$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa File: aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa (raw, json) Hash identifier: B5mZxGdASVcFWg6AGw/5hES36JTAuRPxbwKaKT+0UdQ= Subject key identifier: 93:58:48:A2:AD:3B:70:C5:F2:88:D6:80:81:CA:DF:2F:F5:31:E8:B9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C1668693E2758900EAD00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33662 IP address blocks: 2001:559:19b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:16:68:69:3e:27:58:90:0e:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=2fd54cd1-a0a4-41f3-8a9d-598f05a64a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:10:f4:97:b4:36:31:1a:f2:1a:6a:99:da: 4d:f1:2c:11:9e:4f:0c:bb:f7:ce:8b:a3:23:b4:ef: 6a:44:dc:44:7d:bf:1e:9f:04:4c:c9:d6:d4:0e:8c: a3:7d:12:71:e7:14:e5:b5:81:76:0d:9e:67:fc:04: ec:d0:01:3b:8a:d2:5d:2a:12:bb:bd:cd:61:b9:d3: 37:5f:3e:83:c0:e7:07:e2:b2:50:d3:88:b2:52:48: 65:c6:cc:14:76:68:e6:a3:d3:b9:d7:6c:4f:31:93: 00:33:a6:87:3e:06:ea:4e:02:4b:f8:20:bf:b7:a4: 49:2a:ce:db:69:b0:4b:fa:69:1d:36:55:51:69:ac: f4:87:03:d5:21:5d:20:df:13:0e:97:9e:8d:55:b5: 58:15:73:ad:c9:a9:30:41:f3:3b:8f:b3:49:be:d2: f4:f7:1e:ff:91:67:fb:8a:01:34:85:11:d1:6b:a2: 52:50:05:fb:56:d0:eb:e5:0e:47:bf:a9:e1:22:50: 54:62:71:de:74:af:af:3a:eb:33:e7:cf:72:0b:96: ac:0c:a1:24:d1:d8:73:36:95:99:a5:ec:4e:11:d6: 9e:e7:d6:63:19:8f:cb:97:94:05:1c:69:5e:15:78: de:16:b2:a8:7d:f4:20:5d:22:3a:79:31:99:cd:6a: 9c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:58:48:A2:AD:3B:70:C5:F2:88:D6:80:81:CA:DF:2F:F5:31:E8:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaa25035-e9e3-3f9e-834f-231ef49a54f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:19b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:87:26:85:8d:39:30:be:00:2a:3a:5d:4f:c6:e8:a5:7d:95: 4e:53:69:8f:6f:14:96:73:1e:e0:67:e6:d2:21:5a:53:be:bc: 2b:92:9b:4d:47:d2:2a:9a:01:61:35:fa:57:0e:4a:70:16:77: 7f:72:d7:3c:a6:89:db:46:2e:72:9e:33:67:41:24:93:a6:ea: ae:fc:bb:8b:0b:1e:94:e8:57:43:59:60:aa:93:bf:42:1c:c9: 06:c3:64:89:f2:46:45:c8:69:d3:14:5e:9f:87:31:52:ea:e2: c8:c6:7d:b4:58:9b:09:2a:37:2b:a2:7d:dd:e1:5a:30:26:de: fb:ed:c8:f5:f1:a9:83:6f:27:c9:74:7d:9b:ef:bd:bf:74:f6: e0:d0:b2:d5:d3:04:b0:49:fb:2e:fa:1a:74:2c:27:4c:e7:fa: 97:fd:a5:49:74:e5:09:ca:44:92:d0:9a:14:37:0b:74:4a:73: 75:c5:28:7a:98:59:34:98:21:b3:f1:97:cd:e1:20:bd:12:bc: ac:cb:5c:dd:24:f2:51:39:89:13:f0:d9:6d:00:8b:aa:c5:b9: cd:84:35:4f:05:67:1e:be:5e:30:bb:47:bd:bc:c6:35:cb:ee: 39:b5:14:97:6e:e9:98:6d:e6:f2:e2:14:72:f4:7d:c2:07:fe: bf:1d:5a:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebBZoaT4nWJAOrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MmZkNTRjZDEtYTBhNC00MWYzLThhOWQtNTk4ZjA1YTY0YTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrYQ9Je0NjEa8hpqmdpN8SwRnk8Mu/fOi6Mj tO9qRNxEfb8enwRMydbUDoyjfRJx5xTltYF2DZ5n/ATs0AE7itJdKhK7vc1hudM3 Xz6DwOcH4rJQ04iyUkhlxswUdmjmo9O512xPMZMAM6aHPgbqTgJL+CC/t6RJKs7b abBL+mkdNlVRaaz0hwPVIV0g3xMOl56NVbVYFXOtyakwQfM7j7NJvtL09x7/kWf7 igE0hRHRa6JSUAX7VtDr5Q5Hv6nhIlBUYnHedK+vOusz589yC5asDKEk0dhzNpWZ pexOEdae59ZjGY/Ll5QFHGleFXjeFrKoffQgXSI6eTGZzWqcVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJNYSKKtO3DF8ojWgIHK3y/1Mei5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWFhMjUwMzUtZTllMy0z ZjllLTgzNGYtMjMxZWY0OWE1NGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQGb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIeHJoWNOTC+ACo6XU/G6KV9lU5TaY9vFJZzHuBn5tIhWlO+vCuS m01H0iqaAWE1+lcOSnAWd39y1zymidtGLnKeM2dBJJOm6q78u4sLHpToV0NZYKqT v0IcyQbDZInyRkXIadMUXp+HMVLq4sjGfbRYmwkqNyuifd3hWjAm3vvtyPXxqYNv J8l0fZvvvb909uDQstXTBLBJ+y76GnQsJ0zn+pf9pUl05QnKRJLQmhQ3C3RKc3XF KHqYWTSYIbPxl83hIL0SvKzLXN0k8lE5iRPw2W0Ai6rFuc2ENU8FZx6+XjC7R728 xjXL7jm1FJdu6Zht5vLiFHL0fcIH/r8dWro= -----END CERTIFICATE-----Generated at Mon Apr 7 06:32:13 2025 by rpki-client