$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbec66c2-0974-3496-98b5-e94afca41a0b.roa File: cbec66c2-0974-3496-98b5-e94afca41a0b.roa (raw, json) Hash identifier: 1NjSs3ruPjOPnNlaz71Z6yVPXx2PJ3m7y+nmkuBZPRc= Subject key identifier: 28:C9:B6:96:C8:31:80:36:28:9D:87:FE:F1:E8:C3:26:DA:22:BA:06 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C17DAA03EE8D9E2471E10 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbec66c2-0974-3496-98b5-e94afca41a0b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33662 IP address blocks: 2001:559:8783::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:17:da:a0:3e:e8:d9:e2:47:1e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=e6e2f972-dda7-4e49-bb6d-492548800f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:f5:50:ed:31:c7:81:d7:b9:e9:9e:45:9a: e3:55:1b:50:63:f8:ae:b6:ec:a7:72:73:1d:fd:e2: d1:16:62:a9:f5:19:4a:12:1e:d0:86:f6:77:4c:8a: 4c:bd:4b:45:41:21:c4:b6:14:8a:ab:28:4f:85:8b: 88:2a:3f:87:ce:52:a3:04:af:72:b3:5c:aa:0a:5e: bd:ad:0c:eb:df:76:99:c4:cb:72:22:ee:43:39:81: e3:49:b2:b1:89:3c:81:eb:20:e8:bb:3d:12:c5:17: f1:47:a3:95:14:2e:89:90:5d:0c:76:42:7e:c1:aa: 4f:93:16:db:3d:44:7b:b1:3a:37:2e:2a:95:20:0c: b4:30:5c:d6:4f:ea:25:bc:b7:8b:f8:cd:c4:95:74: 7c:9f:28:87:8a:b6:9f:f8:3b:5f:e2:98:53:ab:07: 11:36:cf:5f:50:f9:b6:71:98:e9:e2:21:00:38:95: 4d:38:d7:2e:0b:40:f4:d9:33:bd:a1:8e:5b:97:1e: 22:3e:d7:65:29:5c:1a:74:02:82:d7:83:79:4d:d4: 28:3b:b6:f3:22:43:48:ab:0d:8a:b7:58:44:f2:d1: 10:63:8d:4a:72:40:6f:c7:a0:73:24:1b:16:b7:ce: c8:e7:30:d0:00:bf:39:58:6a:9f:cf:df:5c:1c:1d: 16:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C9:B6:96:C8:31:80:36:28:9D:87:FE:F1:E8:C3:26:DA:22:BA:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbec66c2-0974-3496-98b5-e94afca41a0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8783::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:8b:6f:ac:4c:c7:c8:e1:97:1d:d0:3c:11:fb:0b:0d:f9:9c: ff:06:e2:2a:93:0f:45:ab:67:77:7a:5d:db:24:88:67:8c:db: 6e:a4:cc:05:d9:f9:8d:88:69:02:c1:ae:1a:28:74:65:8f:88: 90:7e:ca:2d:3a:be:13:37:16:fb:2e:4e:4a:6a:58:c5:37:a7: 75:73:1a:02:0d:61:19:40:5c:aa:ec:33:d6:53:c1:57:e6:e1: e9:cc:10:e7:7c:88:61:27:bb:18:a4:c3:51:06:0f:b3:3c:c9: 91:e8:15:39:27:f5:18:a8:0b:5d:25:a1:77:65:d7:94:3f:79: 08:0d:5a:da:de:b5:d6:9b:f4:12:6b:39:29:e3:ca:02:04:8e: 06:c9:3c:31:75:1c:2d:b9:f8:6f:fc:a2:dd:31:07:17:bc:08: 35:66:c6:f4:c0:e8:f1:f9:ce:ab:42:5c:b7:f0:72:29:19:a2: 30:74:a0:8f:89:0f:bf:cd:3c:cb:f9:4e:b8:5b:89:71:16:18: f3:4d:e0:9c:db:ad:da:bb:1a:a2:c1:5e:34:8c:5f:c9:1c:4f: 59:24:a2:93:01:c1:c5:4f:92:ef:28:31:f5:e9:78:ac:66:73: 6c:1e:12:65:c8:3a:c7:a5:14:b0:15:cc:45:e5:68:76:db:43: a6:59:c4:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebBfaoD7o2eJHHhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZTZlMmY5NzItZGRhNy00ZTQ5LWJiNmQtNDkyNTQ4ODAwZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYr1UO0xx4HXuemeRZrjVRtQY/iutuyncnMd /eLRFmKp9RlKEh7QhvZ3TIpMvUtFQSHEthSKqyhPhYuIKj+HzlKjBK9ys1yqCl69 rQzr33aZxMtyIu5DOYHjSbKxiTyB6yDouz0SxRfxR6OVFC6JkF0MdkJ+wapPkxbb PUR7sTo3LiqVIAy0MFzWT+olvLeL+M3ElXR8nyiHiraf+Dtf4phTqwcRNs9fUPm2 cZjp4iEAOJVNONcuC0D02TO9oY5blx4iPtdlKVwadAKC14N5TdQoO7bzIkNIqw2K t1hE8tEQY41KckBvx6BzJBsWt87I5zDQAL85WGqfz99cHB0WkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCjJtpbIMYA2KJ2H/vHowybaIroGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2JlYzY2YzItMDk3NC0z NDk2LTk4YjUtZTk0YWZjYTQxYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYeD MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALSLb6xMx8jhlx3QPBH7Cw35nP8G4iqTD0WrZ3d6XdskiGeM226k zAXZ+Y2IaQLBrhoodGWPiJB+yi06vhM3FvsuTkpqWMU3p3VzGgINYRlAXKrsM9ZT wVfm4enMEOd8iGEnuxikw1EGD7M8yZHoFTkn9RioC10loXdl15Q/eQgNWtretdab 9BJrOSnjygIEjgbJPDF1HC25+G/8ot0xBxe8CDVmxvTA6PH5zqtCXLfwcikZojB0 oI+JD7/NPMv5TrhbiXEWGPNN4Jzbrdq7GqLBXjSMX8kcT1kkopMBwcVPku8oMfXp eKxmc2weEmXIOselFLAVzEXlaHbbQ6ZZxFU= -----END CERTIFICATE-----Generated at Mon Apr 7 06:17:00 2025 by rpki-client