$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aec00a60-9e65-3a12-ada3-54bf3640c131.roa File: aec00a60-9e65-3a12-ada3-54bf3640c131.roa (raw, json) Hash identifier: FnXM9ZYBieRmCCcoGbKKBM5J4yTTiAmbsq2fWG74yg4= Subject key identifier: 3F:4D:0F:E9:AF:9A:F5:DB:63:30:D3:51:43:FF:EA:0B:A8:08:B6:BB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5933480B6670FAE11B300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aec00a60-9e65-3a12-ada3-54bf3640c131.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33657 IP address blocks: 2001:559:84de::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:93:34:80:b6:67:0f:ae:11:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=20352a73-a5c8-437e-b46d-bab73d96a7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a8:f4:5e:00:ab:3c:06:c3:35:47:c0:34:1e: f2:91:30:bf:1d:38:e7:dc:fd:cb:18:2f:e0:e4:a1: a7:47:9d:cb:25:32:1e:fe:07:13:7e:28:0b:2a:59: 9a:46:94:a3:24:52:0a:8d:44:ef:fb:ab:92:a5:72: f1:09:2e:9a:5c:6b:e5:6f:c7:52:51:97:58:41:e5: 93:e3:3a:47:5d:0c:7e:73:87:6a:91:24:03:59:14: 2e:a1:56:49:97:26:e8:7e:81:01:3f:12:12:2d:9b: d7:d2:5e:87:5b:e8:c8:a4:0f:c2:0b:99:f1:32:15: 37:cd:c3:96:ad:fd:76:15:53:ba:e6:a9:4b:e9:a0: 47:0f:cc:8d:b5:0e:8a:c4:4e:55:f9:5b:38:00:61: e9:b8:2e:db:f6:02:fe:98:94:d1:66:0a:b6:12:d4: 06:a9:ea:99:ac:21:e5:17:ef:d2:b3:90:61:39:48: d7:f8:f8:ef:73:ee:bc:22:55:05:62:c9:1b:45:3f: a7:8b:42:d0:3a:4d:0a:4f:95:bf:0d:dc:89:0e:6b: 88:6c:65:47:ab:36:93:2d:2b:92:07:1e:28:b1:f6: 34:da:6c:63:ac:9c:32:f9:6d:ac:77:bc:50:eb:c3: 81:a0:85:54:38:01:0f:e9:59:e1:6d:3f:53:6b:20: 16:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4D:0F:E9:AF:9A:F5:DB:63:30:D3:51:43:FF:EA:0B:A8:08:B6:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aec00a60-9e65-3a12-ada3-54bf3640c131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:84de::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f4:a1:6e:f6:30:20:fa:12:8f:ee:19:7b:ce:ef:b0:ab:69: d1:c6:80:e0:af:4e:2e:86:3a:5b:94:94:86:d7:bf:66:49:ee: 2f:a9:65:47:44:48:db:50:c6:95:25:61:55:05:fd:c0:db:cc: ae:56:3f:72:3b:fe:6d:de:76:5b:6c:7a:11:97:98:0e:f2:7f: d9:a6:8e:47:fa:b8:79:19:c3:2e:9a:fd:5b:8f:6f:a6:16:5b: fc:43:56:db:43:9a:53:51:58:ca:96:bc:db:52:c7:98:82:6f: 8e:b2:9f:e1:2c:83:3a:84:60:6b:84:41:a4:60:d0:3c:3d:39: f8:0d:c9:58:9f:54:8c:94:53:36:e8:7b:23:bb:31:00:c6:50: bf:d8:4d:ce:11:89:a0:49:67:2a:7d:7d:6b:4c:84:ae:e6:43: 78:a4:ca:18:10:6b:48:84:08:84:b5:74:7d:7a:2c:70:1c:92: 9f:14:32:2a:bf:7a:cb:2c:48:29:34:16:7e:d5:30:dc:bd:b4: 63:4c:53:bd:91:0c:40:f2:a4:64:b0:2b:e1:a0:68:d7:0e:50: 1d:1c:68:f2:1c:64:94:bb:74:7d:73:df:a0:2e:a9:28:a9:b0: fa:1d:c8:05:f3:56:35:d6:bd:5f:36:d6:04:6d:f9:ea:da:2f: 31:13:59:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pZM0gLZnD64RswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjAzNTJhNzMtYTVjOC00MzdlLWI0NmQtYmFiNzNkOTZhN2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqj0XgCrPAbDNUfANB7ykTC/HTjn3P3LGC/g 5KGnR53LJTIe/gcTfigLKlmaRpSjJFIKjUTv+6uSpXLxCS6aXGvlb8dSUZdYQeWT 4zpHXQx+c4dqkSQDWRQuoVZJlybofoEBPxISLZvX0l6HW+jIpA/CC5nxMhU3zcOW rf12FVO65qlL6aBHD8yNtQ6KxE5V+Vs4AGHpuC7b9gL+mJTRZgq2EtQGqeqZrCHl F+/Ss5BhOUjX+Pjvc+68IlUFYskbRT+ni0LQOk0KT5W/DdyJDmuIbGVHqzaTLSuS Bx4osfY02mxjrJwy+W2sd7xQ68OBoIVUOAEP6VnhbT9TayAWYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD9ND+mvmvXbYzDTUUP/6guoCLa7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWVjMDBhNjAtOWU2NS0z YTEyLWFkYTMtNTRiZjM2NDBjMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYTe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGX0oW72MCD6Eo/uGXvO77CradHGgOCvTi6GOluUlIbXv2ZJ7i+p ZUdESNtQxpUlYVUF/cDbzK5WP3I7/m3edltsehGXmA7yf9mmjkf6uHkZwy6a/VuP b6YWW/xDVttDmlNRWMqWvNtSx5iCb46yn+EsgzqEYGuEQaRg0Dw9OfgNyVifVIyU UzboeyO7MQDGUL/YTc4RiaBJZyp9fWtMhK7mQ3ikyhgQa0iECIS1dH16LHAckp8U Miq/esssSCk0Fn7VMNy9tGNMU72RDEDypGSwK+GgaNcOUB0caPIcZJS7dH1z36Au qSipsPodyAXzVjXWvV821gRt+eraLzETWXo= -----END CERTIFICATE-----Generated at Thu Apr 17 03:26:09 2025 by rpki-client