$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65edd95-b058-3210-8d59-10c3de7f4501.roa File: b65edd95-b058-3210-8d59-10c3de7f4501.roa (raw, json) Hash identifier: 0V4kUYM5wGb97K8pFEwp6tITvDuVuGnSqu+Icx2cXn4= Subject key identifier: 21:7E:7F:96:D7:B5:93:3A:05:BC:27:26:83:E2:B8:7F:21:95:9D:62 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DA577E8EB418429147A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65edd95-b058-3210-8d59-10c3de7f4501.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:291::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:a5:77:e8:eb:41:84:29:14:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=b2e7a470-182f-41f6-b402-499357b9a1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:d5:71:bd:17:2e:d1:49:45:a7:30:eb:b5: a6:c9:9c:ef:42:2a:3e:1b:09:03:a6:cd:96:d8:45: f6:ed:99:de:2c:0f:3d:e4:d7:f8:79:e3:65:4e:b5: 33:62:38:e9:23:c7:bc:59:62:6a:83:29:a0:a9:cc: f8:80:18:06:6b:2c:f8:7d:5b:d3:54:4f:bb:c6:e9: 00:56:53:31:a4:14:fa:66:82:f5:c5:69:8c:57:eb: c4:d0:fb:3d:04:d0:ad:6d:f4:01:8f:19:55:b3:5b: be:ec:cc:fe:2a:d0:c0:36:cb:6c:a2:d5:6a:c6:4f: 20:f5:9b:70:76:70:e3:da:f8:55:bc:59:da:3c:20: 00:17:76:76:7a:99:57:19:07:45:9e:18:1d:b5:cf: 29:4c:ff:6a:07:37:9c:d1:76:9a:7f:01:79:cb:be: a7:11:0a:87:ca:4a:b3:90:e7:db:22:fb:e2:18:f8: 87:32:a9:76:8c:12:12:75:45:b9:be:c4:71:fb:d4: 89:82:df:12:1e:0d:e6:e6:f5:33:89:30:d5:fd:75: b3:b7:62:c1:04:3a:57:8d:13:4e:a7:62:78:a1:8a: 3e:df:44:9f:20:d6:57:f9:79:91:20:9f:cc:96:ce: 4b:42:d3:77:40:aa:34:33:e3:9d:3e:0c:8e:66:43: 67:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7E:7F:96:D7:B5:93:3A:05:BC:27:26:83:E2:B8:7F:21:95:9D:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b65edd95-b058-3210-8d59-10c3de7f4501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:291::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:cb:dd:7e:84:75:d1:4f:f4:79:b4:08:06:f1:13:8e:de:3c: 54:5c:2d:c8:13:7c:cb:55:6f:03:27:60:4e:9d:bc:53:55:ff: b0:32:45:8d:4a:f4:18:ef:c3:8d:6b:bf:49:cc:87:2f:cc:44: 83:14:f8:bc:e8:13:87:d6:cf:78:4b:36:22:77:d4:31:99:21: 58:58:e6:65:96:df:4a:df:e5:fb:d1:3c:4c:29:5c:88:c3:dc: 74:21:d2:5c:5c:d8:df:91:d9:22:e7:67:18:a1:ed:5a:8a:f6: 54:b6:89:9c:dc:41:5a:4a:f8:70:b7:96:1d:62:56:99:68:f1: 9b:01:cd:1a:4e:c3:62:e9:f3:d1:9d:a5:b0:0b:d2:1f:de:34: 8e:ef:21:c8:cd:dd:20:9b:7a:16:cd:16:61:95:52:2d:15:a3: 04:b2:b6:56:8e:6a:27:67:31:a0:5f:6c:31:f2:c6:fc:6a:4a: 5b:db:a3:17:47:1c:d0:46:45:78:e2:ee:ef:04:c9:00:05:3a: 1a:5d:2c:83:8f:cb:88:f7:26:a9:49:85:0b:0f:1a:1c:7c:bb: b6:fb:c6:8f:71:5b:72:9c:e0:63:79:92:44:51:f3:54:c1:a5: ea:a5:cf:4c:ee:9b:70:0e:a7:55:7d:77:fa:6c:29:56:00:ce: ff:7a:ac:c3 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebaV36OtBhCkUegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YjJlN2E0NzAtMTgyZi00MWY2LWI0MDItNDk5MzU3YjlhMWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIXVcb0XLtFJRacw67WmyZzvQio+GwkDps2W 2EX27ZneLA895Nf4eeNlTrUzYjjpI8e8WWJqgymgqcz4gBgGayz4fVvTVE+7xukA VlMxpBT6ZoL1xWmMV+vE0Ps9BNCtbfQBjxlVs1u+7Mz+KtDANstsotVqxk8g9Ztw dnDj2vhVvFnaPCAAF3Z2eplXGQdFnhgdtc8pTP9qBzec0XaafwF5y76nEQqHykqz kOfbIvviGPiHMql2jBISdUW5vsRx+9SJgt8SHg3m5vUziTDV/XWzt2LBBDpXjRNO p2J4oYo+30SfINZX+XmRIJ/Mls5LQtN3QKo0M+OdPgyOZkNnrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCF+f5bXtZM6BbwnJoPiuH8hlZ1iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY1ZWRkOTUtYjA1OC0z MjEwLThkNTktMTBjM2RlN2Y0NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQKR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMXL3X6EddFP9Hm0CAbxE47ePFRcLcgTfMtVbwMnYE6dvFNV/7Ay RY1K9Bjvw41rv0nMhy/MRIMU+LzoE4fWz3hLNiJ31DGZIVhY5mWW30rf5fvRPEwp XIjD3HQh0lxc2N+R2SLnZxih7VqK9lS2iZzcQVpK+HC3lh1iVplo8ZsBzRpOw2Lp 89GdpbAL0h/eNI7vIcjN3SCbehbNFmGVUi0VowSytlaOaidnMaBfbDHyxvxqSlvb oxdHHNBGRXji7u8EyQAFOhpdLIOPy4j3JqlJhQsPGhx8u7b7xo9xW3Kc4GN5kkRR 81TBpeqlz0zum3AOp1V9d/psKVYAzv96rMM= -----END CERTIFICATE-----Generated at Sun Apr 6 09:41:10 2025 by rpki-client