$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca87fe07-f86d-329e-8711-fa386c509ed1.roa File: ca87fe07-f86d-329e-8711-fa386c509ed1.roa (raw, json) Hash identifier: gAQKGQ9C9SJi1qb0WQeXxXJT6eWf571+RLsZLZxoyNw= Subject key identifier: 30:0C:18:83:1E:7A:3C:76:9C:D8:73:5D:A6:02:5F:8C:0D:67:8F:87 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DAAF9596A63320955BB40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca87fe07-f86d-329e-8711-fa386c509ed1.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:826c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:aa:f9:59:6a:63:32:09:55:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=bb78dfd7-2858-433b-ae77-ba3a0a491e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b4:22:ec:fd:4b:e7:92:57:e0:77:8f:85:25: 72:cd:8f:2c:ad:5a:a0:c6:e6:7b:2a:8a:90:af:22: 9c:79:a1:1c:9a:44:d3:52:ee:f7:be:b6:7e:d7:b5: ed:e7:85:68:25:24:65:77:93:f4:fe:aa:e5:2f:66: 79:75:94:2d:5d:ed:88:0d:37:9a:4f:a8:18:eb:0b: 9a:a8:7b:a4:a1:31:f3:df:13:4d:c6:1d:84:bd:63: bb:0b:57:b8:49:7b:f1:d1:57:06:fc:26:e6:51:59: b8:b7:a4:19:2f:d4:bf:22:93:36:f5:8d:16:89:3f: 02:3c:e1:69:cd:9a:9b:67:a6:e6:3e:7d:b5:3e:1a: 82:d6:d8:32:5a:87:90:6c:e4:55:fe:7b:e8:43:29: 5e:ba:64:f5:fd:4a:22:b4:bd:c6:22:bf:1f:e3:8d: b1:65:22:8f:37:87:89:61:61:46:cf:87:d2:e4:84: 72:f6:65:70:63:ae:a1:25:9f:36:1f:cb:a2:7e:5b: c1:e4:b0:7d:00:8e:2b:84:d0:9e:57:14:70:f2:8c: 8c:5f:80:43:44:33:b5:f0:2c:55:bb:e0:f7:c4:13: b4:10:22:58:2e:57:f5:10:30:36:4d:47:b7:c9:74: c3:0e:87:0d:ec:51:a5:5c:10:a3:49:8f:36:45:cb: 06:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:0C:18:83:1E:7A:3C:76:9C:D8:73:5D:A6:02:5F:8C:0D:67:8F:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca87fe07-f86d-329e-8711-fa386c509ed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:826c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:ef:34:8d:09:3e:81:84:70:d7:e4:26:74:09:21:5c:83:11: da:70:3c:8a:21:84:17:89:23:1f:41:2e:fe:27:ff:a1:75:ae: 66:f0:a4:e6:e3:dd:c0:54:cd:f8:57:14:a2:78:c7:3a:66:88: 4e:c3:2a:6a:cb:92:65:9d:64:e4:46:fa:b2:fb:33:d1:4e:d0: fa:6d:29:94:f1:65:d5:4a:44:3a:ba:4c:19:d9:1e:2c:13:01: 78:93:02:58:e1:24:6f:93:2b:dc:36:40:78:74:68:cd:83:9e: a6:87:21:72:66:8a:1c:0e:fb:ef:8d:a0:1e:c4:b1:76:da:24: e5:b4:3c:bd:33:6e:84:f1:11:d8:e2:44:2a:e3:e3:6c:7f:ed: 37:35:e4:4f:b7:e4:9e:53:8b:ab:1f:89:8b:19:48:94:28:62: dc:2e:ca:d3:4a:b3:27:95:54:e3:db:27:46:8a:42:52:1c:0f: ef:cc:40:76:f7:6f:54:fa:e1:69:b2:67:e9:a4:88:6e:9e:e9: 43:fb:82:5f:05:2b:d3:62:66:09:65:db:e5:84:87:f1:95:1f: 8e:c9:2a:38:eb:f6:5c:70:e3:36:d9:44:96:d4:4d:a3:bc:fc: c8:a3:dd:29:49:b5:8b:9e:3b:f2:78:08:0f:e3:db:d0:ea:4d: 36:f0:e8:5e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebar5WWpjMglVu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YmI3OGRmZDctMjg1OC00MzNiLWFlNzctYmEzYTBhNDkxZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprQi7P1L55JX4HePhSVyzY8srVqgxuZ7KoqQ ryKceaEcmkTTUu73vrZ+17Xt54VoJSRld5P0/qrlL2Z5dZQtXe2IDTeaT6gY6wua qHukoTHz3xNNxh2EvWO7C1e4SXvx0VcG/CbmUVm4t6QZL9S/IpM29Y0WiT8CPOFp zZqbZ6bmPn21PhqC1tgyWoeQbORV/nvoQyleumT1/UoitL3GIr8f442xZSKPN4eJ YWFGz4fS5IRy9mVwY66hJZ82H8uiflvB5LB9AI4rhNCeVxRw8oyMX4BDRDO18CxV u+D3xBO0ECJYLlf1EDA2TUe3yXTDDocN7FGlXBCjSY82RcsGZwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDAMGIMeejx2nNhzXaYCX4wNZ4+HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2E4N2ZlMDctZjg2ZC0z MjllLTg3MTEtZmEzODZjNTA5ZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYJs MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKbvNI0JPoGEcNfkJnQJIVyDEdpwPIohhBeJIx9BLv4n/6F1rmbw pObj3cBUzfhXFKJ4xzpmiE7DKmrLkmWdZORG+rL7M9FO0PptKZTxZdVKRDq6TBnZ HiwTAXiTAljhJG+TK9w2QHh0aM2DnqaHIXJmihwO+++NoB7EsXbaJOW0PL0zboTx EdjiRCrj42x/7Tc15E+35J5Ti6sfiYsZSJQoYtwuytNKsyeVVOPbJ0aKQlIcD+/M QHb3b1T64WmyZ+mkiG6e6UP7gl8FK9NiZgll2+WEh/GVH47JKjjr9lxw4zbZRJbU TaO8/Mij3SlJtYueO/J4CA/j29DqTTbw6F4= -----END CERTIFICATE-----Generated at Sun Apr 6 11:51:59 2025 by rpki-client