$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b50b90a7-6d8a-3bb8-b54b-03491b524274.roa File: b50b90a7-6d8a-3bb8-b54b-03491b524274.roa (raw, json) Hash identifier: sEKCDPup3mu0XkZVJa6bccS0T0Xsq2Mwn2Hh25Nj4gA= Subject key identifier: 39:4A:9C:36:9E:18:00:7D:91:A8:B0:7A:D6:23:95:73:0A:48:1E:FC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DB248AE909778050D5180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b50b90a7-6d8a-3bb8-b54b-03491b524274.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:c1c5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:b2:48:ae:90:97:78:05:0d:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=843c0c9d-bf22-4b22-8c4f-4edc33dd3928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:6d:5e:33:69:14:db:b6:7f:79:81:99:21: 56:a6:e1:cf:a3:36:6a:b1:97:35:7b:5d:25:b9:fe: d6:fc:2e:eb:1f:c6:b9:b3:ba:87:72:a0:4c:cb:06: 6c:94:ce:f7:02:eb:6a:e3:0d:6f:52:61:d7:84:04: af:fb:ce:52:76:34:95:53:f8:d2:75:52:ff:3a:b2: c7:6e:be:ef:bf:25:76:4e:06:07:a8:88:e1:40:db: 98:67:a3:6e:04:f8:61:8c:ab:39:42:97:5b:f1:a0: ff:03:c9:d5:96:ea:44:c9:cf:bd:85:58:dc:4d:84: 0f:9f:d9:1c:4a:e8:c3:06:e1:03:d8:85:01:eb:56: 26:6a:b6:a9:a2:ad:9b:38:16:19:aa:69:58:45:36: 36:05:92:ed:9e:5f:93:e5:08:3e:b2:c8:70:b1:a0: 2e:29:2a:98:58:37:05:88:32:11:ed:4a:fc:8b:35: fa:27:b0:e0:80:81:b5:c6:85:02:3c:63:78:66:57: b1:64:34:26:a3:51:0b:c6:63:3f:a6:0a:0d:f2:1c: be:51:c5:a7:00:80:46:bd:8d:09:5a:58:a2:ae:15: 22:6f:e4:37:c2:4d:97:6b:ea:10:83:a8:9f:b4:96: ab:2c:fe:07:25:8a:11:93:ba:5c:86:71:64:58:b3: 3a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:4A:9C:36:9E:18:00:7D:91:A8:B0:7A:D6:23:95:73:0A:48:1E:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b50b90a7-6d8a-3bb8-b54b-03491b524274.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c1c5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1f:4f:f8:75:3b:b9:23:f4:ab:77:0a:b2:a2:23:6a:72:2a: 1e:b9:48:67:61:10:fe:8c:cb:43:f8:56:93:0c:49:8c:eb:49: 48:84:c4:41:04:da:52:80:96:b3:ac:d9:41:d1:1c:1c:d1:dd: 6e:de:92:aa:e8:95:a2:bf:c4:9d:7a:47:85:2c:ff:af:a6:fa: 5d:65:59:28:32:31:70:12:9e:bf:49:77:88:9b:75:ae:58:d9: 48:e4:22:83:7b:05:48:b6:0c:7e:eb:cf:65:d1:74:7d:3a:27: d1:21:04:56:04:84:ea:3d:11:91:be:78:c6:c3:06:4e:6e:83: 87:b7:ec:6a:e8:0d:0c:9a:d2:de:9e:f0:9b:72:a8:eb:73:46: 79:96:9e:7a:a8:65:77:f1:66:82:52:0e:ee:d5:87:89:fc:66: ab:07:1e:36:c4:c8:ec:57:30:e6:91:f6:d8:5f:f6:0f:be:99: 09:87:8a:12:e5:e0:3a:0b:98:3f:82:00:a1:c2:43:eb:84:cf: 30:01:5c:10:eb:1c:e1:80:28:09:54:53:41:4c:99:18:82:1f: 5f:87:7c:8e:66:86:a4:22:db:36:10:e9:5c:bf:6c:ac:69:5b: 1c:c9:00:c7:64:62:fe:9f:13:97:7d:fd:a9:ce:f8:2b:db:ea: 53:47:b0:85 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebbJIrpCXeAUNUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ODQzYzBjOWQtYmYyMi00YjIyLThjNGYtNGVkYzMzZGQzOTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm5tXjNpFNu2f3mBmSFWpuHPozZqsZc1e10l uf7W/C7rH8a5s7qHcqBMywZslM73Autq4w1vUmHXhASv+85SdjSVU/jSdVL/OrLH br7vvyV2TgYHqIjhQNuYZ6NuBPhhjKs5Qpdb8aD/A8nVlupEyc+9hVjcTYQPn9kc SujDBuED2IUB61Ymarapoq2bOBYZqmlYRTY2BZLtnl+T5Qg+sshwsaAuKSqYWDcF iDIR7Ur8izX6J7DggIG1xoUCPGN4ZlexZDQmo1ELxmM/pgoN8hy+UcWnAIBGvY0J WliirhUib+Q3wk2Xa+oQg6iftJarLP4HJYoRk7pchnFkWLM6+wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDlKnDaeGAB9kaiwetYjlXMKSB78MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjUwYjkwYTctNmQ4YS0z YmI4LWI1NGItMDM0OTFiNTI0Mjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcHF MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADkfT/h1O7kj9Kt3CrKiI2pyKh65SGdhEP6My0P4VpMMSYzrSUiE xEEE2lKAlrOs2UHRHBzR3W7ekqrolaK/xJ16R4Us/6+m+l1lWSgyMXASnr9Jd4ib da5Y2UjkIoN7BUi2DH7rz2XRdH06J9EhBFYEhOo9EZG+eMbDBk5ug4e37GroDQya 0t6e8JtyqOtzRnmWnnqoZXfxZoJSDu7Vh4n8ZqsHHjbEyOxXMOaR9thf9g++mQmH ihLl4DoLmD+CAKHCQ+uEzzABXBDrHOGAKAlUU0FMmRiCH1+HfI5mhqQi2zYQ6Vy/ bKxpWxzJAMdkYv6fE5d9/anO+Cvb6lNHsIU= -----END CERTIFICATE-----Generated at Sun Apr 6 09:42:46 2025 by rpki-client