$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5316e92-7743-315a-bd32-e85b00f02737.roa File: c5316e92-7743-315a-bd32-e85b00f02737.roa (raw, json) Hash identifier: xkqjGbksyA+Ew6sb0dFir2XtYXOHMxp1TQ63eSbDFwc= Subject key identifier: 3C:A6:AC:3F:51:EC:98:D1:08:A7:7A:01:77:F9:4C:84:59:8E:2A:D1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DE5C2A44C69DE61097980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5316e92-7743-315a-bd32-e85b00f02737.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:840e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:e5:c2:a4:4c:69:de:61:09:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d3a81c72-ebbf-4015-b5e0-d50e86177298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ef:55:ea:53:bb:84:a4:8f:d6:18:a4:04:60: 01:23:8b:fc:de:d0:ad:0c:22:8c:d0:60:32:a4:b5: 87:02:5b:f4:c7:6c:85:08:67:1f:35:28:9e:75:e6: cc:df:2c:7c:e1:b3:cf:e9:bb:f2:36:92:be:ed:40: 4b:a2:b1:e8:b4:29:0d:5c:07:f2:a6:85:6a:0d:6c: 96:eb:f7:e8:5f:95:db:13:cd:9e:6c:ba:da:74:b8: 2d:ac:06:8d:b1:8a:17:51:96:b2:dd:6e:9d:93:28: 44:a7:51:52:77:f0:d4:c9:0e:d5:95:67:df:83:5a: 7f:0a:5d:18:f7:d7:9c:9d:a3:08:82:5b:6d:00:ce: 3f:c9:22:2a:0b:b9:2f:5f:e1:44:f6:53:e8:60:60: 60:2b:23:0c:c3:37:84:af:de:94:5b:d9:2f:7c:d1: e8:f8:95:80:9c:8b:56:c7:80:60:1a:08:a2:e3:4b: 49:2c:b4:7d:53:2b:07:a3:ed:28:7e:f6:f5:a6:9f: e0:87:56:c0:ba:71:7a:bb:dd:07:70:93:e4:db:2b: a4:1c:ed:cf:f0:18:2b:c2:a2:8f:7b:f5:62:7c:3e: 64:f9:b9:57:5c:63:eb:dc:dc:72:75:c6:a8:9c:1a: 85:0e:11:01:b7:51:15:7a:7e:0b:77:23:04:31:6f: 95:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A6:AC:3F:51:EC:98:D1:08:A7:7A:01:77:F9:4C:84:59:8E:2A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5316e92-7743-315a-bd32-e85b00f02737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:840e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:de:a1:c2:b3:18:cd:c2:b8:d9:38:45:af:23:53:41:dd:ac: a6:82:61:dc:a7:74:b2:36:94:22:6e:94:a9:4d:8d:ad:11:42: 43:6a:e6:9d:ef:2c:74:c7:d6:d2:d6:c3:8b:91:db:c3:e8:7c: c3:3b:2c:ad:a3:6c:aa:33:7d:74:0a:c1:9b:49:47:c7:01:f6: 0d:d3:1d:fd:93:9a:87:eb:1a:31:0f:de:cc:19:1e:f1:68:ef: 53:ea:28:b9:5d:1e:43:8d:5f:91:4c:d5:c7:70:a4:29:8b:c2: de:39:dc:04:ad:82:e9:69:c9:26:f6:67:d4:42:96:67:13:69: ef:8e:16:e6:8a:19:3f:2f:1b:d7:d4:be:e4:fb:92:45:c2:ba: 2b:a2:c6:00:5e:26:74:42:d9:14:e7:03:29:e1:c6:6c:28:8c: c3:d7:69:fc:12:41:ad:af:42:2e:ee:7d:d0:8b:88:28:64:80: 1d:81:8f:c7:3c:f5:e9:01:9a:74:3a:ce:cf:b7:14:d0:bc:bc: f8:74:81:c1:4b:cd:39:9f:c6:23:ca:fb:7d:90:0d:b2:e1:7f: 7c:6d:c8:32:93:28:b5:df:c7:f9:40:90:ca:6e:65:0f:e9:1c: c4:08:bf:d0:23:fe:b9:e8:5d:98:42:50:15:0f:47:dd:5f:8f: 60:c1:ad:25 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebeXCpExp3mEJeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDNhODFjNzItZWJiZi00MDE1LWI1ZTAtZDUwZTg2MTc3Mjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8+9V6lO7hKSP1hikBGABI4v83tCtDCKM0GAy pLWHAlv0x2yFCGcfNSiedebM3yx84bPP6bvyNpK+7UBLorHotCkNXAfypoVqDWyW 6/foX5XbE82ebLradLgtrAaNsYoXUZay3W6dkyhEp1FSd/DUyQ7VlWffg1p/Cl0Y 99ecnaMIglttAM4/ySIqC7kvX+FE9lPoYGBgKyMMwzeEr96UW9kvfNHo+JWAnItW x4BgGgii40tJLLR9UysHo+0ofvb1pp/gh1bAunF6u90HcJPk2yukHO3P8BgrwqKP e/VifD5k+blXXGPr3NxydcaonBqFDhEBt1EVen4LdyMEMW+VNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDymrD9R7JjRCKd6AXf5TIRZjirRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzUzMTZlOTItNzc0My0z MTVhLWJkMzItZTg1YjAwZjAyNzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYQO MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIHeocKzGM3CuNk4Ra8jU0HdrKaCYdyndLI2lCJulKlNja0RQkNq 5p3vLHTH1tLWw4uR28PofMM7LK2jbKozfXQKwZtJR8cB9g3THf2TmofrGjEP3swZ HvFo71PqKLldHkONX5FM1cdwpCmLwt453AStgulpySb2Z9RClmcTae+OFuaKGT8v G9fUvuT7kkXCuiuixgBeJnRC2RTnAynhxmwojMPXafwSQa2vQi7ufdCLiChkgB2B j8c89ekBmnQ6zs+3FNC8vPh0gcFLzTmfxiPK+32QDbLhf3xtyDKTKLXfx/lAkMpu ZQ/pHMQIv9Aj/rnoXZhCUBUPR91fj2DBrSU= -----END CERTIFICATE-----Generated at Sun Apr 6 21:33:26 2025 by rpki-client