$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95f97d1-bd72-34fe-a98a-167848eb665b.roa File: a95f97d1-bd72-34fe-a98a-167848eb665b.roa (raw, json) Hash identifier: l9apzLFhtI7cZcqBew2nVt2k+kp890cBncaJjxJsRqs= Subject key identifier: B8:19:BC:4F:C5:49:E1:04:4C:A6:0B:88:93:D6:02:DB:84:4F:8F:CE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E1A518CA676E8DF41F820 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95f97d1-bd72-34fe-a98a-167848eb665b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:80b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:1a:51:8c:a6:76:e8:df:41:f8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b99bb880-4d2f-4740-b6d6-1fb34b33e2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:1e:bd:24:a8:d0:e4:6c:b0:87:f9:9c:1f:12: f3:b5:f5:b6:b0:e9:1f:0f:60:22:5b:76:6f:24:b4: 16:a6:e7:ce:83:62:e2:e8:7a:ac:4c:cd:ff:ba:32: 19:1d:4d:98:7b:ae:ab:2a:82:53:1e:5b:5e:62:f7: d3:8e:9b:1d:bd:93:17:65:9c:3c:f0:68:74:aa:ca: da:d6:86:ee:e7:26:63:65:48:a6:25:48:eb:89:a6: e3:ed:99:3c:a3:7c:65:fb:cf:28:f9:2d:a6:f8:9f: 6b:ce:75:2c:a5:f4:3b:f4:42:d6:a2:ef:bf:f1:bd: 1e:ec:0c:bc:b8:58:75:f7:f1:8b:ea:cb:d5:81:d3: 88:85:a5:8d:9a:0a:0a:00:cb:3f:6a:92:f1:93:0e: 0a:b3:3b:41:8c:ea:95:ee:ff:e6:33:f3:4a:a6:84: 64:45:d9:05:04:0b:b3:1e:e3:4d:91:53:f8:05:cd: 77:38:aa:e8:c0:49:98:10:a4:ad:05:14:f9:a8:3c: 71:19:9a:2b:88:80:f1:2b:73:f5:93:74:84:a7:a1: 02:9e:1f:40:a4:31:8b:a2:d7:dc:94:99:1c:9b:6a: da:b7:bf:e7:fe:d0:ca:40:e5:0d:3f:1b:79:d9:5d: c2:8e:c6:63:40:52:db:90:4e:d0:64:55:1f:78:b3: 19:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:19:BC:4F:C5:49:E1:04:4C:A6:0B:88:93:D6:02:DB:84:4F:8F:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a95f97d1-bd72-34fe-a98a-167848eb665b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:80b3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:8c:06:de:70:e8:50:25:36:f4:2c:63:be:a6:03:29:c1:79: 8f:db:77:39:45:31:ce:6d:fe:ac:31:0c:59:9e:b6:5e:5c:21: 8b:84:b3:57:fd:18:79:60:54:58:3a:d5:99:83:21:5d:7b:77: 46:9d:4a:23:b8:4f:ac:0a:5a:f5:f7:0d:bb:73:ee:ef:ce:69: e3:2c:5a:99:89:06:2d:ff:19:a5:13:3d:d9:04:87:06:e4:19: 07:74:8f:fa:3c:c0:68:0c:a6:20:36:a1:1a:1e:6f:f0:6f:fb: 1b:1f:8e:12:bd:a8:d3:9a:a8:ff:3a:b6:c8:4b:90:cb:37:ea: 07:4f:0a:da:49:a6:f3:0a:21:0e:05:39:ef:db:21:85:68:37: e5:62:31:e1:dc:07:3b:91:7d:0b:70:42:30:43:67:77:e0:56: 04:f7:a9:47:5a:bf:2d:e8:df:d0:b6:d8:79:d2:d1:ec:17:a5: 77:1c:ba:d2:14:f9:a3:a6:75:60:cf:9d:34:de:57:1b:6c:ff: a2:19:3a:d6:21:87:4a:4a:3d:0c:db:5e:89:d0:36:2c:fc:8b: 3a:c7:8b:69:91:3f:42:9e:4d:d1:7f:7b:79:18:ce:15:c7:c4: f3:be:cc:da:56:52:90:03:0c:62:db:28:fa:29:f2:0a:b8:9b: ad:ee:d7:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebhpRjKZ26N9B+CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Yjk5YmI4ODAtNGQyZi00NzQwLWI2ZDYtMWZiMzRiMzNlMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgR69JKjQ5Gywh/mcHxLztfW2sOkfD2AiW3Zv JLQWpufOg2Li6HqsTM3/ujIZHU2Ye66rKoJTHlteYvfTjpsdvZMXZZw88Gh0qsra 1obu5yZjZUimJUjriabj7Zk8o3xl+88o+S2m+J9rznUspfQ79ELWou+/8b0e7Ay8 uFh19/GL6svVgdOIhaWNmgoKAMs/apLxkw4KsztBjOqV7v/mM/NKpoRkRdkFBAuz HuNNkVP4Bc13OKrowEmYEKStBRT5qDxxGZoriIDxK3P1k3SEp6ECnh9ApDGLotfc lJkcm2rat7/n/tDKQOUNPxt52V3CjsZjQFLbkE7QZFUfeLMZ1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLgZvE/FSeEETKYLiJPWAtuET4/OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk1Zjk3ZDEtYmQ3Mi0z NGZlLWE5OGEtMTY3ODQ4ZWI2NjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYCz MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIuMBt5w6FAlNvQsY76mAynBeY/bdzlFMc5t/qwxDFmetl5cIYuE s1f9GHlgVFg61ZmDIV17d0adSiO4T6wKWvX3Dbtz7u/OaeMsWpmJBi3/GaUTPdkE hwbkGQd0j/o8wGgMpiA2oRoeb/Bv+xsfjhK9qNOaqP86tshLkMs36gdPCtpJpvMK IQ4FOe/bIYVoN+ViMeHcBzuRfQtwQjBDZ3fgVgT3qUdavy3o39C22HnS0ewXpXcc utIU+aOmdWDPnTTeVxts/6IZOtYhh0pKPQzbXonQNiz8izrHi2mRP0KeTdF/e3kY zhXHxPO+zNpWUpADDGLbKPop8gq4m63u12Q= -----END CERTIFICATE-----Generated at Mon Apr 7 05:53:46 2025 by rpki-client