$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0178e4f-9d70-3ffc-afc6-2a5e1465d667.roa File: c0178e4f-9d70-3ffc-afc6-2a5e1465d667.roa (raw, json) Hash identifier: RI4bG+GsJCgi7Se5I4zVQQaENcN5vPNmsrDAQ4fZ8VQ= Subject key identifier: B1:86:94:5E:9A:82:DB:F3:AD:97:6F:C8:F1:CF:55:0B:CE:62:35:16 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA618A4F8B28F529FCB4A00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0178e4f-9d70-3ffc-afc6-2a5e1465d667.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 21508 IP address blocks: 2001:559:8201::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a6:18:a4:f8:b2:8f:52:9f:cb:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=1c886989-d32a-400e-a051-07a42904dc0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f5:c0:c8:43:3c:ca:72:d7:7a:b6:72:11:f8: c9:bb:48:df:cc:af:55:94:71:15:9c:65:4c:f5:a8: b0:c3:af:50:88:f0:c2:78:12:58:e1:8c:d8:9e:72: 67:70:30:1a:c1:24:87:a1:a1:60:ad:9b:1b:97:3f: 3a:2b:53:1c:45:34:39:46:ed:d0:34:77:4f:56:e3: 22:e4:0d:5e:b5:b7:8f:6a:2c:38:2c:23:d3:f8:1c: c8:6e:20:35:89:e2:73:83:8e:30:ac:de:b7:f5:6b: ba:89:bf:e2:b0:4a:04:49:54:30:85:da:43:7d:56: ee:b8:4a:3e:db:16:96:fb:19:98:bd:a9:b6:6d:d9: e0:b1:b3:f5:d7:17:c8:b8:d0:30:7e:40:a0:e6:69: a7:d9:a5:15:2c:38:9b:c9:85:82:68:26:d9:c9:ff: c7:9f:b0:83:69:e5:a9:ca:55:ae:51:10:f4:da:56: 14:83:d4:cf:9a:90:bc:45:9f:02:59:d9:6e:fc:93: ec:36:58:2f:7e:1f:c7:c6:22:77:f6:d2:a6:7f:30: a7:c3:c4:35:f7:2f:b1:ad:93:79:23:c8:00:e1:16: b5:03:4d:f7:01:4c:b3:94:34:2f:1b:c7:c2:29:45: d9:e0:10:55:f8:f4:9a:ce:18:7a:24:be:fe:93:20: b4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:86:94:5E:9A:82:DB:F3:AD:97:6F:C8:F1:CF:55:0B:CE:62:35:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c0178e4f-9d70-3ffc-afc6-2a5e1465d667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8201::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:a2:fd:49:c9:5a:be:07:6a:a9:09:89:21:a3:98:d1:6d:76: aa:cf:dc:8a:3b:7a:bf:e9:9d:07:7a:09:0f:6e:65:76:18:98: d6:da:8b:5f:a5:5f:67:c5:73:7f:23:5d:75:1a:e1:9c:96:28: 10:1a:ef:c9:04:63:bf:7a:0b:a2:ae:52:2a:aa:21:89:a2:71: 45:0d:59:58:a1:99:99:b3:63:47:84:76:ae:dc:b4:9f:cd:25: 93:fb:01:6c:16:b7:57:19:49:31:96:7f:50:42:50:23:1d:27: 05:f1:c1:cb:ef:26:ea:71:90:66:d8:bf:41:a5:bb:08:ca:7a: 8a:64:e7:d2:53:0d:2e:1d:17:e3:5c:7c:a9:5c:2a:12:94:9b: 9b:40:14:46:d2:f3:a2:42:b3:4c:74:99:3d:7c:bc:c9:16:9b: 33:93:ad:37:2d:b5:65:f5:ab:54:e6:13:5b:7e:28:b0:3a:35: cf:ec:72:76:91:1d:1b:4b:8f:02:d9:40:67:91:5b:a3:59:3d: 2a:23:e2:bb:28:75:d7:51:a1:7f:8b:f9:b0:d8:f0:d8:e7:49: c1:9c:5c:2a:03:ad:14:5b:3b:16:f9:d9:9d:c0:ab:a1:0e:11: 81:90:d0:37:9a:0c:fe:0a:a1:60:59:a8:d5:b5:36:17:20:5e: 3a:58:47:3b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9phik+LKPUp/LSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MWM4ODY5ODktZDMyYS00MDBlLWEwNTEtMDdhNDI5MDRkYzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/XAyEM8ynLXerZyEfjJu0jfzK9VlHEVnGVM 9aiww69QiPDCeBJY4YzYnnJncDAawSSHoaFgrZsblz86K1McRTQ5Ru3QNHdPVuMi 5A1etbePaiw4LCPT+BzIbiA1ieJzg44wrN639Wu6ib/isEoESVQwhdpDfVbuuEo+ 2xaW+xmYvam2bdngsbP11xfIuNAwfkCg5mmn2aUVLDibyYWCaCbZyf/Hn7CDaeWp ylWuURD02lYUg9TPmpC8RZ8CWdlu/JPsNlgvfh/HxiJ39tKmfzCnw8Q19y+xrZN5 I8gA4Ra1A033AUyzlDQvG8fCKUXZ4BBV+PSazhh6JL7+kyC0lwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLGGlF6agtvzrZdvyPHPVQvOYjUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzAxNzhlNGYtOWQ3MC0z ZmZjLWFmYzYtMmE1ZTE0NjVkNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYIB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABii/UnJWr4HaqkJiSGjmNFtdqrP3Io7er/pnQd6CQ9uZXYYmNba i1+lX2fFc38jXXUa4ZyWKBAa78kEY796C6KuUiqqIYmicUUNWVihmZmzY0eEdq7c tJ/NJZP7AWwWt1cZSTGWf1BCUCMdJwXxwcvvJupxkGbYv0GluwjKeopk59JTDS4d F+NcfKlcKhKUm5tAFEbS86JCs0x0mT18vMkWmzOTrTcttWX1q1TmE1t+KLA6Nc/s cnaRHRtLjwLZQGeRW6NZPSoj4rsodddRoX+L+bDY8NjnScGcXCoDrRRbOxb52Z3A q6EOEYGQ0DeaDP4KoWBZqNW1NhcgXjpYRzs= -----END CERTIFICATE-----Generated at Tue Jun 3 04:50:26 2025 by rpki-client