$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af4ba18f-5efb-3697-b39e-f4c1eedbf7c9.roa File: af4ba18f-5efb-3697-b39e-f4c1eedbf7c9.roa (raw, json) Hash identifier: LKn9lwdqvv/3FyHQGsBNSV4ntK9TOa74yZNwRtwiwzM= Subject key identifier: 2C:A8:BD:81:6C:A2:7D:28:BE:20:48:8F:67:D7:60:70:29:53:81:BA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E1A6FED86EA8894DD1B80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af4ba18f-5efb-3697-b39e-f4c1eedbf7c9.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:80cb::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:1a:6f:ed:86:ea:88:94:dd:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f3fff743-d730-4e65-aaf6-da23b00f728a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:68:ff:ee:98:d0:90:0e:82:d7:1f:55:db:c6: e3:87:2c:bc:4d:ba:03:c9:f6:80:ef:88:09:e9:9c: 7a:7c:27:3d:e4:89:4a:48:b9:10:ab:70:7f:7a:77: b3:11:1e:e2:32:f2:68:b5:18:46:e0:e8:87:94:77: c3:21:12:7c:97:f5:3e:18:a9:c8:66:2e:4d:c5:49: 85:76:81:43:d7:af:b6:48:7b:da:66:12:bd:68:c8: 6c:cf:61:0d:4d:db:7c:8d:db:5d:22:d7:19:a7:3f: f3:45:c1:dd:97:26:a8:ad:a0:83:ef:9a:6f:48:6c: 08:91:be:a2:4a:cd:06:c6:d6:70:b1:e5:63:c1:9a: c7:cc:fa:bd:da:aa:b0:6e:e3:60:48:6a:33:0f:cf: bc:57:dd:a6:59:67:cd:66:05:b6:e1:64:6a:03:d8: 97:56:36:2a:4b:8f:06:48:9c:28:46:df:d6:34:29: 63:5f:fa:82:ec:ed:87:67:c8:4d:d1:b0:5b:ac:2a: 39:cf:61:c2:d3:1c:41:63:0f:ea:45:b7:98:6b:17: 71:19:8b:d4:16:0d:22:91:4a:e7:58:22:c4:9f:3c: 3c:55:a0:29:78:92:70:2d:69:82:4d:d9:dd:bd:b5: 85:0f:57:56:43:27:e1:eb:e3:ce:28:36:c9:1a:6c: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:A8:BD:81:6C:A2:7D:28:BE:20:48:8F:67:D7:60:70:29:53:81:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af4ba18f-5efb-3697-b39e-f4c1eedbf7c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:80cb::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:14:a8:e6:f0:5b:cb:0d:e0:31:de:5b:1d:9c:7a:3a:2a:46: 67:74:1d:a2:00:08:b2:cd:4f:a4:19:5e:ff:03:8d:a6:76:d7: 2f:6b:97:ef:4b:c0:92:44:e6:f2:c6:92:ff:66:39:61:d2:8b: cf:4c:ac:af:36:07:4b:14:c4:dd:90:ec:cd:c7:d9:74:30:96: 9f:7b:f4:61:c8:a3:23:e0:13:df:5d:82:34:42:c5:81:e0:f2: 50:d2:ae:7e:ed:6d:e7:11:62:28:96:fe:8b:a9:26:0c:9e:1e: 3b:2d:69:b3:ce:7f:c2:6a:26:3c:21:fe:32:53:d8:6c:8b:2e: dd:29:98:5f:bd:b1:47:95:66:3d:b0:f3:83:77:5f:ad:c8:3b: fd:09:06:1b:81:85:3d:7a:c5:52:69:59:ca:0f:54:41:7f:56: 45:63:ca:28:13:c4:51:5b:1c:c9:dc:63:9c:61:7a:de:77:7a: 6e:58:8a:c9:78:b7:5a:f0:6c:a6:31:ad:bd:4c:9f:11:72:48: 46:f0:cf:1a:6f:43:49:4a:9e:82:35:fb:41:97:f0:81:95:60: 24:31:78:30:81:0f:8a:d5:50:9f:0b:df:53:b9:25:57:65:eb: 14:52:2f:c8:ec:ff:51:62:38:5b:d7:57:08:f1:3e:c9:29:f3: 4f:32:72:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebhpv7YbqiJTdG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjNmZmY3NDMtZDczMC00ZTY1LWFhZjYtZGEyM2IwMGY3MjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2j/7pjQkA6C1x9V28bjhyy8TboDyfaA74gJ 6Zx6fCc95IlKSLkQq3B/enezER7iMvJotRhG4OiHlHfDIRJ8l/U+GKnIZi5NxUmF doFD16+2SHvaZhK9aMhsz2ENTdt8jdtdItcZpz/zRcHdlyaoraCD75pvSGwIkb6i Ss0GxtZwseVjwZrHzPq92qqwbuNgSGozD8+8V92mWWfNZgW24WRqA9iXVjYqS48G SJwoRt/WNCljX/qC7O2HZ8hN0bBbrCo5z2HC0xxBYw/qRbeYaxdxGYvUFg0ikUrn WCLEnzw8VaApeJJwLWmCTdndvbWFD1dWQyfh6+POKDbJGmyNhQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCyovYFson0oviBIj2fXYHApU4G6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWY0YmExOGYtNWVmYi0z Njk3LWIzOWUtZjRjMWVlZGJmN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYDL MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALEUqObwW8sN4DHeWx2cejoqRmd0HaIACLLNT6QZXv8DjaZ21y9r l+9LwJJE5vLGkv9mOWHSi89MrK82B0sUxN2Q7M3H2XQwlp979GHIoyPgE99dgjRC xYHg8lDSrn7tbecRYiiW/oupJgyeHjstabPOf8JqJjwh/jJT2GyLLt0pmF+9sUeV Zj2w84N3X63IO/0JBhuBhT16xVJpWcoPVEF/VkVjyigTxFFbHMncY5xhet53em5Y isl4t1rwbKYxrb1MnxFySEbwzxpvQ0lKnoI1+0GX8IGVYCQxeDCBD4rVUJ8L31O5 JVdl6xRSL8js/1FiOFvXVwjxPskp808ycjY= -----END CERTIFICATE-----Generated at Mon Apr 7 06:13:27 2025 by rpki-client