$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f3fcc0-0827-3add-a792-af7f9eb18689.roa File: a0f3fcc0-0827-3add-a792-af7f9eb18689.roa (raw, json) Hash identifier: 8WOA3V9ZCQwlrsHy4ModoW0qkeob6CyXvXSUiqSiG+Y= Subject key identifier: 21:A7:E0:D3:C1:C9:A5:4F:34:42:8A:6A:A7:36:16:EC:C3:8C:3D:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C3D872848F3D287EFD600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f3fcc0-0827-3add-a792-af7f9eb18689.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:c3cc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:3d:87:28:48:f3:d2:87:ef:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=592be86b-1646-4383-9b37-637795db4fe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:fa:aa:a1:e1:58:f4:63:44:56:30:f6:00: c6:a3:f3:66:65:fe:90:6c:fa:82:a8:4b:f3:4b:4d: bb:45:4b:ea:53:7d:6f:fa:28:17:de:82:d0:15:a3: fb:f8:a5:70:d9:7b:8f:5b:75:19:4f:91:ea:2b:09: 83:69:e1:ab:5c:79:33:fd:f2:43:cb:ba:11:1e:3e: e0:58:e4:b1:3f:b8:2d:fe:1a:36:40:30:ac:07:3f: 5f:fd:88:81:19:64:14:78:3a:95:a0:64:60:89:25: 06:69:9a:71:24:73:72:bd:a9:15:c3:15:06:16:4a: 34:54:f1:87:8f:c1:c9:ae:5b:ad:e6:3a:3b:e4:19: 72:90:be:cb:0c:72:e4:7b:c3:e2:5d:c1:4a:d6:53: c8:1a:66:c2:30:fa:c7:5f:77:c7:5b:f7:74:08:60: 62:a3:0f:23:49:96:b2:84:76:94:e4:12:eb:3a:48: c7:17:1e:f6:0f:5d:cc:f8:45:fb:e0:13:0d:9d:88: 7d:e8:aa:ab:d3:5d:49:88:9f:67:81:3e:37:41:3e: c5:8b:80:05:d3:8b:5a:42:2d:9e:ba:ac:28:c4:74: c2:72:38:4a:e1:f3:79:9f:7c:85:19:1a:f0:6d:82: cd:d0:af:be:60:fd:9e:0f:89:b7:1e:64:46:b0:c5: 68:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A7:E0:D3:C1:C9:A5:4F:34:42:8A:6A:A7:36:16:EC:C3:8C:3D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0f3fcc0-0827-3add-a792-af7f9eb18689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c3cc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4b:3a:4d:1e:58:b7:07:02:ab:8b:1e:d9:47:d1:b9:2f:2d: 7a:a9:79:07:df:d7:28:08:fe:39:6a:7f:d1:16:71:5a:37:9a: 12:34:ba:b6:b1:88:17:84:30:8b:8c:69:f6:31:10:ba:78:6a: 22:fa:7d:ad:68:fb:27:bb:9d:e9:e8:56:f1:75:03:9d:0c:f4: 38:64:1c:a0:0f:37:0a:ea:21:4f:55:ee:79:06:5e:f4:21:d4: 12:82:76:bb:56:fb:47:cf:f5:08:77:9e:64:19:f7:77:10:89: e1:44:b1:89:2b:c3:b0:2a:3b:ff:68:c1:03:e3:c2:ea:e0:b1: 8c:44:89:8f:ee:6a:b8:74:6d:e7:a4:d8:68:55:2b:e8:8b:e0: 5c:d3:bd:f9:32:03:24:cd:64:87:55:86:c3:17:a8:66:29:31: a5:97:b5:35:c9:13:22:09:0e:3b:20:6c:84:bd:77:e7:04:d8: d3:57:1f:73:f9:92:e1:78:b8:c7:0f:5a:b7:5b:8e:c0:a0:5a: 3c:51:2c:20:02:7a:6c:0a:4a:fe:39:33:83:01:38:39:c7:e7: cc:83:f5:89:4d:ea:aa:a1:72:26:49:78:a6:f0:1b:a0:3a:6b: 59:fa:68:1d:b3:3e:6f:57:71:67:57:52:fd:2d:cb:b5:5f:be: 3e:37:ea:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebD2HKEjz0ofv1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NTkyYmU4NmItMTY0Ni00MzgzLTliMzctNjM3Nzk1ZGI0ZmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje/6qqHhWPRjRFYw9gDGo/NmZf6QbPqCqEvz S027RUvqU31v+igX3oLQFaP7+KVw2XuPW3UZT5HqKwmDaeGrXHkz/fJDy7oRHj7g WOSxP7gt/ho2QDCsBz9f/YiBGWQUeDqVoGRgiSUGaZpxJHNyvakVwxUGFko0VPGH j8HJrlut5jo75BlykL7LDHLke8PiXcFK1lPIGmbCMPrHX3fHW/d0CGBiow8jSZay hHaU5BLrOkjHFx72D13M+EX74BMNnYh96Kqr011JiJ9ngT43QT7Fi4AF04taQi2e uqwoxHTCcjhK4fN5n3yFGRrwbYLN0K++YP2eD4m3HmRGsMVopQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCGn4NPByaVPNEKKaqc2FuzDjD2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTBmM2ZjYzAtMDgyNy0z YWRkLWE3OTItYWY3ZjllYjE4Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcPM MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEVLOk0eWLcHAquLHtlH0bkvLXqpeQff1ygI/jlqf9EWcVo3mhI0 uraxiBeEMIuMafYxELp4aiL6fa1o+ye7nenoVvF1A50M9DhkHKAPNwrqIU9V7nkG XvQh1BKCdrtW+0fP9Qh3nmQZ93cQieFEsYkrw7AqO/9owQPjwurgsYxEiY/uarh0 beek2GhVK+iL4FzTvfkyAyTNZIdVhsMXqGYpMaWXtTXJEyIJDjsgbIS9d+cE2NNX H3P5kuF4uMcPWrdbjsCgWjxRLCACemwKSv45M4MBODnH58yD9YlN6qqhciZJeKbw G6A6a1n6aB2zPm9XcWdXUv0ty7Vfvj436rI= -----END CERTIFICATE-----Generated at Sun Apr 6 09:37:58 2025 by rpki-client