$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e80f93-7476-3f45-a76a-47a7e3ad593c.roa File: a5e80f93-7476-3f45-a76a-47a7e3ad593c.roa (raw, json) Hash identifier: lKmt6KQrBVERhozeljcV65UvWymubK339YlZAeq3Kjk= Subject key identifier: CC:45:52:B9:48:9D:06:61:CB:13:A0:81:16:78:6E:D1:A5:44:D7:24 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C862EA88AF9DE0E097380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e80f93-7476-3f45-a76a-47a7e3ad593c.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:8067::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:86:2e:a8:8a:f9:de:0e:09:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=42a89ae0-9912-403e-a6b7-67eaf27be0a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:e2:2a:e9:c3:bb:d3:a0:aa:a2:f2:13:b9: fc:4d:88:bf:6b:54:4c:f5:db:af:7c:91:9c:ec:fe: 7f:86:20:b0:2f:33:28:73:ca:76:15:92:e4:79:3c: 2a:f3:c4:16:dc:8e:67:5c:10:67:de:95:60:de:d2: 1e:81:d0:c6:dc:98:da:e6:0b:0c:f7:ec:85:8b:21: 1f:bf:b6:c4:74:2f:27:ce:36:f7:c0:25:dd:fd:75: a8:9c:d3:e4:e9:3c:1b:36:f1:f6:41:31:df:60:7b: 45:61:a1:69:0d:2b:ff:85:36:20:1b:89:10:45:41: cc:1a:ac:72:d9:d8:20:8d:23:12:e8:82:85:2a:3c: 56:e7:ae:80:06:c6:9b:f9:5e:27:4d:be:d8:5d:d3: 9e:f3:29:f7:9b:81:51:77:1f:fb:2f:b3:cd:61:5c: 34:0c:62:31:9b:61:3c:70:66:81:1b:e1:e0:86:61: 7a:9d:3a:06:0b:89:c2:53:76:fa:50:ce:39:10:cd: e9:1b:0c:11:7a:34:1f:70:1c:44:13:ef:ba:8d:d7: ee:43:14:a5:24:87:41:a7:85:c0:c7:71:6c:8d:6f: 83:6f:d1:95:1b:b9:85:9a:5b:fc:f1:17:0b:66:f1: 56:49:b1:f8:43:b6:10:96:16:b7:81:72:bf:48:fd: ea:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:45:52:B9:48:9D:06:61:CB:13:A0:81:16:78:6E:D1:A5:44:D7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a5e80f93-7476-3f45-a76a-47a7e3ad593c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8067::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c6:d3:69:b5:21:20:09:c0:33:2f:a7:04:47:33:c2:84:a4: ce:9f:9c:c9:23:58:0a:1c:d5:54:15:83:9e:0f:b6:c0:65:30: 82:3e:9f:ed:ce:98:21:87:fd:44:dd:48:e1:d0:85:99:da:10: 2a:bf:96:c4:b8:62:e3:ee:ef:22:0f:9e:8b:0c:25:77:5f:23: 97:97:95:07:56:0b:87:cc:fd:cb:26:a2:97:26:7a:0b:71:05: fd:d9:5d:ba:52:a1:9c:ed:24:fa:f3:ef:fe:cf:5e:56:83:c7: d4:86:93:76:89:27:e9:17:22:5d:82:3b:b3:04:88:5e:b7:aa: 69:c3:23:4e:cd:ec:66:5d:a3:fb:9f:1c:75:4b:48:45:ee:1c: 9d:93:ab:c1:f7:03:a1:b3:48:b6:54:e3:76:bc:1c:4b:e2:d1: 84:33:13:96:9d:36:33:f9:25:0c:b7:f1:ac:0f:be:69:89:25: cf:d4:55:82:df:69:f6:18:3e:91:36:75:26:0e:83:bb:52:8d: 50:d9:5d:ac:05:4b:b8:e1:4a:6e:05:86:9c:e0:c2:74:ca:77: 51:73:57:32:90:f4:64:cf:e6:5d:99:df:00:2d:08:a8:98:15: 84:cf:f3:77:82:1f:f9:84:65:76:7d:9c:ce:d4:73:44:83:f5: 7f:bb:f0:8c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebIYuqIr53g4Jc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NDJhODlhZTAtOTkxMi00MDNlLWE2YjctNjdlYWYyN2JlMGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsDiKunDu9OgqqLyE7n8TYi/a1RM9duvfJGc 7P5/hiCwLzMoc8p2FZLkeTwq88QW3I5nXBBn3pVg3tIegdDG3Jja5gsM9+yFiyEf v7bEdC8nzjb3wCXd/XWonNPk6TwbNvH2QTHfYHtFYaFpDSv/hTYgG4kQRUHMGqxy 2dggjSMS6IKFKjxW566ABsab+V4nTb7YXdOe8yn3m4FRdx/7L7PNYVw0DGIxm2E8 cGaBG+HghmF6nToGC4nCU3b6UM45EM3pGwwRejQfcBxEE++6jdfuQxSlJIdBp4XA x3FsjW+Db9GVG7mFmlv88RcLZvFWSbH4Q7YQlha3gXK/SP3qhwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMxFUrlInQZhyxOggRZ4btGlRNckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTVlODBmOTMtNzQ3Ni0z ZjQ1LWE3NmEtNDdhN2UzYWQ1OTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYBn MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIbG02m1ISAJwDMvpwRHM8KEpM6fnMkjWAoc1VQVg54PtsBlMII+ n+3OmCGH/UTdSOHQhZnaECq/lsS4YuPu7yIPnosMJXdfI5eXlQdWC4fM/csmopcm egtxBf3ZXbpSoZztJPrz7/7PXlaDx9SGk3aJJ+kXIl2CO7MEiF63qmnDI07N7GZd o/ufHHVLSEXuHJ2Tq8H3A6GzSLZU43a8HEvi0YQzE5adNjP5JQy38awPvmmJJc/U VYLfafYYPpE2dSYOg7tSjVDZXawFS7jhSm4FhpzgwnTKd1FzVzKQ9GTP5l2Z3wAt CKiYFYTP83eCH/mEZXZ9nM7Uc0SD9X+78Iw= -----END CERTIFICATE-----Generated at Wed Apr 9 08:09:50 2025 by rpki-client