$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ec902f-6cdf-356b-9359-741f365c6cba.roa File: a7ec902f-6cdf-356b-9359-741f365c6cba.roa (raw, json) Hash identifier: 9KVHJKWTlojxmtSwYgmhFdMAAbKLQsB0BY4gjlnSTbY= Subject key identifier: D5:CD:27:E5:00:4D:09:F7:DC:E1:24:58:59:31:B8:E2:28:2E:B7:B2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E1EBABFF2C1685C8A7D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ec902f-6cdf-356b-9359-741f365c6cba.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:a001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:1e:ba:bf:f2:c1:68:5c:8a:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b3d2f4ea-01a4-4b51-9cb6-dc9626c82bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c3:3a:60:29:d3:60:fd:25:1f:96:a4:df:9d: ea:71:94:4b:ea:db:7b:b1:ac:5d:ee:c1:9b:9e:85: ba:e5:b4:12:42:e1:35:79:98:15:34:99:75:3a:25: 23:fc:6b:93:f4:da:aa:d4:5f:4a:4a:95:67:d1:31: d1:d8:45:88:eb:56:99:3d:ab:aa:7a:b8:ba:24:e8: fb:72:28:6d:d7:27:b3:87:d9:f7:19:cc:f3:f2:f1: 0d:82:1d:5a:30:d5:80:58:b1:d8:e2:1d:5b:55:8a: f7:bb:bd:78:b5:0c:7b:3e:5c:9b:b3:cf:37:57:f4: 29:e9:30:21:3d:25:fa:53:12:f2:ec:1a:3a:6a:cb: 4f:6a:79:90:42:e2:98:96:0b:de:9b:db:02:30:53: 4b:8f:7c:b1:73:f9:53:85:8f:7a:1b:b5:6a:11:9e: bf:b0:7f:40:b4:80:62:f2:42:06:56:a1:88:76:e2: 56:1d:fb:12:df:9b:03:fd:d9:ed:ed:a5:97:a1:7d: 7f:0c:3a:70:ec:8e:06:57:4b:b5:1f:58:fd:81:9e: 98:a3:32:e7:fb:96:17:8b:88:cc:ae:43:88:17:f4: f9:98:c5:c1:94:53:27:53:74:bf:9b:11:cd:6c:04: d4:e2:fe:9d:ac:41:8e:ea:86:2b:db:64:d1:f0:c1: ba:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CD:27:E5:00:4D:09:F7:DC:E1:24:58:59:31:B8:E2:28:2E:B7:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ec902f-6cdf-356b-9359-741f365c6cba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:7e:d5:c9:47:a6:dd:9f:d2:f8:ae:70:d1:d5:73:da:8b:e1: 46:d5:9b:e2:9d:2a:6d:2b:97:6b:1c:38:cf:d3:aa:97:6c:5a: 58:fe:ba:7f:c7:25:2d:6e:93:5e:dc:de:e3:a6:3a:c6:e9:33: 30:da:14:d4:da:6a:1b:60:26:7a:5a:77:45:a8:4c:3a:eb:e8: fa:8d:ab:c3:d2:d9:6f:2f:1b:41:6b:70:30:c3:80:8b:0f:54: d9:a2:62:34:b2:3d:17:47:d9:ba:6d:9a:a0:15:c3:de:8d:a6: 3a:6b:42:21:e2:d0:09:76:b5:31:f5:b3:9c:4f:e7:bd:89:4e: 3b:b0:67:9b:0c:f9:14:05:6d:d0:08:fa:a3:f5:b1:5a:32:87: 38:90:50:34:5a:bd:57:11:f4:a8:0a:8f:d4:5b:88:79:11:80: 6e:1e:2c:e4:f8:92:b6:24:93:9b:a4:eb:18:0c:09:39:f2:6b: 4e:24:99:64:ed:c1:c1:aa:54:7d:a1:9d:01:3e:6a:5a:5d:5c: d5:99:2d:ae:d8:b5:c6:cc:f5:31:05:58:71:16:da:e4:fd:4a: 14:0b:9e:97:b9:c2:1f:a4:9e:40:23:52:d0:c4:21:38:75:80: bd:d0:9f:c6:c1:04:70:67:83:d7:8c:6e:b8:0f:88:b4:7d:18: 2a:5e:fa:3d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebh66v/LBaFyKfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjNkMmY0ZWEtMDFhNC00YjUxLTljYjYtZGM5NjI2YzgyYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcM6YCnTYP0lH5ak353qcZRL6tt7saxd7sGb noW65bQSQuE1eZgVNJl1OiUj/GuT9Nqq1F9KSpVn0THR2EWI61aZPauqeri6JOj7 ciht1yezh9n3Gczz8vENgh1aMNWAWLHY4h1bVYr3u714tQx7Plybs883V/Qp6TAh PSX6UxLy7Bo6astPanmQQuKYlgvem9sCMFNLj3yxc/lThY96G7VqEZ6/sH9AtIBi 8kIGVqGIduJWHfsS35sD/dnt7aWXoX1/DDpw7I4GV0u1H1j9gZ6YozLn+5YXi4jM rkOIF/T5mMXBlFMnU3S/mxHNbATU4v6drEGO6oYr22TR8MG6CQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNXNJ+UATQn33OEkWFkxuOIoLreyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdlYzkwMmYtNmNkZi0z NTZiLTkzNTktNzQxZjM2NWM2Y2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHp+1clHpt2f0viucNHVc9qL4UbVm+KdKm0rl2scOM/TqpdsWlj+ un/HJS1uk17c3uOmOsbpMzDaFNTaahtgJnpad0WoTDrr6PqNq8PS2W8vG0FrcDDD gIsPVNmiYjSyPRdH2bptmqAVw96NpjprQiHi0Al2tTH1s5xP572JTjuwZ5sM+RQF bdAI+qP1sVoyhziQUDRavVcR9KgKj9RbiHkRgG4eLOT4krYkk5uk6xgMCTnya04k mWTtwcGqVH2hnQE+alpdXNWZLa7YtcbM9TEFWHEW2uT9ShQLnpe5wh+knkAjUtDE ITh1gL3Qn8bBBHBng9eMbrgPiLR9GCpe+j0= -----END CERTIFICATE-----Generated at Sun Feb 16 20:15:49 2025 by rpki-client