$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca789b71-8d8b-3098-80e0-aa65acb311ee.roa File: ca789b71-8d8b-3098-80e0-aa65acb311ee.roa (raw, json) Hash identifier: LnSAq01BqHKUuFHvFYs11UDvAJoTo2H1QiLOhferqIQ= Subject key identifier: 65:E1:4C:3A:62:B4:B6:80:AB:E4:87:2B:9E:62:1E:70:84:44:42:0B Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BBC83A887420BE0920E40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca789b71-8d8b-3098-80e0-aa65acb311ee.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7016 IP address blocks: 2001:559:845e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:bc:83:a8:87:42:0b:e0:92:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=4525a4f6-4df3-4d89-8737-b486119eeb80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:13:66:e3:2d:7f:be:ef:b8:cf:38:41:c2:1d: bb:0f:69:f5:e7:4e:02:70:51:9e:28:09:72:09:70: a5:3b:81:a9:fb:a8:3e:ff:28:51:67:4c:55:50:0f: 7c:4b:b1:58:e7:06:70:6a:6c:a4:82:c1:61:1b:32: c4:61:1c:ee:e2:93:b7:ff:d8:74:87:97:61:e4:e1: 7d:48:4c:95:95:e9:1d:b0:39:73:40:52:c9:06:27: 57:be:45:95:e7:89:6e:ce:94:d9:f8:d2:ea:5d:af: eb:a8:2b:85:69:80:42:b0:0c:c9:e6:c8:7d:8a:5a: 03:5a:01:58:8f:8e:ba:41:51:95:41:0e:7a:e0:bb: 12:13:73:4f:e2:65:f7:06:c6:c9:df:cb:ab:f1:0e: af:a9:f5:a6:ed:dc:db:9b:ea:de:61:72:1b:21:db: 21:81:d3:a0:32:6f:4c:94:b6:47:9f:16:02:cb:02: 65:f2:1b:b4:3b:dd:04:ae:39:41:99:e4:ba:1d:ff: 95:a1:94:03:40:7b:61:01:ce:b6:ef:3b:58:e7:45: fd:44:76:6c:58:1b:1c:8e:22:62:2f:54:01:e6:f1: 2a:9f:5c:e8:ac:81:e1:60:38:d8:f9:7b:2c:90:fc: b4:d0:96:5b:8a:cd:ae:ee:d3:c1:42:37:f3:82:50: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E1:4C:3A:62:B4:B6:80:AB:E4:87:2B:9E:62:1E:70:84:44:42:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca789b71-8d8b-3098-80e0-aa65acb311ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:845e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:02:1a:8a:1a:b7:19:2d:90:97:62:c2:29:46:6f:12:44:73: 1c:25:48:05:46:7d:6b:71:27:66:9b:64:e6:54:50:47:dd:bf: b3:34:13:6d:6e:1e:11:fe:7c:aa:8e:30:e0:22:2c:8d:e8:bd: a3:bb:1b:e9:b5:87:62:77:1a:74:9b:47:2c:2c:2d:f3:0a:d4: d3:45:bd:70:50:eb:c0:01:56:d8:5d:a7:d0:c0:da:bc:4a:8c: d2:aa:a9:34:6d:c5:ad:31:df:2c:b3:f8:cd:b0:5d:95:39:39: 26:be:31:15:a3:3d:23:43:56:a2:a7:a1:94:1e:45:17:ce:34: 36:eb:33:84:d7:ed:a7:74:a4:e3:71:e4:8f:38:76:16:3a:a9: 30:7a:63:d3:9a:3c:a2:45:79:56:43:a9:cf:8b:df:9d:ca:d1: 23:03:21:ae:1f:fc:50:86:66:04:c6:19:ac:f5:8e:35:9d:e0: 6c:83:45:18:48:22:15:1f:6e:ed:8f:99:b1:6d:36:2e:34:a7: 19:9b:08:96:4c:b1:12:09:f2:88:44:18:6b:92:b9:bc:3b:09: cd:d0:b0:a8:65:c7:b6:cd:fd:f7:cc:e1:b7:3b:b2:76:51:36: a0:fc:a3:ce:12:0a:7a:08:93:0c:86:c4:a7:ed:9d:68:be:4e: c0:56:fc:9f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea7yDqIdCC+CSDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NDUyNWE0ZjYtNGRmMy00ZDg5LTg3MzctYjQ4NjExOWVlYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBNm4y1/vu+4zzhBwh27D2n1504CcFGeKAly CXClO4Gp+6g+/yhRZ0xVUA98S7FY5wZwamykgsFhGzLEYRzu4pO3/9h0h5dh5OF9 SEyVlekdsDlzQFLJBidXvkWV54luzpTZ+NLqXa/rqCuFaYBCsAzJ5sh9iloDWgFY j466QVGVQQ564LsSE3NP4mX3BsbJ38ur8Q6vqfWm7dzbm+reYXIbIdshgdOgMm9M lLZHnxYCywJl8hu0O90ErjlBmeS6Hf+VoZQDQHthAc627ztY50X9RHZsWBscjiJi L1QB5vEqn1zorIHhYDjY+XsskPy00JZbis2u7tPBQjfzglAQPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGXhTDpitLaAq+SHK55iHnCEREILMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E3ODliNzEtOGQ4Yi0z MDk4LTgwZTAtYWE2NWFjYjMxMWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYRe MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL8CGooatxktkJdiwilGbxJEcxwlSAVGfWtxJ2abZOZUUEfdv7M0 E21uHhH+fKqOMOAiLI3ovaO7G+m1h2J3GnSbRywsLfMK1NNFvXBQ68ABVthdp9DA 2rxKjNKqqTRtxa0x3yyz+M2wXZU5OSa+MRWjPSNDVqKnoZQeRRfONDbrM4TX7ad0 pONx5I84dhY6qTB6Y9OaPKJFeVZDqc+L353K0SMDIa4f/FCGZgTGGaz1jjWd4GyD RRhIIhUfbu2PmbFtNi40pxmbCJZMsRIJ8ohEGGuSubw7Cc3QsKhlx7bN/ffM4bc7 snZRNqD8o84SCnoIkwyGxKftnWi+TsBW/J8= -----END CERTIFICATE-----Generated at Mon Apr 7 15:56:32 2025 by rpki-client