$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bac7d94e-e92f-3f2c-88a6-d0ed92cb1e01.roa File: bac7d94e-e92f-3f2c-88a6-d0ed92cb1e01.roa (raw, json) Hash identifier: dDQg4Xmov/6/63XOeuJJDPEzuCYZO2kasG7xZNiwIj4= Subject key identifier: 9F:6D:E0:24:FD:E6:1F:21:19:03:81:F9:08:95:FC:FC:F8:A4:35:6E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E2CEAD12A28EF4ABA1460 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bac7d94e-e92f-3f2c-88a6-d0ed92cb1e01.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 2001:559:c210::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:2c:ea:d1:2a:28:ef:4a:ba:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=767d528c-5013-4240-a47f-58a18f7d0a9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:43:25:13:77:6b:e7:8f:b1:3c:f9:fa:65:b3: 9b:2b:7a:b0:83:d9:56:88:8b:04:ef:dd:13:33:8a: 35:2f:0a:84:52:c5:1a:f5:66:67:90:d7:0f:87:75: 89:dd:0e:8a:91:bb:32:19:fa:9f:0e:b3:e3:89:9f: 56:af:4e:8e:46:ca:24:e6:65:9a:36:a4:a6:f2:a3: 29:cb:35:a0:45:59:8b:d7:27:54:e3:39:9c:6a:de: 5c:67:60:39:02:bb:35:88:5f:ac:82:42:0c:4a:ea: b1:0b:a3:19:94:3c:f2:d2:a0:b2:91:47:36:69:85: 23:fe:78:eb:e9:2b:f9:70:7f:0c:19:15:3c:4d:58: 93:0b:07:1c:11:d4:01:92:50:92:7d:f3:c3:ec:b0: f2:22:00:3d:93:7c:43:b8:d9:ad:a4:a8:1a:0c:f8: fc:32:1b:c6:6c:02:7b:6e:6b:e5:6e:33:ad:b5:04: 72:3c:f6:87:49:71:48:5f:31:29:1a:94:ab:09:5e: 31:c8:f0:a8:c0:50:52:ab:2f:84:8c:d0:53:86:e4: c8:5b:6a:70:a8:1f:79:99:ee:d5:17:b5:13:04:21: cb:83:3c:ad:5a:b9:b1:4c:5e:0f:f8:db:53:9c:f5: 16:77:c8:5d:c9:19:87:d7:21:df:69:a4:95:b0:c3: d5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6D:E0:24:FD:E6:1F:21:19:03:81:F9:08:95:FC:FC:F8:A4:35:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bac7d94e-e92f-3f2c-88a6-d0ed92cb1e01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c210::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bb:dc:2f:63:c4:56:51:09:5a:00:9d:9a:a6:63:e8:0a:48: db:4d:2e:3d:01:0c:85:bb:a5:9a:f9:73:0e:25:57:1e:83:dd: 49:e8:f7:6b:80:01:e5:7c:e7:32:6d:fb:a1:e9:ee:6d:ea:30: 9e:55:d3:18:4b:81:84:63:bf:73:2b:d0:32:13:e9:c8:d9:70: 30:2f:0e:ad:2c:ab:61:b3:44:10:6a:c5:4b:79:26:62:3b:db: 91:0e:55:bd:94:05:22:3c:95:a6:33:7d:48:d5:d5:14:4f:2f: 9f:e7:3b:2a:a2:8c:fd:ef:e1:7c:9e:b3:da:c8:68:b5:a8:d2: bb:86:52:3d:59:c9:db:12:bd:80:06:f1:c8:3a:d9:39:db:d8: bd:b0:30:42:65:45:f7:ea:bb:ce:28:ca:91:73:9a:02:fd:db: 90:ad:2b:77:dd:d0:4e:0f:94:e5:fd:bb:69:01:6a:60:aa:9f: 14:25:3d:fe:af:d3:44:4d:05:72:97:10:ee:35:88:d6:68:a3: f7:05:fd:5c:9d:87:96:9c:d1:5c:94:49:25:8e:74:29:0a:48: d5:e0:d6:dc:33:d3:7f:a6:73:39:1a:ac:5b:51:8e:54:2e:cf: d2:8e:38:db:a5:20:ef:0f:55:87:c5:69:da:cd:13:1d:30:3b: 1e:8c:66:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebizq0Soo70q6FGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NzY3ZDUyOGMtNTAxMy00MjQwLWE0N2YtNThhMThmN2QwYTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkMlE3dr54+xPPn6ZbObK3qwg9lWiIsE790T M4o1LwqEUsUa9WZnkNcPh3WJ3Q6KkbsyGfqfDrPjiZ9Wr06ORsok5mWaNqSm8qMp yzWgRVmL1ydU4zmcat5cZ2A5Ars1iF+sgkIMSuqxC6MZlDzy0qCykUc2aYUj/njr 6Sv5cH8MGRU8TViTCwccEdQBklCSffPD7LDyIgA9k3xDuNmtpKgaDPj8MhvGbAJ7 bmvlbjOttQRyPPaHSXFIXzEpGpSrCV4xyPCowFBSqy+EjNBThuTIW2pwqB95me7V F7UTBCHLgzytWrmxTF4P+NtTnPUWd8hdyRmH1yHfaaSVsMPVEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJ9t4CT95h8hGQOB+QiV/Pz4pDVuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFjN2Q5NGUtZTkyZi0z ZjJjLTg4YTYtZDBlZDkyY2IxZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcIQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA273C9jxFZRCVoAnZqmY+gKSNtNLj0BDIW7pZr5cw4lVx6D3Uno 92uAAeV85zJt+6Hp7m3qMJ5V0xhLgYRjv3Mr0DIT6cjZcDAvDq0sq2GzRBBqxUt5 JmI725EOVb2UBSI8laYzfUjV1RRPL5/nOyqijP3v4Xyes9rIaLWo0ruGUj1ZydsS vYAG8cg62Tnb2L2wMEJlRffqu84oypFzmgL925CtK3fd0E4PlOX9u2kBamCqnxQl Pf6v00RNBXKXEO41iNZoo/cF/Vydh5ac0VyUSSWOdCkKSNXg1twz03+mczkarFtR jlQuz9KOONulIO8PVYfFadrNEx0wOx6MZs0= -----END CERTIFICATE-----Generated at Sun Apr 6 22:34:05 2025 by rpki-client