$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a98e762a-82ea-3882-a937-6f1313d6c0f9.roa File: a98e762a-82ea-3882-a937-6f1313d6c0f9.roa (raw, json) Hash identifier: gUIVAF1+gzJF6yC9lCExTp1AAXYTis4BSKk2r6kojD4= Subject key identifier: 04:36:90:D1:85:A9:FE:4B:D3:44:5E:21:B2:94:E7:ED:8B:30:94:29 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DB36999DBD8C8D2A43250 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a98e762a-82ea-3882-a937-6f1313d6c0f9.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:c2c3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:b3:69:99:db:d8:c8:d2:a4:32:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=a365f7d2-2b4c-4d55-a319-336073bbc8de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:42:e9:71:b8:a3:54:99:8a:cd:df:12:32:9b: 64:c2:41:ed:a3:4e:56:6d:77:c9:49:1a:f3:cc:29: 30:4f:5d:b4:b9:14:e1:66:de:a3:13:59:be:32:f3: e8:0a:18:86:4c:4d:0a:b8:5c:3d:2a:ae:3d:cc:98: 99:40:08:0c:39:e8:20:5b:6b:fc:17:52:a1:63:38: 37:09:72:d6:68:6a:8b:53:a5:eb:42:63:10:f2:1e: 52:c3:02:2f:e4:09:99:6e:77:cb:a7:50:a3:3b:40: 23:88:12:f0:40:3c:42:fb:f8:0e:00:05:61:7b:58: be:40:8a:44:6c:f6:90:1c:f1:31:1a:bf:04:ef:2c: 20:66:bc:21:f2:48:bd:82:13:ba:25:a6:55:42:75: 54:eb:61:f4:9b:7a:1e:45:50:6c:3c:d0:2a:13:77: a3:34:4d:e6:0f:74:b0:01:44:6f:91:b7:ed:72:f3: 04:4a:3f:f0:29:90:e6:01:da:c6:b9:ee:32:ff:0c: 1a:bb:f4:ae:90:c4:dd:31:39:2a:10:32:6e:de:44: b0:fb:1e:bf:de:0a:c9:7d:cf:f2:b6:42:f4:da:a6: f5:29:d3:bd:20:82:96:f1:f3:11:15:90:88:d9:7e: 1e:12:67:21:e7:9d:cb:c7:ca:ab:8d:b2:df:64:81: ed:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:36:90:D1:85:A9:FE:4B:D3:44:5E:21:B2:94:E7:ED:8B:30:94:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a98e762a-82ea-3882-a937-6f1313d6c0f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c2c3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ba:c0:ce:5f:e7:af:8d:d4:2d:e9:af:dc:2b:2d:79:0d:3e: d1:2b:ae:93:ad:d9:8f:d6:c7:27:b2:4f:63:04:a8:8d:92:c6: 4c:a7:be:ef:f2:0e:40:67:e9:5a:c6:9b:bd:36:b4:cc:cb:09: 2e:62:38:e4:4f:aa:10:42:c7:ee:a4:8d:c9:17:f9:14:d1:a9: 74:b3:ff:8c:82:36:15:ce:f9:3e:a3:6f:3f:7f:6e:0b:2d:90: 46:f3:89:3c:58:9d:d3:d5:00:db:15:b5:69:7f:6b:ac:6f:97: 89:11:0b:af:78:f3:63:e3:db:80:0d:f4:7d:ed:f8:76:f4:7d: c7:55:fe:bb:f3:79:cb:a9:19:8b:bf:94:20:8b:a6:2c:ef:2f: 20:5d:9a:4b:cb:bc:d6:ae:43:f3:45:d4:2a:79:c4:43:cb:d3: e9:71:0f:b1:34:4a:70:35:46:e2:0a:ec:26:87:b1:03:d4:f7: a9:89:e1:a0:45:f9:b3:cd:85:a1:11:5b:e8:db:fc:0c:97:34: 1c:10:78:2e:c6:56:ea:86:33:8f:61:03:58:ed:52:e6:79:bc: 87:b6:1a:a0:72:69:bd:85:9e:e5:d7:90:bf:f1:f4:70:c5:b3: 2b:4c:5b:92:67:50:b3:32:e0:bb:0f:ba:52:b4:6f:31:68:2f: 78:c1:ee:34 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebbNpmdvYyNKkMlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YTM2NWY3ZDItMmI0Yy00ZDU1LWEzMTktMzM2MDczYmJjOGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokLpcbijVJmKzd8SMptkwkHto05WbXfJSRrz zCkwT120uRThZt6jE1m+MvPoChiGTE0KuFw9Kq49zJiZQAgMOeggW2v8F1KhYzg3 CXLWaGqLU6XrQmMQ8h5SwwIv5AmZbnfLp1CjO0AjiBLwQDxC+/gOAAVhe1i+QIpE bPaQHPExGr8E7ywgZrwh8ki9ghO6JaZVQnVU62H0m3oeRVBsPNAqE3ejNE3mD3Sw AURvkbftcvMESj/wKZDmAdrGue4y/wwau/SukMTdMTkqEDJu3kSw+x6/3grJfc/y tkL02qb1KdO9IIKW8fMRFZCI2X4eEmch553Lx8qrjbLfZIHtdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAQ2kNGFqf5L00ReIbKU5+2LMJQpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTk4ZTc2MmEtODJlYS0z ODgyLWE5MzctNmYxMzEzZDZjMGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcLD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC+6wM5f56+N1C3pr9wrLXkNPtErrpOt2Y/WxyeyT2MEqI2Sxkyn vu/yDkBn6VrGm702tMzLCS5iOORPqhBCx+6kjckX+RTRqXSz/4yCNhXO+T6jbz9/ bgstkEbziTxYndPVANsVtWl/a6xvl4kRC69482Pj24AN9H3t+Hb0fcdV/rvzecup GYu/lCCLpizvLyBdmkvLvNauQ/NF1Cp5xEPL0+lxD7E0SnA1RuIK7CaHsQPU96mJ 4aBF+bPNhaERW+jb/AyXNBwQeC7GVuqGM49hA1jtUuZ5vIe2GqByab2FnuXXkL/x 9HDFsytMW5JnULMy4LsPulK0bzFoL3jB7jQ= -----END CERTIFICATE-----Generated at Sun Apr 6 09:43:25 2025 by rpki-client