$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3adb0d3-b989-3609-b41c-497d72ba09f8.roa File: d3adb0d3-b989-3609-b41c-497d72ba09f8.roa (raw, json) Hash identifier: y5gy1lqg3MHJyjkxJ6+Sv/OBpi1Ac/t4KIORSLXtZto= Subject key identifier: D8:B7:65:6D:34:83:0D:1B:E9:1D:43:DD:13:06:2C:D0:A0:EA:03:7C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C3211E2C4570F27C94E80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3adb0d3-b989-3609-b41c-497d72ba09f8.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:598::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:32:11:e2:c4:57:0f:27:c9:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=517c96c0-2387-4866-9ee3-0ded61331013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fa:78:c9:bd:41:7c:56:eb:cd:48:6c:96:13: 4e:56:78:a9:d9:bb:40:dd:22:68:32:f9:2a:4f:f5: 15:9c:ae:71:11:07:d9:b5:f5:16:c9:d5:a3:31:13: 89:2e:52:39:2a:bb:ee:cf:c7:63:36:78:85:36:d4: 0f:d0:73:5e:d0:cb:b1:08:cf:0f:3e:1d:07:f4:a7: 3c:8b:6f:a3:6f:bb:ce:80:6b:28:a8:a5:eb:81:9e: 99:5c:3a:de:64:3d:a3:22:fa:be:ff:86:dd:7b:fa: 93:6d:15:f1:b2:91:ba:2c:37:ee:d3:f9:c9:09:1c: 54:b8:ee:3c:9d:1d:06:5e:9b:8c:c6:96:d5:52:d7: 4a:1f:97:79:33:1c:1e:36:15:35:d3:9a:aa:55:b1: 1a:a9:2a:ec:fa:22:ec:b0:74:11:ac:7e:f8:89:bc: ac:6c:f3:82:9a:b4:70:0c:43:da:16:9c:9e:aa:7a: cd:b4:d6:43:c0:1e:e6:6e:4d:60:12:f5:12:44:21: 6d:62:0a:b3:7d:01:f3:76:b0:89:6d:00:91:a5:15: 49:92:1f:6e:66:ce:54:96:92:f6:d7:4b:c4:45:39: 14:04:22:72:11:04:2b:96:06:5a:c5:cb:13:46:2d: 0d:9b:37:7f:4a:7b:75:d6:a0:50:4c:68:56:4f:e9: 00:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B7:65:6D:34:83:0D:1B:E9:1D:43:DD:13:06:2C:D0:A0:EA:03:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3adb0d3-b989-3609-b41c-497d72ba09f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:598::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:b5:ab:c9:01:95:55:6f:58:8d:d0:fe:37:eb:9d:7f:04:b8: 5f:28:58:8f:06:df:7c:33:d6:93:e6:9f:04:12:7d:d4:b4:d0: aa:24:30:72:9c:cb:bc:d5:c0:48:df:9f:5f:a1:78:ad:80:a4: ef:30:df:4e:4c:3e:8e:a2:7c:4f:74:85:b3:bb:b9:0d:2c:f3: a7:ab:27:b0:66:de:a1:f3:b0:65:4e:be:31:e9:27:0b:fb:e8: 6c:de:b1:6d:7a:ee:cf:ad:b7:0f:c9:9a:67:84:35:07:d1:d9: ff:49:01:a4:5b:7f:e1:d6:7c:e0:e0:d3:2e:d7:fa:34:7f:18: 63:8b:f5:f9:4f:50:6c:c8:ba:ef:36:4a:2a:5a:98:36:11:cc: 83:b8:02:45:52:c2:63:05:55:4a:e9:c4:c4:f7:0a:c5:25:bc: c6:5f:8d:2d:65:9b:81:f7:c1:30:82:31:c2:2e:e3:36:dd:d1: c8:25:c3:9c:37:b1:a1:21:76:46:ba:1d:66:96:15:28:80:9f: 97:8c:87:1f:95:49:c1:f2:93:a4:42:59:cd:72:32:04:59:c5: 31:83:55:2b:fb:09:6b:c7:aa:b0:e4:ac:82:15:09:8c:5a:0c: 4d:4b:87:06:46:21:dc:4a:74:0f:ca:69:52:af:1e:eb:ff:97: 09:06:d9:e4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebDIR4sRXDyfJToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NTE3Yzk2YzAtMjM4Ny00ODY2LTllZTMtMGRlZDYxMzMxMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfp4yb1BfFbrzUhslhNOVnip2btA3SJoMvkq T/UVnK5xEQfZtfUWydWjMROJLlI5Krvuz8djNniFNtQP0HNe0MuxCM8PPh0H9Kc8 i2+jb7vOgGsoqKXrgZ6ZXDreZD2jIvq+/4bde/qTbRXxspG6LDfu0/nJCRxUuO48 nR0GXpuMxpbVUtdKH5d5MxweNhU105qqVbEaqSrs+iLssHQRrH74ibysbPOCmrRw DEPaFpyeqnrNtNZDwB7mbk1gEvUSRCFtYgqzfQHzdrCJbQCRpRVJkh9uZs5UlpL2 10vERTkUBCJyEQQrlgZaxcsTRi0Nmzd/Snt11qBQTGhWT+kARQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNi3ZW00gw0b6R1D3RMGLNCg6gN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDNhZGIwZDMtYjk4OS0z NjA5LWI0MWMtNDk3ZDcyYmEwOWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQWY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANi1q8kBlVVvWI3Q/jfrnX8EuF8oWI8G33wz1pPmnwQSfdS00Kok MHKcy7zVwEjfn1+heK2ApO8w305MPo6ifE90hbO7uQ0s86erJ7Bm3qHzsGVOvjHp Jwv76GzesW167s+ttw/JmmeENQfR2f9JAaRbf+HWfODg0y7X+jR/GGOL9flPUGzI uu82SipamDYRzIO4AkVSwmMFVUrpxMT3CsUlvMZfjS1lm4H3wTCCMcIu4zbd0cgl w5w3saEhdka6HWaWFSiAn5eMhx+VScHyk6RCWc1yMgRZxTGDVSv7CWvHqrDkrIIV CYxaDE1LhwZGIdxKdA/KaVKvHuv/lwkG2eQ= -----END CERTIFICATE-----Generated at Sun Apr 6 09:40:48 2025 by rpki-client