$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc3c88b9-53d2-3b94-a2fc-71a0887263de.roa File: bc3c88b9-53d2-3b94-a2fc-71a0887263de.roa (raw, json) Hash identifier: HmOWVgsFibwNTcMvCzj6tj5BqKS5tXH7wK9qM6qeGds= Subject key identifier: CC:58:00:A8:94:90:2A:70:6C:9C:B8:E6:A7:1E:75:CD:DE:79:80:5A Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C39990C2D7E52D71D9C80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc3c88b9-53d2-3b94-a2fc-71a0887263de.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:8737::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:39:99:0c:2d:7e:52:d7:1d:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=60a8aba4-ad31-4559-b5df-3db5675c3c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:67:f6:eb:ee:e4:e9:6b:2b:44:0a:4a:4e:a9: f3:43:3d:e4:fd:d2:f4:80:c1:45:dc:31:3e:66:56: 88:f3:9e:0e:4c:38:8e:d6:7e:de:76:63:00:fc:bc: fd:c7:3f:69:e4:9a:5c:ac:70:8e:d7:04:81:ac:89: 66:69:72:46:fb:d3:6f:29:70:45:b2:46:44:59:ed: 90:12:d4:9f:7c:8f:9b:02:c0:a7:25:7d:cc:af:0c: d1:50:32:61:fd:11:66:fc:9d:3e:dd:75:b6:06:e5: ff:35:db:82:89:de:f4:93:a4:ba:78:43:9e:c0:dc: 86:37:10:c5:99:36:36:ea:47:b5:9a:da:f7:91:89: 5e:2d:d3:1d:4b:8f:00:bd:af:7c:6e:1d:41:e9:26: 3f:f7:84:fb:95:d1:26:6f:3f:57:a5:34:1f:13:0c: 77:1d:26:7e:5a:c4:4b:52:29:5e:e1:69:8a:1f:92: 9f:be:5b:50:3b:5e:f1:b8:14:5f:59:5f:4f:7c:89: 69:14:37:8c:26:51:f5:10:31:e7:00:77:7e:52:05: a6:8a:76:7e:19:02:dd:6f:82:8b:00:4c:6c:2a:8e: 99:29:e4:5f:0d:23:68:c3:b4:74:86:59:ad:a6:35: 33:2c:7a:b4:50:a1:de:86:e8:3c:41:6d:36:7c:c3: c7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:58:00:A8:94:90:2A:70:6C:9C:B8:E6:A7:1E:75:CD:DE:79:80:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc3c88b9-53d2-3b94-a2fc-71a0887263de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8737::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0e:da:3c:d4:5b:84:eb:0c:12:3d:e9:8c:5b:7b:95:7c:1e: a7:b7:02:c8:81:ec:38:a1:f5:34:fd:c0:9b:b5:3a:49:f4:a7: 2b:cb:73:51:b6:5f:09:07:52:3b:d7:b5:0c:ff:98:5c:6a:44: 43:ef:1b:3d:e9:28:7f:d2:94:74:af:4b:be:f8:a4:45:cb:62: f5:69:2b:c7:43:db:e3:44:52:41:b4:e1:fc:70:ae:ea:ab:73: 06:76:40:28:5a:ca:b6:01:07:f7:33:c8:b2:b4:dc:8b:dd:22: 5f:90:0c:8d:1f:25:65:20:30:27:82:c6:e3:7b:32:5d:1b:1e: 15:db:65:ae:a5:4c:5d:7e:e2:bb:28:ff:d4:71:80:54:ca:f3: e6:ec:4d:22:9a:17:1e:21:ec:49:a8:17:78:60:f9:41:14:4e: 04:5d:4b:4f:3d:23:6c:86:26:d1:5b:78:70:b7:fc:b4:15:65: 4f:99:da:4b:b3:79:99:28:6e:0c:f7:0d:0a:53:e2:cc:c5:21: 53:98:08:c3:c4:be:00:e3:2f:0c:a6:a5:16:0e:99:de:f9:b4: a2:25:9f:9c:07:3d:57:28:f9:70:1b:a2:1c:2d:4a:d8:fd:5f: 20:33:8f:e2:2c:3b:7d:db:95:61:cd:34:93:c5:95:ef:f3:ee: 09:2c:38:6d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebDmZDC1+UtcdnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NjBhOGFiYTQtYWQzMS00NTU5LWI1ZGYtM2RiNTY3NWMzYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32f26+7k6WsrRApKTqnzQz3k/dL0gMFF3DE+ ZlaI854OTDiO1n7edmMA/Lz9xz9p5JpcrHCO1wSBrIlmaXJG+9NvKXBFskZEWe2Q EtSffI+bAsCnJX3MrwzRUDJh/RFm/J0+3XW2BuX/NduCid70k6S6eEOewNyGNxDF mTY26ke1mtr3kYleLdMdS48Ava98bh1B6SY/94T7ldEmbz9XpTQfEwx3HSZ+WsRL Uile4WmKH5KfvltQO17xuBRfWV9PfIlpFDeMJlH1EDHnAHd+UgWminZ+GQLdb4KL AExsKo6ZKeRfDSNow7R0hlmtpjUzLHq0UKHehug8QW02fMPHUQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMxYAKiUkCpwbJy45qcedc3eeYBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmMzYzg4YjktNTNkMi0z Yjk0LWEyZmMtNzFhMDg4NzI2M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYc3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIgO2jzUW4TrDBI96Yxbe5V8Hqe3AsiB7Dih9TT9wJu1Okn0pyvL c1G2XwkHUjvXtQz/mFxqREPvGz3pKH/SlHSvS774pEXLYvVpK8dD2+NEUkG04fxw ruqrcwZ2QChayrYBB/czyLK03IvdIl+QDI0fJWUgMCeCxuN7Ml0bHhXbZa6lTF1+ 4rso/9RxgFTK8+bsTSKaFx4h7EmoF3hg+UEUTgRdS089I2yGJtFbeHC3/LQVZU+Z 2kuzeZkobgz3DQpT4szFIVOYCMPEvgDjLwympRYOmd75tKIln5wHPVco+XAbohwt Stj9XyAzj+IsO33blWHNNJPFle/z7gksOG0= -----END CERTIFICATE-----Generated at Sun Apr 6 09:37:33 2025 by rpki-client