$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1dba198-33d4-3629-9b10-eb4c582434f5.roa File: c1dba198-33d4-3629-9b10-eb4c582434f5.roa (raw, json) Hash identifier: xEsznOwk4LHlVMQ9fMqVYTB1t88W2ng+DT1Tazc6jqw= Subject key identifier: 2D:77:09:FD:8A:AB:0D:F9:97:D9:F0:72:93:5A:09:3B:98:EF:D3:9E Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DE9A224862B6C8C4DB900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1dba198-33d4-3629-9b10-eb4c582434f5.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:c247::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:e9:a2:24:86:2b:6c:8c:4d:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f3e191ac-f0a0-46d3-8847-0322177f0d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6f:f6:37:04:c3:3f:6e:ce:28:16:cf:ff:92: e2:d2:b9:d0:c8:8b:4e:d7:31:2b:49:13:31:cb:34: cb:cd:bf:4a:95:7d:39:76:51:61:a0:f4:cb:69:78: 9a:f8:dc:47:da:6e:f5:fb:77:fa:4b:7d:e4:5d:6c: b6:cd:ff:d5:37:e6:78:82:49:67:1d:40:50:ed:57: 5b:50:62:68:7b:42:32:b1:74:4b:43:18:ec:ef:8c: 3a:96:e0:1e:dd:1b:e1:33:f4:f4:fa:2e:60:7a:9e: a6:42:16:f2:e8:ea:48:3f:5b:8d:6c:cd:27:9c:66: 77:b4:e6:a9:19:a9:13:4b:74:8d:95:04:f6:16:f9: c9:09:de:4c:49:1b:92:e8:9b:be:34:89:f8:ed:09: c2:b1:da:44:b4:49:07:91:56:c1:0f:d2:48:45:2f: ce:7b:12:6f:ff:48:9b:63:86:40:b0:8e:53:2d:3e: 35:3e:d4:63:40:23:da:2f:d8:f3:2d:0a:4a:a9:c0: 12:fc:70:84:17:cc:77:43:e7:6b:e5:8a:5b:44:40: 4b:7e:b0:18:21:64:5f:a2:9d:bc:46:21:5c:10:76: 7c:79:fc:cf:9e:d2:e5:9f:19:70:bd:0a:bd:23:8b: 20:72:90:7e:76:ba:99:d7:06:5d:05:ae:5b:3b:10: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:77:09:FD:8A:AB:0D:F9:97:D9:F0:72:93:5A:09:3B:98:EF:D3:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1dba198-33d4-3629-9b10-eb4c582434f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c247::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1d:89:ca:d2:e2:2a:73:4c:b4:02:95:c4:77:e6:33:6c:02: 08:f6:56:dd:fa:a1:97:ec:f1:22:9c:e4:9b:22:30:ed:ed:25: c0:20:e8:6f:04:65:0d:e5:98:7e:dc:79:d9:c8:59:7d:27:46: aa:17:d2:6c:a5:d7:2d:20:84:61:e7:66:57:28:29:dd:76:75: f7:8d:86:ac:ce:0a:57:ff:6a:28:a5:4f:58:0b:db:15:7b:15: 0f:1c:03:87:9f:93:e5:67:3a:21:6f:66:d4:9d:35:79:de:2c: 3c:7b:14:58:e1:d2:8b:c6:68:53:07:73:cd:a5:56:34:de:32: 73:7c:86:f7:65:78:5f:57:1b:37:4f:69:3a:36:dc:2b:22:c0: 34:94:aa:ab:8c:30:6a:81:71:b8:a3:02:fe:27:26:a2:ab:96: dd:7e:bf:c0:c1:87:4c:03:45:99:38:f5:68:20:31:64:6f:68: d5:40:e9:4c:48:c1:b3:6a:d9:a3:bc:f5:5e:fe:59:63:df:f6: ff:0e:2c:32:f9:48:d6:a8:6f:71:84:3f:aa:0a:8c:f4:78:c6: d0:4c:89:b2:9f:5c:93:78:4b:4b:56:67:52:96:1a:0f:59:c5: d4:a3:dc:e7:1a:d7:c3:95:26:29:28:35:75:03:b7:e3:ed:91: dc:5c:d7:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebemiJIYrbIxNuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjNlMTkxYWMtZjBhMC00NmQzLTg4NDctMDMyMjE3N2YwZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgG/2NwTDP27OKBbP/5Li0rnQyItO1zErSRMx yzTLzb9KlX05dlFhoPTLaXia+NxH2m71+3f6S33kXWy2zf/VN+Z4gklnHUBQ7Vdb UGJoe0IysXRLQxjs74w6luAe3RvhM/T0+i5gep6mQhby6OpIP1uNbM0nnGZ3tOap GakTS3SNlQT2FvnJCd5MSRuS6Ju+NIn47QnCsdpEtEkHkVbBD9JIRS/OexJv/0ib Y4ZAsI5TLT41PtRjQCPaL9jzLQpKqcAS/HCEF8x3Q+dr5YpbREBLfrAYIWRfop28 RiFcEHZ8efzPntLlnxlwvQq9I4sgcpB+drqZ1wZdBa5bOxCRTwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC13Cf2Kqw35l9nwcpNaCTuY79OeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzFkYmExOTgtMzNkNC0z NjI5LTliMTAtZWI0YzU4MjQzNGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcJH MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAkdicrS4ipzTLQClcR35jNsAgj2Vt36oZfs8SKc5JsiMO3tJcAg 6G8EZQ3lmH7cednIWX0nRqoX0myl1y0ghGHnZlcoKd12dfeNhqzOClf/aiilT1gL 2xV7FQ8cA4efk+VnOiFvZtSdNXneLDx7FFjh0ovGaFMHc82lVjTeMnN8hvdleF9X GzdPaTo23CsiwDSUqquMMGqBcbijAv4nJqKrlt1+v8DBh0wDRZk49WggMWRvaNVA 6UxIwbNq2aO89V7+WWPf9v8OLDL5SNaob3GEP6oKjPR4xtBMibKfXJN4S0tWZ1KW Gg9ZxdSj3Oca18OVJikoNXUDt+Ptkdxc18c= -----END CERTIFICATE-----Generated at Sun Apr 6 23:03:07 2025 by rpki-client