$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b590522f-67a3-3412-b696-f8d4abc83d0b.roa File: b590522f-67a3-3412-b696-f8d4abc83d0b.roa (raw, json) Hash identifier: +gTXH1cVQdnDEbVR+VJ8cwvLzP8/m+quTfuihUBf3BY= Subject key identifier: B4:D2:28:8D:58:4C:0A:6A:33:09:6F:01:84:FD:31:65:EE:89:98:73 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0C2DD9D9729E2CAFCB8E0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b590522f-67a3-3412-b696-f8d4abc83d0b.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 2601:807::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:c2:dd:9d:97:29:e2:ca:fc:b8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=dc04446a-3529-461e-9a4a-eca50a93b670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b7:c4:6f:6d:44:5d:a6:d6:16:18:bf:cf:41: b0:14:b7:b4:cf:3c:e1:71:4a:ff:cf:00:7b:0e:38: 1d:27:f9:87:fb:da:48:bc:20:cb:fa:b1:15:75:9f: d9:18:0c:33:9a:07:76:53:89:ca:5a:e9:db:81:38: 70:eb:39:10:7e:15:cc:ad:3f:dc:3e:06:d8:5b:45: 2d:05:9e:3e:3d:50:e8:50:f4:ee:11:1e:68:2a:ae: 24:88:d9:f0:16:fb:b1:ec:85:0b:83:13:c1:66:9a: 76:76:25:95:ee:31:9a:cc:44:5c:b2:f6:e4:b0:2b: 00:cc:4d:8c:3f:dd:24:19:99:3b:f4:01:72:df:36: 65:f1:e2:1c:7c:ca:8e:51:e2:62:d1:b1:6d:ce:da: e2:a1:8c:e4:fb:e0:76:08:4f:5a:26:db:4c:dc:46: 33:88:6b:8a:19:89:cd:25:d5:60:0e:ad:5a:11:63: bc:53:da:36:ad:38:38:ca:87:4f:c8:dc:53:3c:db: 99:ae:f4:33:70:eb:ec:d5:02:c5:e2:73:86:3e:50: a3:77:98:d3:e1:5d:1d:4e:18:fc:b6:19:d8:e1:32: 84:ea:61:15:d6:6f:92:cf:90:80:80:87:13:b6:42: 93:71:84:5d:5b:66:ce:9b:06:e9:43:78:79:cc:f0: 20:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:D2:28:8D:58:4C:0A:6A:33:09:6F:01:84:FD:31:65:EE:89:98:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b590522f-67a3-3412-b696-f8d4abc83d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:807::/34 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8f:13:19:78:42:82:dc:c9:0b:a6:d2:cd:14:ba:66:6c:95: 55:34:4d:17:bc:40:c7:72:80:21:1f:05:04:bc:73:a3:e2:9c: a9:f4:d4:94:6f:3c:03:d1:03:2b:95:cf:8c:23:3d:91:d2:1a: 4a:63:33:95:77:4a:12:8e:d2:ad:02:0d:9f:65:f7:f0:65:d8: af:60:46:32:67:84:fe:09:e8:a1:a9:a2:ed:33:b8:0a:07:27: 05:70:91:53:c3:80:28:21:7e:82:59:d9:7a:1a:27:a3:27:60: e7:9f:2e:38:9e:87:4e:a0:bf:68:de:85:c6:bc:13:77:27:6e: 8a:5d:ee:19:e4:c1:86:d6:98:7f:88:80:9b:69:ee:54:ba:b6: 5a:7a:c2:11:3c:dd:1b:d5:55:92:db:b3:9a:0e:8d:19:af:d8: 0a:f3:4b:8f:ad:53:47:dc:1c:fd:51:22:db:1f:38:f1:38:cd: 12:a9:1f:75:2b:74:34:da:75:d3:fc:3d:e9:47:2c:f4:50:80: 91:09:d4:70:38:e9:5e:c2:3e:d8:35:51:7b:4c:14:02:c8:b2: a0:ce:52:b4:dd:c2:36:56:e1:75:16:d2:cd:c7:76:7d:73:7f: a8:cb:36:70:c1:1b:9d:86:f3:10:40:cf:87:aa:7c:de:ea:98: ac:de:33:f6 -----BEGIN CERTIFICATE----- MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEkssMLdnZcp4sr8uOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk ZGMwNDQ0NmEtMzUyOS00NjFlLTlhNGEtZWNhNTBhOTNiNjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7fEb21EXabWFhi/z0GwFLe0zzzhcUr/zwB7 DjgdJ/mH+9pIvCDL+rEVdZ/ZGAwzmgd2U4nKWunbgThw6zkQfhXMrT/cPgbYW0Ut BZ4+PVDoUPTuER5oKq4kiNnwFvux7IULgxPBZpp2diWV7jGazERcsvbksCsAzE2M P90kGZk79AFy3zZl8eIcfMqOUeJi0bFtztrioYzk++B2CE9aJttM3EYziGuKGYnN JdVgDq1aEWO8U9o2rTg4yodPyNxTPNuZrvQzcOvs1QLF4nOGPlCjd5jT4V0dThj8 thnY4TKE6mEV1m+Sz5CAgIcTtkKTcYRdW2bOmwbpQ3h5zPAgewIDAQABo4IDVzCC A1MwHQYDVR0OBBYEFLTSKI1YTApqMwlvAYT9MWXuiZhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjU5MDUyMmYtNjdhMy0z NDEyLWI2OTYtZjhkNGFiYzgzZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEIBwAw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAAY8TGXhCgtzJC6bSzRS6ZmyVVTRNF7xAx3KAIR8FBLxzo+KcqfTU lG88A9EDK5XPjCM9kdIaSmMzlXdKEo7SrQINn2X38GXYr2BGMmeE/gnooami7TO4 CgcnBXCRU8OAKCF+glnZehonoydg558uOJ6HTqC/aN6FxrwTdyduil3uGeTBhtaY f4iAm2nuVLq2WnrCETzdG9VVktuzmg6NGa/YCvNLj61TR9wc/VEi2x848TjNEqkf dSt0NNp10/w96Ucs9FCAkQnUcDjpXsI+2DVRe0wUAsiyoM5StN3CNlbhdRbSzcd2 fXN/qMs2cMEbnYbzEEDPh6p83uqYrN4z9g== -----END CERTIFICATE-----Generated at Mon Apr 7 06:22:29 2025 by rpki-client