$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b57a7b6a-68eb-3d38-bf27-d0b50616134e.roa File: b57a7b6a-68eb-3d38-bf27-d0b50616134e.roa (raw, json) Hash identifier: qKLo/RxJYgFaTbWBJ7GTQ0EJo0KVYEZQ+SAyp9PrG/s= Subject key identifier: 60:3D:34:EE:E6:8A:37:0C:BC:C0:C9:83:9E:FE:A7:06:90:50:ED:20 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D0E9DB6A2E0B25A370300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b57a7b6a-68eb-3d38-bf27-d0b50616134e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 2001:558:1f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:0e:9d:b6:a2:e0:b2:5a:37:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c8623369-23d7-4765-a310-4d5435631629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:a9:d4:7e:4b:f7:6e:bd:25:97:e9:9a:68: 1d:a9:03:63:3a:e8:75:2d:ff:32:29:1f:b8:ad:a4: 26:07:ae:ce:ee:d3:79:8b:4a:d2:82:fb:48:73:7e: 9a:d7:c7:38:c5:ed:41:89:33:7b:45:a8:8f:27:4a: da:cd:f2:fa:e9:21:1d:8f:9e:eb:9c:38:25:4e:af: 47:c6:a9:e9:58:bc:fe:9c:bc:8f:65:6d:76:66:2e: ad:a6:f8:78:38:2c:be:8e:f9:4d:fc:dc:e9:c7:cb: 2a:67:bc:a9:5b:ad:7a:8f:73:aa:48:b7:11:65:a9: bd:17:fd:eb:14:94:6c:0d:6e:10:93:47:2d:a1:94: ff:d1:f3:b8:3e:c1:ed:bf:a8:09:e9:12:58:30:78: 4e:18:bf:d3:80:d2:95:d4:8b:95:8a:d7:d0:01:36: ca:f6:55:79:42:c7:2d:7a:40:e7:38:e3:bd:3a:c6: 93:83:84:f8:24:84:0f:75:f4:95:79:aa:07:fb:a7: ed:b7:c9:97:eb:a2:c4:41:b9:1d:7e:0d:2f:57:81: 86:61:46:c4:30:7c:2c:77:df:3e:20:4a:8c:fa:31: 5b:a3:9c:47:f7:c2:85:b6:12:1d:a9:65:79:77:67: 9d:9b:1c:76:63:b6:fe:04:c9:12:34:29:8c:a4:5d: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:3D:34:EE:E6:8A:37:0C:BC:C0:C9:83:9E:FE:A7:06:90:50:ED:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b57a7b6a-68eb-3d38-bf27-d0b50616134e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:558:1f0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:01:a8:7b:55:d9:43:4f:2f:e1:33:d0:04:6d:7f:85:a6:3f: 55:8b:8b:b6:a4:50:f8:ec:e2:2e:94:f1:92:06:d9:e0:9e:59: fa:1b:5f:58:b8:45:53:67:23:30:54:e6:39:67:66:89:62:16: 86:55:da:28:9d:6e:47:55:4b:08:d5:6d:24:fd:80:8b:3c:dd: 80:a1:ec:eb:4f:80:8f:9d:f1:77:57:26:3b:0a:e1:c2:12:09: 58:ec:8e:6b:50:fc:72:6f:25:8a:70:cd:9c:9b:88:ad:56:80: b9:0b:ab:2d:9c:4f:a4:09:4b:73:f2:4c:9c:25:8c:f8:46:2e: 3b:a4:89:6b:b1:98:a9:b3:56:52:d7:1c:3c:86:b9:db:08:85: c9:6d:60:a9:ac:c4:28:23:fa:92:ee:66:ff:53:22:e3:03:4c: 4f:34:d0:fe:d9:90:76:97:cf:3c:82:8f:40:e5:48:b3:ae:93: c5:b7:73:56:3e:19:e9:d6:52:81:f9:0c:82:6f:90:db:6b:ee: 95:c3:33:29:32:b7:33:c2:69:fc:19:33:3a:5c:8e:c5:08:c7: 16:da:eb:25:02:e8:99:1a:31:b9:73:9a:3f:94:b1:05:fa:38: 37:18:62:18:bc:e0:d0:ce:ed:ba:30:96:0d:73:22:7d:f0:6d: 6f:9c:2c:2d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebQ6dtqLgslo3AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Yzg2MjMzNjktMjNkNy00NzY1LWEzMTAtNGQ1NDM1NjMxNjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOSp1H5L9269JZfpmmgdqQNjOuh1Lf8yKR+4 raQmB67O7tN5i0rSgvtIc36a18c4xe1BiTN7RaiPJ0razfL66SEdj57rnDglTq9H xqnpWLz+nLyPZW12Zi6tpvh4OCy+jvlN/Nzpx8sqZ7ypW616j3OqSLcRZam9F/3r FJRsDW4Qk0ctoZT/0fO4PsHtv6gJ6RJYMHhOGL/TgNKV1IuVitfQATbK9lV5Qsct ekDnOOO9OsaTg4T4JIQPdfSVeaoH+6ftt8mX66LEQbkdfg0vV4GGYUbEMHwsd98+ IEqM+jFbo5xH98KFthIdqWV5d2edmxx2Y7b+BMkSNCmMpF182wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGA9NO7mijcMvMDJg57+pwaQUO0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjU3YTdiNmEtNjhlYi0z ZDM4LWJmMjctZDBiNTA2MTYxMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAEFWAHw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHkBqHtV2UNPL+Ez0ARtf4WmP1WLi7akUPjs4i6U8ZIG2eCeWfob X1i4RVNnIzBU5jlnZoliFoZV2iidbkdVSwjVbST9gIs83YCh7OtPgI+d8XdXJjsK 4cISCVjsjmtQ/HJvJYpwzZybiK1WgLkLqy2cT6QJS3PyTJwljPhGLjukiWuxmKmz VlLXHDyGudsIhcltYKmsxCgj+pLuZv9TIuMDTE800P7ZkHaXzzyCj0DlSLOuk8W3 c1Y+GenWUoH5DIJvkNtr7pXDMykytzPCafwZMzpcjsUIxxba6yUC6JkaMblzmj+U sQX6ODcYYhi84NDO7bowlg1zIn3wbW+cLC0= -----END CERTIFICATE-----Generated at Mon Apr 7 05:56:47 2025 by rpki-client