rwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDqYtQ2cduiW2Pby9UbD/ueI1IodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWExNjQyMGUtMTgwNi0z MjI0LTkyN2QtMDQ3MDNlMWEyMmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcCq MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE5/TOvw7pWFLLgrW8QD7bouUbqA+oig7kGGW/+JJuM+2i8N3o1z GgOElCD7vJDal3s8HtV7dISw0RQmh78u6v1OJOnqNML4bxF7LG4iHwWeKK/5HGgU Rmvn4z0LDGBQmR7s6U6aUIW6VCMXewiKAfdJRn5MS69z1/o98xImDLJkgHyTxQrs C623n1timRT+wBOU9QAlJ3chjjVDsQLmFWsqPirQ7/LYRZDieg5hB2dGVNlTRR/8 OobOIv1JDGpM0PDDU+swHHBtI5ftqFxat4iHq3wQLwuvJJl0+PPCHFP++JO2WduX VgayCjpdvQ2tTkmzTMbmOme0iR5OvIMBYqQ= -----END CERTIFICATE-----Generated at Mon Apr 7 06:31:51 2025 by rpki-client