$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1e80e8c-7a9c-3a64-8423-f9c9b206e9a7.roa File: b1e80e8c-7a9c-3a64-8423-f9c9b206e9a7.roa (raw, json) Hash identifier: b+qlj4igQDUinhQ797278tlsU/ZkgQijV2hFZF6dZuU= Subject key identifier: 3E:08:B1:A6:99:2E:31:FA:2B:C6:97:9C:7A:28:2C:F1:3D:AF:56:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D701B77C1C7EA8E1360E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1e80e8c-7a9c-3a64-8423-f9c9b206e9a7.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33651 IP address blocks: 2001:559:8606::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:70:1b:77:c1:c7:ea:8e:13:60:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f95ef04d-26dc-48cb-aae8-bf24b8a8de8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:63:75:c9:6c:81:b7:19:7a:e3:22:05:7e: e2:c3:96:c7:7f:7d:75:01:bb:bd:20:82:0c:a2:39: 15:bd:8a:44:2a:44:bd:3d:15:ef:90:31:8e:85:76: 71:17:26:1e:91:f3:e9:ba:56:35:a6:6b:28:7e:e5: af:7c:59:52:b0:45:32:73:4a:97:eb:f2:a1:6f:57: 35:63:19:43:69:42:90:48:e1:8a:8e:f5:e3:eb:c2: ee:5f:c8:56:33:4a:41:b8:10:c2:9c:dc:b8:59:d4: a0:11:97:a6:c6:42:01:0f:82:11:da:67:7d:71:19: 65:a7:34:66:83:18:de:3c:dd:9e:64:62:08:74:5c: f5:20:13:b7:95:7f:37:37:b4:4b:58:70:1a:a9:d3: d7:f5:62:85:2a:22:58:24:1a:f3:b1:cd:83:b6:22: 3a:2c:aa:8e:56:d9:9c:6d:a0:f5:1a:eb:76:a6:47: d5:f0:d9:7d:57:d9:49:61:49:31:20:84:d1:85:e2: 0d:eb:d8:7f:1b:9d:34:78:74:0f:ca:b8:5b:24:26: 02:c2:d2:be:ee:72:75:92:06:95:ff:e2:d3:c3:45: 90:ec:28:1a:da:db:ac:38:75:81:c7:72:ea:39:f2: 60:23:49:87:27:bb:b7:2c:c9:28:d9:b6:b4:4e:66: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:08:B1:A6:99:2E:31:FA:2B:C6:97:9C:7A:28:2C:F1:3D:AF:56:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b1e80e8c-7a9c-3a64-8423-f9c9b206e9a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8606::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:91:13:28:70:e5:3d:35:0c:32:e9:f8:de:db:3f:f3:2d:84: 3a:ad:06:54:0c:9b:23:ea:45:e9:53:7a:cc:23:5f:3d:4e:df: f2:4f:4f:99:67:30:18:ed:76:a9:cf:b1:47:33:fe:9b:db:4e: 1c:78:c1:c2:ef:20:e4:05:15:c8:95:40:e1:08:7a:1c:36:76: af:ca:3a:36:fc:4c:79:92:de:73:ed:cb:b9:e2:0d:84:e2:6b: 9e:c9:6e:50:e4:a2:97:84:b8:dd:03:35:5a:af:6c:79:67:ac: d4:cf:f0:40:b0:90:f7:31:7e:e5:1e:96:11:46:77:df:26:d8: 0d:1b:b2:f5:c9:8c:69:2f:b5:0e:cf:e9:d1:60:31:bb:cb:9b: 8a:6d:16:e4:65:ff:0c:ac:eb:51:b5:0a:6f:ee:12:6e:37:12: 9f:83:4e:81:3d:3f:46:12:2a:45:c1:68:fb:75:77:dc:65:30: c7:82:42:7d:d9:ce:98:ca:62:4f:a7:b6:70:1e:0d:03:42:b4: 7c:95:12:87:61:3a:2e:04:68:39:22:06:27:39:64:17:02:69: 24:26:10:72:50:ba:69:4f:2e:24:0a:94:dd:df:ef:28:85:9c: 0d:37:c8:ca:7d:69:0e:0a:78:74:61:a7:d0:c1:48:e1:3c:1a: b6:4e:20:de -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebXAbd8HH6o4TYOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Zjk1ZWYwNGQtMjZkYy00OGNiLWFhZTgtYmYyNGI4YThkZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vJjdclsgbcZeuMiBX7iw5bHf311Abu9IIIM ojkVvYpEKkS9PRXvkDGOhXZxFyYekfPpulY1pmsofuWvfFlSsEUyc0qX6/Khb1c1 YxlDaUKQSOGKjvXj68LuX8hWM0pBuBDCnNy4WdSgEZemxkIBD4IR2md9cRllpzRm gxjePN2eZGIIdFz1IBO3lX83N7RLWHAaqdPX9WKFKiJYJBrzsc2DtiI6LKqOVtmc baD1Gut2pkfV8Nl9V9lJYUkxIITRheIN69h/G500eHQPyrhbJCYCwtK+7nJ1kgaV /+LTw0WQ7Cga2tusOHWBx3LqOfJgI0mHJ7u3LMko2ba0TmawDQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD4IsaaZLjH6K8aXnHooLPE9r1YIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjFlODBlOGMtN2E5Yy0z YTY0LTg0MjMtZjljOWIyMDZlOWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYYG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJqREyhw5T01DDLp+N7bP/MthDqtBlQMmyPqRelTeswjXz1O3/JP T5lnMBjtdqnPsUcz/pvbThx4wcLvIOQFFciVQOEIehw2dq/KOjb8THmS3nPty7ni DYTia57JblDkopeEuN0DNVqvbHlnrNTP8ECwkPcxfuUelhFGd98m2A0bsvXJjGkv tQ7P6dFgMbvLm4ptFuRl/wys61G1Cm/uEm43Ep+DToE9P0YSKkXBaPt1d9xlMMeC Qn3ZzpjKYk+ntnAeDQNCtHyVEodhOi4EaDkiBic5ZBcCaSQmEHJQumlPLiQKlN3f 7yiFnA03yMp9aQ4KeHRhp9DBSOE8GrZOIN4= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:15 2025 by rpki-client