$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c73500bb-07f4-3143-8e21-9e36aa7d2aa5.roa File: c73500bb-07f4-3143-8e21-9e36aa7d2aa5.roa (raw, json) Hash identifier: qNZAfrsOiS6OI8Kht2gJffShqkEposeI5dPFOYm86jc= Subject key identifier: 8D:23:7F:CD:CA:6B:41:40:15:B0:0D:FC:D8:C3:BC:B5:3F:56:15:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CB0D7DA22B8011FF81D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c73500bb-07f4-3143-8e21-9e36aa7d2aa5.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:8263::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:b0:d7:da:22:b8:01:1f:f8:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d7069cfd-1bbe-4cf6-a68b-61b0dfe99d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:af:1b:c5:98:e6:f7:e8:52:74:35:ed:34: 72:88:87:0e:ea:3b:1d:50:87:a5:24:90:f0:3b:46: fc:02:08:bc:4f:0f:f2:be:ab:aa:d8:0f:34:14:30: 40:d9:da:a2:0d:48:10:2f:a7:f9:a0:fb:34:e1:12: 25:ac:e7:8c:92:34:4c:be:a1:72:ef:e9:5a:71:15: 04:d3:7b:ba:d5:3f:b6:bf:18:21:8d:e0:f7:f8:12: cd:6c:73:7f:4d:de:5f:a9:ac:52:6e:24:26:3d:79: 46:ac:2a:3b:8b:ae:b3:20:14:18:c8:80:90:fd:d3: af:54:bb:13:5a:66:ea:61:c5:39:b6:00:5d:e1:05: c5:9b:3f:ad:7d:c9:ee:cf:a6:52:eb:39:70:27:b6: 06:a3:2e:f6:c8:5d:f8:3e:0b:2c:b0:55:84:a3:0d: 66:e9:ea:c6:7c:fa:69:4f:74:56:f4:fe:b5:59:d2: 25:1a:f3:f9:0e:3b:3b:05:17:d4:71:29:d5:00:60: df:18:f3:87:1c:27:d5:62:cc:16:df:0f:52:04:12: 92:1c:53:24:96:ca:7b:d7:e1:e1:56:88:04:b6:5e: f6:e0:e4:8f:1d:6f:38:90:cf:0c:cd:0d:22:bb:16: 06:63:63:27:3c:8d:0a:97:5d:4b:1c:e1:1b:8e:ef: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:23:7F:CD:CA:6B:41:40:15:B0:0D:FC:D8:C3:BC:B5:3F:56:15:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c73500bb-07f4-3143-8e21-9e36aa7d2aa5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8263::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:89:7a:1b:56:93:ac:1c:56:7f:5b:54:6f:10:55:f8:0d:49: dc:43:d2:7f:4d:bc:8b:42:83:b3:27:2f:80:49:b7:b5:16:f6: c7:7d:4a:7b:cc:81:f3:30:65:4d:c1:1c:6a:c5:41:7e:55:ae: c8:20:4f:d0:f7:58:e8:ef:da:de:c0:79:71:e5:92:ef:7b:22: 52:36:65:fc:4a:47:d3:1d:a2:87:ba:da:65:3f:46:42:8b:df: 99:34:92:03:36:6a:82:39:22:8f:03:6c:23:25:e3:59:5a:ed: ff:72:a3:09:bc:d5:c2:02:4d:19:60:e3:f5:6a:a4:92:83:65: 3d:d7:6a:a1:4c:1e:46:91:bc:8e:28:3c:a1:4b:b4:8b:b9:8e: 55:b8:85:42:9f:2e:b5:32:09:57:c8:6a:7f:e7:c1:81:9e:4c: eb:21:35:46:51:ff:ca:d1:64:5b:8a:08:30:99:f3:62:1f:21: b4:50:b7:00:fa:a1:6e:67:2c:b9:01:35:70:1a:de:7a:69:41: 1c:37:81:2f:ea:06:54:76:6d:47:55:2a:ab:19:c5:e4:37:ea: 9b:c9:86:02:13:8a:68:3c:79:ef:9e:27:74:d1:50:b6:2b:f5: da:53:75:ca:16:a2:9e:4e:5c:b2:29:d8:7b:13:ff:a0:a4:8b: 97:d0:6f:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebLDX2iK4AR/4HQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDcwNjljZmQtMWJiZS00Y2Y2LWE2OGItNjFiMGRmZTk5ZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnCvG8WY5vfoUnQ17TRyiIcO6jsdUIelJJDw O0b8Agi8Tw/yvquq2A80FDBA2dqiDUgQL6f5oPs04RIlrOeMkjRMvqFy7+lacRUE 03u61T+2vxghjeD3+BLNbHN/Td5fqaxSbiQmPXlGrCo7i66zIBQYyICQ/dOvVLsT WmbqYcU5tgBd4QXFmz+tfcnuz6ZS6zlwJ7YGoy72yF34PgsssFWEow1m6erGfPpp T3RW9P61WdIlGvP5Djs7BRfUcSnVAGDfGPOHHCfVYswW3w9SBBKSHFMklsp71+Hh VogEtl724OSPHW84kM8MzQ0iuxYGY2MnPI0Kl11LHOEbju+GLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI0jf83Ka0FAFbAN/NjDvLU/VhVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzczNTAwYmItMDdmNC0z MTQzLThlMjEtOWUzNmFhN2QyYWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqJehtWk6wcVn9bVG8QVfgNSdxD0n9NvItCg7MnL4BJt7UW9sd9 SnvMgfMwZU3BHGrFQX5VrsggT9D3WOjv2t7AeXHlku97IlI2ZfxKR9Mdooe62mU/ RkKL35k0kgM2aoI5Io8DbCMl41la7f9yowm81cICTRlg4/VqpJKDZT3XaqFMHkaR vI4oPKFLtIu5jlW4hUKfLrUyCVfIan/nwYGeTOshNUZR/8rRZFuKCDCZ82IfIbRQ twD6oW5nLLkBNXAa3nppQRw3gS/qBlR2bUdVKqsZxeQ36pvJhgITimg8ee+eJ3TR ULYr9dpTdcoWop5OXLIp2HsT/6Cki5fQb6A= -----END CERTIFICATE-----Generated at Mon Apr 7 06:00:17 2025 by rpki-client