$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4508da4-107d-3bf1-acd9-3e852715005d.roa File: d4508da4-107d-3bf1-acd9-3e852715005d.roa (raw, json) Hash identifier: KWHObgXMU0C9hcqZq9vwqLUlSM5Isc8aMXEzrG0TgJo= Subject key identifier: 0F:D6:8D:86:75:7C:5C:6C:41:75:AE:60:27:D2:A8:BB:28:5F:DD:FF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CBFFC5FF1178A386B0920 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4508da4-107d-3bf1-acd9-3e852715005d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 2001:559:793::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:bf:fc:5f:f1:17:8a:38:6b:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=c62d2832-ccd5-41b7-90ae-8cbb8657127b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:54:f8:b7:b3:e4:ae:08:23:59:63:95:c0:a9: 92:92:cb:14:5d:3a:a0:f1:96:af:9c:a1:54:bc:30: 26:61:d1:0c:dc:91:a1:a2:12:76:53:c0:40:70:59: 03:2b:21:dc:87:4c:7c:cc:76:6c:ed:5b:40:06:38: b5:30:44:2a:5d:ab:f4:51:2a:28:a0:6f:20:79:3d: ef:38:a0:bd:7e:11:6a:0b:89:e1:95:77:6d:7d:a7: 6e:bf:fe:73:c7:64:cf:b5:eb:c5:5c:ea:aa:e9:7a: 49:17:7f:9c:d2:0b:61:e9:aa:42:36:53:13:7b:59: 3d:3e:ed:4e:35:dc:c5:dd:89:19:66:ef:c6:a1:65: 90:d2:57:2d:74:a1:1d:ef:6d:d4:5a:9e:d6:0c:34: b5:4f:e9:3b:7c:74:64:67:d5:55:6f:15:ff:0e:b8: c7:4a:32:61:1f:c3:e2:43:b2:4a:b0:62:8b:31:4e: a8:af:43:dd:d0:c1:6b:8f:8b:67:39:d2:11:d8:48: 8f:4a:77:78:d6:5f:a5:cb:0d:86:97:bf:08:4f:9f: 57:5f:7d:b0:56:76:41:64:8d:23:3d:41:b6:7e:f0: 68:82:c9:b9:22:41:c0:33:dc:49:f7:2d:1f:0c:4f: f9:46:98:5f:96:83:0d:59:ca:1c:cb:7f:a7:b0:68: f2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D6:8D:86:75:7C:5C:6C:41:75:AE:60:27:D2:A8:BB:28:5F:DD:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4508da4-107d-3bf1-acd9-3e852715005d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:793::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9d:68:bb:03:96:0f:e5:3c:0c:8e:a4:94:85:50:6a:45:55: 7c:d7:5b:31:44:16:02:8f:6b:f9:1c:a5:71:20:3c:f0:91:5e: 99:34:ca:77:f2:2d:ec:04:d5:a7:74:86:e8:29:4d:f2:0e:a7: 1d:d7:ec:05:01:2b:71:10:2a:15:b9:62:c1:01:21:b1:13:84: 47:97:6c:89:ab:9a:fb:3f:35:00:6e:bd:ec:c5:67:fb:d9:5c: 44:b1:0b:25:68:75:aa:f1:9e:02:37:96:34:e4:72:93:03:b3: 89:0f:d1:07:96:dc:dd:42:20:38:6a:d9:07:da:1f:85:57:6e: d5:9c:69:5d:ed:fd:5b:83:99:db:79:9d:a5:56:1a:56:29:8f: b7:7f:36:c2:c2:26:bc:ee:c3:cf:92:95:75:b0:b4:64:7a:14: 8f:47:a8:fc:c6:51:8e:fc:d0:20:fa:a3:2c:68:17:84:be:43: d1:a1:ef:5a:30:36:ab:4e:5c:76:61:20:86:3a:c4:2d:53:30: 2e:94:d1:f4:b1:97:2b:41:e7:1f:2d:99:08:30:f0:66:74:a7: 03:f6:b8:47:15:21:22:74:16:3d:27:9c:b2:b2:77:d1:0b:ce: 7b:24:3e:20:10:c4:9c:06:37:bd:26:d5:dc:07:15:6e:fc:fd: f0:be:74:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebL/8X/EXijhrCSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk YzYyZDI4MzItY2NkNS00MWI3LTkwYWUtOGNiYjg2NTcxMjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVT4t7PkrggjWWOVwKmSkssUXTqg8ZavnKFU vDAmYdEM3JGhohJ2U8BAcFkDKyHch0x8zHZs7VtABji1MEQqXav0USoooG8geT3v OKC9fhFqC4nhlXdtfaduv/5zx2TPtevFXOqq6XpJF3+c0gth6apCNlMTe1k9Pu1O NdzF3YkZZu/GoWWQ0lctdKEd723UWp7WDDS1T+k7fHRkZ9VVbxX/DrjHSjJhH8Pi Q7JKsGKLMU6or0Pd0MFrj4tnOdIR2EiPSnd41l+lyw2Gl78IT59XX32wVnZBZI0j PUG2fvBogsm5IkHAM9xJ9y0fDE/5RphfloMNWcocy3+nsGjytQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFA/WjYZ1fFxsQXWuYCfSqLsoX93/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQ1MDhkYTQtMTA3ZC0z YmYxLWFjZDktM2U4NTI3MTUwMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQeT MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGSdaLsDlg/lPAyOpJSFUGpFVXzXWzFEFgKPa/kcpXEgPPCRXpk0 ynfyLewE1ad0hugpTfIOpx3X7AUBK3EQKhW5YsEBIbEThEeXbImrmvs/NQBuvezF Z/vZXESxCyVodarxngI3ljTkcpMDs4kP0QeW3N1CIDhq2QfaH4VXbtWcaV3t/VuD mdt5naVWGlYpj7d/NsLCJrzuw8+SlXWwtGR6FI9HqPzGUY780CD6oyxoF4S+Q9Gh 71owNqtOXHZhIIY6xC1TMC6U0fSxlytB5x8tmQgw8GZ0pwP2uEcVISJ0Fj0nnLKy d9ELznskPiAQxJwGN70m1dwHFW78/fC+dA0= -----END CERTIFICATE-----Generated at Sun Apr 6 20:41:53 2025 by rpki-client