$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfae9776-7955-39d6-b304-1317e6dff56e.roa File: cfae9776-7955-39d6-b304-1317e6dff56e.roa (raw, json) Hash identifier: zIOmwLS4H1d+hsxVuCdLy4Kw3gAdrF+sak+YTRmkCdQ= Subject key identifier: 53:A0:5F:D7:2F:71:C4:DF:35:4D:A6:8D:C0:1C:BE:B3:9F:A2:F1:D7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D29E2E32E74E191BFAB80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfae9776-7955-39d6-b304-1317e6dff56e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7016 IP address blocks: 2001:559:87b3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:29:e2:e3:2e:74:e1:91:bf:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=42f346d5-a2c2-45f6-a465-5e86d8f48334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:47:fc:72:a4:18:0e:7c:5a:de:71:53:99:20: df:44:b0:cf:73:91:94:63:5b:cd:74:24:20:20:27: 24:98:7b:5a:f5:74:cc:ad:98:8e:1a:91:2e:ca:2c: da:9e:81:06:c8:02:b7:22:e8:1a:83:a0:6b:1b:57: 3d:96:1a:4e:f9:1d:db:0f:da:df:3b:bd:33:fe:f2: d3:16:39:87:8f:61:33:e7:c4:88:71:a1:12:41:11: b5:b5:61:e7:75:8b:17:ec:de:88:83:a0:c7:fb:8d: a4:10:a6:b7:23:5f:ab:6b:e1:aa:90:3c:d8:e8:0f: 78:dc:67:06:5c:70:4a:b8:44:88:2c:5a:9b:35:4a: d0:c4:fd:d9:d7:da:bb:ed:36:94:31:6b:c4:61:a0: cc:9d:22:34:ba:29:bc:1a:2a:cc:87:c7:da:37:f5: 82:62:f1:34:02:ac:88:1a:5f:fb:31:fb:43:13:1d: 49:b2:45:9d:93:90:c6:88:20:bc:92:87:d6:e7:f2: e3:67:7c:77:8e:97:d1:c0:c2:4f:75:57:98:67:a1: 13:eb:e1:83:20:b5:ce:b9:7d:82:02:dd:09:7b:45: 90:63:7d:47:65:ff:de:bb:16:ea:94:ba:fe:85:19: 36:bd:2f:f9:a0:69:76:c7:65:c6:1d:42:61:bf:ed: 46:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A0:5F:D7:2F:71:C4:DF:35:4D:A6:8D:C0:1C:BE:B3:9F:A2:F1:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cfae9776-7955-39d6-b304-1317e6dff56e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:87b3::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:8b:d7:4e:af:b8:46:1a:b6:0b:49:9a:2c:20:02:00:a3:9e: a0:51:bc:11:13:d1:3e:fd:a0:58:a8:03:f8:85:a1:cf:43:1b: 56:0b:8d:13:d0:6f:c2:25:67:7c:bc:53:35:d4:48:78:7f:5d: 44:88:41:76:c4:d1:cb:2f:ee:50:55:1f:b5:c8:41:4a:e8:d7: 98:36:12:35:66:91:5b:27:0f:e6:4d:25:bf:81:9a:dc:5d:b2: 07:21:f5:7b:c3:1e:45:ad:42:3c:f4:6b:fe:d1:53:f7:19:85: 6c:74:bc:78:2e:28:b7:fc:55:44:73:82:c7:1f:e4:3d:73:8e: c5:c5:60:25:03:47:b0:a0:66:63:dd:26:3d:e8:cc:6f:8b:d4: 90:17:cd:c4:db:32:9a:af:12:fd:ed:76:88:91:7a:55:0d:35: 6e:3c:67:c9:ad:d4:24:c4:75:93:02:99:56:e4:d8:48:53:38: 95:4f:3c:8c:41:fa:5f:fb:72:6c:ec:31:f0:36:de:9c:f0:16: 7d:4c:36:fb:b3:51:5e:39:02:2d:18:b6:08:1b:fb:11:e3:bf: 20:15:38:cf:e6:1c:54:b8:08:1c:87:5a:fe:ec:f0:e8:bc:01: 76:9a:d1:c4:3a:42:58:75:21:a4:cd:5f:34:cc:d8:46:8d:63: 9f:fa:47:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebSni4y504ZG/q4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NDJmMzQ2ZDUtYTJjMi00NWY2LWE0NjUtNWU4NmQ4ZjQ4MzM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUf8cqQYDnxa3nFTmSDfRLDPc5GUY1vNdCQg ICckmHta9XTMrZiOGpEuyizanoEGyAK3Iugag6BrG1c9lhpO+R3bD9rfO70z/vLT FjmHj2Ez58SIcaESQRG1tWHndYsX7N6Ig6DH+42kEKa3I1+ra+GqkDzY6A943GcG XHBKuESILFqbNUrQxP3Z19q77TaUMWvEYaDMnSI0uim8GirMh8faN/WCYvE0AqyI Gl/7MftDEx1JskWdk5DGiCC8kofW5/LjZ3x3jpfRwMJPdVeYZ6ET6+GDILXOuX2C At0Je0WQY31HZf/euxbqlLr+hRk2vS/5oGl2x2XGHUJhv+1GbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFOgX9cvccTfNU2mjcAcvrOfovHXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZhZTk3NzYtNzk1NS0z OWQ2LWIzMDQtMTMxN2U2ZGZmNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYez MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG6L106vuEYatgtJmiwgAgCjnqBRvBET0T79oFioA/iFoc9DG1YL jRPQb8IlZ3y8UzXUSHh/XUSIQXbE0csv7lBVH7XIQUro15g2EjVmkVsnD+ZNJb+B mtxdsgch9XvDHkWtQjz0a/7RU/cZhWx0vHguKLf8VURzgscf5D1zjsXFYCUDR7Cg ZmPdJj3ozG+L1JAXzcTbMpqvEv3tdoiRelUNNW48Z8mt1CTEdZMCmVbk2EhTOJVP PIxB+l/7cmzsMfA23pzwFn1MNvuzUV45Ai0Ytggb+xHjvyAVOM/mHFS4CByHWv7s 8Oi8AXaa0cQ6Qlh1IaTNXzTM2EaNY5/6R90= -----END CERTIFICATE-----Generated at Mon Apr 7 06:36:37 2025 by rpki-client