$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae778908-427f-3d3a-9803-1f049a3b6a7a.roa File: ae778908-427f-3d3a-9803-1f049a3b6a7a.roa (raw, json) Hash identifier: wWTnXXr+YvG/oW8M6al+OzIVO69p31jkfPMRxtOxEXw= Subject key identifier: D6:73:70:B7:E9:1F:29:25:8B:E5:3D:D8:50:79:B0:6C:FA:B7:77:3A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C7D1CDB95BE84BAF2C580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae778908-427f-3d3a-9803-1f049a3b6a7a.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:272::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:7d:1c:db:95:be:84:ba:f2:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=fe85d735-a426-498b-b87e-b2910d924181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:40:b7:b4:6e:d0:55:d0:22:35:c0:c2:7b:3d: 39:e5:2a:4e:a9:c2:4b:5a:08:9d:a4:9d:e6:b3:e0: 6a:fc:63:69:6f:44:d9:9f:eb:e8:74:48:dc:b2:90: 39:f4:04:e2:bf:a7:43:fd:86:cb:5c:ca:74:79:aa: 9c:26:ae:14:bf:9b:75:46:31:6b:59:d3:b5:4b:15: 5d:d0:92:5e:22:ff:10:dd:03:d4:c8:b4:92:10:52: 53:08:c1:74:9b:98:4a:a1:6c:5c:8a:76:8b:a6:37: 2e:54:e0:17:16:40:95:77:9c:7c:d5:57:25:ef:96: c8:26:f6:4f:c8:b9:e2:13:28:6e:17:d0:2f:bc:c5: ac:98:57:05:c0:04:24:b9:7a:9e:de:a9:a4:01:a4: 64:65:9e:df:fc:d7:26:de:4a:c7:ff:55:6a:77:b3: 84:86:cb:0d:b9:c1:2e:99:33:2a:e8:47:9b:19:73: 3c:83:98:96:98:bb:12:f4:4d:e3:67:9f:f4:b1:58: 8e:90:71:07:4f:a8:32:75:c1:92:22:8d:a1:b2:f4: 0c:12:ba:09:bf:6f:a2:d9:8a:9e:44:f0:b4:8a:99: 39:c7:8c:52:9b:fb:47:d0:ff:9b:19:a6:1a:b3:ff: ca:e9:61:e1:82:9f:cc:ab:84:a5:bc:94:8b:b7:46: 2f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:73:70:B7:E9:1F:29:25:8B:E5:3D:D8:50:79:B0:6C:FA:B7:77:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ae778908-427f-3d3a-9803-1f049a3b6a7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:272::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:04:b7:90:e9:ed:55:3a:30:c1:77:cd:cb:9b:8d:db:d1:44: e7:9c:b3:b1:19:9b:fb:e9:66:23:1c:82:6e:58:13:89:4c:7a: 95:df:db:08:ed:26:15:a8:58:65:81:27:dc:51:b2:d3:55:e9: a0:03:5a:47:7e:a2:82:e6:57:6d:57:c1:37:5f:13:9c:c8:05: 31:8e:d5:cb:1b:52:81:f4:ee:66:8c:95:0d:13:0b:34:58:36: 79:69:d2:01:f0:19:10:d5:02:bf:05:b7:97:56:8a:dc:70:74: 52:b7:86:20:22:b6:f1:14:f0:59:60:30:4b:15:fd:37:aa:b8: 04:d4:86:78:9a:f5:94:20:d2:51:f8:60:59:86:31:62:82:6e: cc:cf:2a:50:61:b0:1e:35:0c:b2:77:91:1b:c7:bc:f3:be:b2: 88:f3:66:be:92:74:a2:e6:c5:88:f1:34:49:80:34:e1:f6:da: ba:d5:10:59:2a:2c:fe:24:41:df:40:3a:90:b9:09:26:df:37: 8d:ee:aa:05:ae:02:c3:47:87:4f:5d:14:77:b0:3f:46:7c:09: 5f:81:fd:ac:29:e7:2d:c9:bc:e9:3b:b9:6f:d1:ce:b3:fa:05: ff:17:24:8f:b2:65:c5:dc:3a:59:77:61:6c:17:23:d9:2f:9b: 98:24:d0:95 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebH0c25W+hLryxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZmU4NWQ3MzUtYTQyNi00OThiLWI4N2UtYjI5MTBkOTI0MTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikC3tG7QVdAiNcDCez055SpOqcJLWgidpJ3m s+Bq/GNpb0TZn+vodEjcspA59ATiv6dD/YbLXMp0eaqcJq4Uv5t1RjFrWdO1SxVd 0JJeIv8Q3QPUyLSSEFJTCMF0m5hKoWxcinaLpjcuVOAXFkCVd5x81Vcl75bIJvZP yLniEyhuF9AvvMWsmFcFwAQkuXqe3qmkAaRkZZ7f/Ncm3krH/1Vqd7OEhssNucEu mTMq6EebGXM8g5iWmLsS9E3jZ5/0sViOkHEHT6gydcGSIo2hsvQMEroJv2+i2Yqe RPC0ipk5x4xSm/tH0P+bGaYas//K6WHhgp/Mq4SlvJSLt0YvqwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZzcLfpHykli+U92FB5sGz6t3c6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWU3Nzg5MDgtNDI3Zi0z ZDNhLTk4MDMtMWYwNDlhM2I2YTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQJy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJsEt5Dp7VU6MMF3zcubjdvRROecs7EZm/vpZiMcgm5YE4lMepXf 2wjtJhWoWGWBJ9xRstNV6aADWkd+ooLmV21XwTdfE5zIBTGO1csbUoH07maMlQ0T CzRYNnlp0gHwGRDVAr8Ft5dWitxwdFK3hiAitvEU8FlgMEsV/TequATUhnia9ZQg 0lH4YFmGMWKCbszPKlBhsB41DLJ3kRvHvPO+sojzZr6SdKLmxYjxNEmANOH22rrV EFkqLP4kQd9AOpC5CSbfN43uqgWuAsNHh09dFHewP0Z8CV+B/awp5y3JvOk7uW/R zrP6Bf8XJI+yZcXcOll3YWwXI9kvm5gk0JU= -----END CERTIFICATE-----Generated at Sun Apr 6 20:25:43 2025 by rpki-client