$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d16b9b7e-2c53-3fcc-900e-e4f91b0233ae.roa File: d16b9b7e-2c53-3fcc-900e-e4f91b0233ae.roa (raw, json) Hash identifier: 6faXLGAB2iB9ZbKedbEwx9ZOqpqav2DK6nhI5coE888= Subject key identifier: E3:92:DF:E1:34:41:06:83:4A:65:01:BC:23:CB:A0:E4:5C:E2:44:E9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BA5EF4318327649979400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d16b9b7e-2c53-3fcc-900e-e4f91b0233ae.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 22909 IP address blocks: 2001:559:c034::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:a5:ef:43:18:32:76:49:97:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=d8c94fec-dc82-4013-99e0-9986d89c56aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2d:2e:f1:fa:f8:c9:8b:91:a5:59:21:c1:a3: 15:1a:81:0b:a9:15:48:5b:51:11:44:86:18:fd:7d: 03:d4:09:f9:05:50:f6:5f:08:f2:a3:2a:49:0d:fd: 85:ac:65:64:bd:af:fa:9c:8a:e4:10:33:27:84:3d: d2:71:8d:c9:3c:ae:16:8e:8c:05:e2:9d:b7:2d:08: ed:ad:25:48:be:20:3b:0d:bf:69:53:2d:f6:d2:d4: f1:a5:d7:ea:35:4c:0d:d9:1f:37:c0:f6:ea:88:0b: 2e:43:cc:b4:c1:61:02:c4:9b:cd:18:02:e7:63:45: 9a:62:70:90:14:07:ed:da:9f:64:8a:a2:5e:c3:c4: 27:b6:26:7e:31:9f:a4:d8:31:8d:d8:59:f6:ed:a7: ab:19:f6:00:f6:3f:4f:8b:f5:ef:5c:bd:ee:8d:55: 37:3a:47:81:ef:a4:00:f1:d3:52:53:ef:b2:4d:da: af:68:1d:39:de:51:50:e7:2d:2f:a7:76:7a:fc:74: d9:31:71:88:79:ff:a8:3e:e2:ea:83:32:0a:a7:e5: 7b:74:00:d8:4a:3c:9b:aa:62:08:fe:20:73:64:4a: d2:c3:67:bf:04:4f:35:f4:b1:18:9a:5e:27:51:f4: e7:05:be:0e:1b:84:ce:e7:b9:ad:b3:c3:d8:10:98: 03:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:92:DF:E1:34:41:06:83:4A:65:01:BC:23:CB:A0:E4:5C:E2:44:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d16b9b7e-2c53-3fcc-900e-e4f91b0233ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c034::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f0:24:4a:72:d2:68:da:22:8a:6a:88:bb:9d:87:da:3c:87: a2:46:d2:92:b9:e2:5f:76:4e:d6:db:23:cb:36:6c:a9:3e:51: 12:3b:5b:3a:14:68:99:2a:14:16:f2:90:f0:3f:4e:0a:3f:45: b0:17:21:f8:1b:65:05:93:ee:e0:eb:cd:fa:c1:b4:28:26:d6: 84:32:36:0e:fb:ba:ec:d2:5a:25:25:1f:04:e6:9c:a0:bf:4a: d3:74:50:7f:63:8a:3d:68:d7:1c:8f:3e:f9:11:07:f6:79:49: ed:26:ba:b6:37:cd:2a:2b:6c:b8:63:b0:bc:32:1c:07:e5:dc: fd:52:88:79:8b:9a:22:0b:45:c6:7e:4c:6e:dd:7d:9f:99:45: 38:17:c7:97:4e:f9:02:ad:5d:e9:11:36:42:c5:fd:2c:e2:74: 39:21:49:d3:e9:2e:83:58:54:a2:68:07:03:80:1f:20:99:86: 19:9c:e9:d8:37:52:74:05:3c:97:ca:68:6c:06:c4:c9:62:52: 59:9d:e5:62:af:5c:b2:68:e2:a0:9e:7e:e8:93:2f:c3:ba:71: 92:5b:a6:60:72:9d:98:0b:f5:24:28:4c:dc:48:f9:4c:2c:fe: 4e:6a:a4:3d:db:66:12:4f:5f:98:1b:24:69:78:65:a1:32:95: ba:64:10:4a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea6XvQxgydkmXlAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZDhjOTRmZWMtZGM4Mi00MDEzLTk5ZTAtOTk4NmQ4OWM1NmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy0u8fr4yYuRpVkhwaMVGoELqRVIW1ERRIYY /X0D1An5BVD2XwjyoypJDf2FrGVkva/6nIrkEDMnhD3ScY3JPK4WjowF4p23LQjt rSVIviA7Db9pUy320tTxpdfqNUwN2R83wPbqiAsuQ8y0wWECxJvNGALnY0WaYnCQ FAft2p9kiqJew8QntiZ+MZ+k2DGN2Fn27aerGfYA9j9Pi/XvXL3ujVU3OkeB76QA 8dNSU++yTdqvaB053lFQ5y0vp3Z6/HTZMXGIef+oPuLqgzIKp+V7dADYSjybqmII /iBzZErSw2e/BE819LEYml4nUfTnBb4OG4TO57mts8PYEJgDkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOOS3+E0QQaDSmUBvCPLoORc4kTpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDE2YjliN2UtMmM1My0z ZmNjLTkwMGUtZTRmOTFiMDIzM2FlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcA0 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLwJEpy0mjaIopqiLudh9o8h6JG0pK54l92TtbbI8s2bKk+URI7 WzoUaJkqFBbykPA/Tgo/RbAXIfgbZQWT7uDrzfrBtCgm1oQyNg77uuzSWiUlHwTm nKC/StN0UH9jij1o1xyPPvkRB/Z5Se0murY3zSorbLhjsLwyHAfl3P1SiHmLmiIL RcZ+TG7dfZ+ZRTgXx5dO+QKtXekRNkLF/SzidDkhSdPpLoNYVKJoBwOAHyCZhhmc 6dg3UnQFPJfKaGwGxMliUlmd5WKvXLJo4qCefuiTL8O6cZJbpmBynZgL9SQoTNxI +Uws/k5qpD3bZhJPX5gbJGl4ZaEylbpkEEo= -----END CERTIFICATE-----Generated at Mon Apr 7 05:58:43 2025 by rpki-client