$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5b7f5c2-ba3c-395a-bd70-5f3e58973aa3.roa File: c5b7f5c2-ba3c-395a-bd70-5f3e58973aa3.roa (raw, json) Hash identifier: MKHhE8+YF2bsVc+PTmGvUPCdusii5BY/4eDcPzydg/Y= Subject key identifier: EB:81:75:9D:9C:48:FA:82:22:31:52:58:36:13:07:F6:B7:C4:FE:CB Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C87DC040B656EE0550780 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5b7f5c2-ba3c-395a-bd70-5f3e58973aa3.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:8158::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:87:dc:04:0b:65:6e:e0:55:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=1729c54c-4ace-470c-9de7-d91ffc6b64ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ac:af:5d:29:2f:15:40:30:49:d0:85:c7:a7: 32:ad:13:4e:1e:2a:61:bd:0f:7c:de:27:5c:32:42: eb:ba:d9:52:b7:06:1d:95:11:ae:6a:d1:69:89:0b: 83:37:d3:ca:91:6a:fb:f0:08:a8:ff:e3:fb:f5:f1: 6c:40:2b:ad:38:1a:53:79:fd:8f:0a:b2:0a:75:60: bf:bf:e8:6f:ff:3c:6d:8a:f5:8e:8b:89:5e:8e:da: 4f:2b:96:13:6d:bb:2f:f6:15:27:9b:8c:e8:42:7f: fd:98:60:ee:d8:22:26:a0:88:01:89:e7:c8:c8:7c: fb:d9:6d:b0:2e:e7:28:fb:f7:c2:63:51:32:f1:59: 98:9b:7b:d7:d8:da:06:2a:88:d4:56:97:45:91:0c: 24:2b:98:fd:a5:0e:f5:5b:a0:b0:2e:97:b2:2d:e4: 51:9c:0c:b7:94:10:52:d5:b1:4c:c4:89:aa:79:e4: f1:92:d1:1c:64:3d:1b:e5:d1:43:16:af:90:bf:5e: 36:17:69:d7:25:a3:8a:86:71:a2:8f:bc:9f:c7:53: d7:3d:5b:da:55:bc:85:1e:02:5b:7d:96:14:93:df: 7f:2d:6b:c1:96:2c:89:24:6d:49:ad:13:6d:4f:36: e9:81:fa:d8:eb:de:60:ed:c1:ec:0d:38:65:4f:23: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:81:75:9D:9C:48:FA:82:22:31:52:58:36:13:07:F6:B7:C4:FE:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c5b7f5c2-ba3c-395a-bd70-5f3e58973aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8158::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:cc:dc:c2:ba:4a:3f:61:9a:18:1d:dd:b2:b0:aa:c7:67:24: 7e:53:de:97:9d:ab:f6:a1:b6:b1:ef:59:ea:b5:9a:41:ba:b4: a6:49:7d:29:8d:09:9c:56:f9:f6:9c:1a:51:e8:10:18:ee:e7: 8c:97:72:b2:f8:0b:99:f2:8f:c3:3a:01:7a:2d:38:58:ff:ee: 07:d0:f4:68:07:38:45:1c:06:2d:c6:a1:18:e4:86:6d:80:1f: 6b:52:82:dc:73:94:b7:7a:dd:d2:ec:9a:fd:45:4a:75:c6:a2: a8:7e:15:e7:dc:a1:7b:89:ab:b4:39:04:1e:b3:7d:16:21:1d: 7c:b5:9f:c4:88:54:8b:7d:74:2e:d0:03:55:82:95:fa:5d:4c: 67:d3:b0:7f:8f:89:00:8d:04:5d:e0:76:1f:33:02:32:a7:e8: eb:d7:72:b1:38:d4:e8:7a:c3:a5:d1:62:a8:e6:1c:40:3f:29: 7d:c0:fa:42:06:7f:76:1a:0e:19:5e:00:e1:18:ff:0e:d3:bd: 8b:78:e0:49:99:65:9f:5a:8f:3b:ca:76:9c:ec:24:14:f8:4d: e8:cf:9d:b3:5f:df:f2:de:b6:01:fa:0d:88:f5:af:da:9c:8a: 84:3d:14:60:bb:38:98:e0:6d:e4:e8:f4:80:1a:d6:4d:06:21: 1d:b7:d9:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebIfcBAtlbuBVB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MTcyOWM1NGMtNGFjZS00NzBjLTlkZTctZDkxZmZjNmI2NGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKyvXSkvFUAwSdCFx6cyrRNOHiphvQ983idc MkLrutlStwYdlRGuatFpiQuDN9PKkWr78Aio/+P79fFsQCutOBpTef2PCrIKdWC/ v+hv/zxtivWOi4lejtpPK5YTbbsv9hUnm4zoQn/9mGDu2CImoIgBiefIyHz72W2w Luco+/fCY1Ey8VmYm3vX2NoGKojUVpdFkQwkK5j9pQ71W6CwLpeyLeRRnAy3lBBS 1bFMxImqeeTxktEcZD0b5dFDFq+Qv142F2nXJaOKhnGij7yfx1PXPVvaVbyFHgJb fZYUk99/LWvBliyJJG1JrRNtTzbpgfrY695g7cHsDThlTyMKIQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOuBdZ2cSPqCIjFSWDYTB/a3xP7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzViN2Y1YzItYmEzYy0z OTVhLWJkNzAtNWYzZTU4OTczYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYFY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABfM3MK6Sj9hmhgd3bKwqsdnJH5T3pedq/ahtrHvWeq1mkG6tKZJ fSmNCZxW+facGlHoEBju54yXcrL4C5nyj8M6AXotOFj/7gfQ9GgHOEUcBi3GoRjk hm2AH2tSgtxzlLd63dLsmv1FSnXGoqh+FefcoXuJq7Q5BB6zfRYhHXy1n8SIVIt9 dC7QA1WClfpdTGfTsH+PiQCNBF3gdh8zAjKn6OvXcrE41Oh6w6XRYqjmHEA/KX3A +kIGf3YaDhleAOEY/w7TvYt44EmZZZ9ajzvKdpzsJBT4TejPnbNf3/LetgH6DYj1 r9qcioQ9FGC7OJjgbeTo9IAa1k0GIR232Rs= -----END CERTIFICATE-----Generated at Sun Apr 6 20:39:20 2025 by rpki-client