$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0c32751-7f7b-3a58-9daa-24b74e8a8129.roa File: b0c32751-7f7b-3a58-9daa-24b74e8a8129.roa (raw, json) Hash identifier: meH1gSqDGm9m1/g1FpVqfrefrsAK02fJyQV3QAmokcc= Subject key identifier: DB:48:24:4F:F3:D5:84:D4:A9:93:B0:B5:B1:3B:95:23:AC:27:5C:B0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D6F8809C340F300945D80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0c32751-7f7b-3a58-9daa-24b74e8a8129.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:8562::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:6f:88:09:c3:40:f3:00:94:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=5338a361-5df8-4201-bdd6-6cdc5bce0248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f6:e7:a2:2e:16:99:d6:e5:09:a1:f7:67:c6: b5:33:28:e2:20:93:1f:c8:b9:6c:0d:09:2d:9c:a9: c4:5f:be:da:d3:60:5b:15:29:e2:fe:66:bf:2f:81: 02:d1:15:78:4e:3b:93:1c:60:fa:4b:79:42:eb:d2: 9c:5b:27:2a:fa:b6:56:e5:d1:55:f6:e3:18:97:f0: b1:87:26:a4:67:37:5e:ac:33:e3:95:ae:04:8f:d6: 00:20:b8:fc:a4:5d:dd:3c:2a:3b:e9:3a:60:e8:f0: bd:85:3a:2f:0c:68:39:3f:55:48:4f:a3:04:7c:6d: 25:f0:0d:81:36:13:5a:d3:53:39:cc:28:f5:45:fb: 1c:54:57:29:8b:34:f7:0a:5e:3f:82:fe:3d:d5:ad: 6c:89:d6:5c:7f:6f:d4:69:d7:6a:f0:e9:1e:dc:49: 30:29:2b:c1:54:01:58:63:d8:72:6c:68:c5:ca:f4: 23:03:28:b5:60:ef:c7:36:31:d8:f0:0d:ef:34:f3: a5:db:01:de:c2:a5:1d:68:24:c5:9c:53:be:fe:df: e5:0d:8e:79:7e:49:4e:4c:07:31:c0:d2:16:27:5b: 3e:87:14:c1:44:aa:24:07:41:ea:4c:ae:9e:3a:fa: 60:97:c3:35:09:96:06:57:6b:f0:bb:ae:4f:2c:6c: 17:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:48:24:4F:F3:D5:84:D4:A9:93:B0:B5:B1:3B:95:23:AC:27:5C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b0c32751-7f7b-3a58-9daa-24b74e8a8129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8562::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:07:b4:ab:4c:9f:e8:29:1c:23:f3:a1:7b:2c:40:c6:ce:8f: 21:ce:f9:c7:f3:19:2b:81:91:ac:6d:3b:f4:fe:bc:ef:e4:02: d6:25:e3:25:54:0a:ae:12:2c:fa:37:8c:3b:28:52:26:9f:bb: 91:85:ef:6c:7d:7a:70:60:55:13:c2:2a:fb:41:17:61:cc:2f: a5:ee:30:fe:32:32:20:82:7e:3d:02:58:4f:cd:e7:b7:62:67: c2:cf:39:bf:14:c0:c4:3a:d3:2d:a8:b8:0f:28:98:10:56:d4: 7a:8c:62:af:24:19:80:a7:3e:57:61:b4:d0:dc:28:71:c9:03: 44:dc:fa:46:e2:ac:db:5b:a2:cb:bc:be:de:0b:5c:f0:67:03: e9:8a:8b:98:9b:84:e3:df:03:53:79:2a:75:5a:ef:66:a9:ad: ea:c0:f0:17:58:a5:c3:9c:a2:cf:20:ab:5a:7d:70:6e:43:13: b1:76:06:9b:93:95:47:e2:0e:34:f5:54:00:9c:ba:0b:52:bd: 3f:74:23:8a:3e:6a:56:e8:c5:dd:4d:f2:ce:47:98:64:83:5c: b8:fb:32:fa:2e:e2:41:65:18:cb:a3:aa:5b:6f:84:71:10:b6: 59:17:2d:af:67:b0:f4:24:e8:f0:9f:c9:8d:24:b9:22:86:0b: d4:00:bf:f4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebW+ICcNA8wCUXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NTMzOGEzNjEtNWRmOC00MjAxLWJkZDYtNmNkYzViY2UwMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/bnoi4WmdblCaH3Z8a1MyjiIJMfyLlsDQkt nKnEX77a02BbFSni/ma/L4EC0RV4TjuTHGD6S3lC69KcWycq+rZW5dFV9uMYl/Cx hyakZzderDPjla4Ej9YAILj8pF3dPCo76Tpg6PC9hTovDGg5P1VIT6MEfG0l8A2B NhNa01M5zCj1RfscVFcpizT3Cl4/gv491a1sidZcf2/Uaddq8Oke3EkwKSvBVAFY Y9hybGjFyvQjAyi1YO/HNjHY8A3vNPOl2wHewqUdaCTFnFO+/t/lDY55fklOTAcx wNIWJ1s+hxTBRKokB0HqTK6eOvpgl8M1CZYGV2vwu65PLGwXZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNtIJE/z1YTUqZOwtbE7lSOsJ1ywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjBjMzI3NTEtN2Y3Yi0z YTU4LTlkYWEtMjRiNzRlOGE4MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYVi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHQHtKtMn+gpHCPzoXssQMbOjyHO+cfzGSuBkaxtO/T+vO/kAtYl 4yVUCq4SLPo3jDsoUiafu5GF72x9enBgVRPCKvtBF2HML6XuMP4yMiCCfj0CWE/N 57diZ8LPOb8UwMQ60y2ouA8omBBW1HqMYq8kGYCnPldhtNDcKHHJA0Tc+kbirNtb osu8vt4LXPBnA+mKi5ibhOPfA1N5KnVa72aprerA8BdYpcOcos8gq1p9cG5DE7F2 BpuTlUfiDjT1VACcugtSvT90I4o+alboxd1N8s5HmGSDXLj7Mvou4kFlGMujqltv hHEQtlkXLa9nsPQk6PCfyY0kuSKGC9QAv/Q= -----END CERTIFICATE-----Generated at Mon Apr 7 06:12:16 2025 by rpki-client