$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81e0b1b-abc9-3755-85c9-2604530a5a2d.roa File: d81e0b1b-abc9-3755-85c9-2604530a5a2d.roa (raw, json) Hash identifier: whvi//hIEhdDB59Lm47iTrcaBzxWF+F7UyLz+s444hw= Subject key identifier: 1C:AB:A5:0C:F1:7B:A3:35:E1:9A:C9:4B:29:EE:AA:68:19:D8:B2:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C86A4D9DC45E2E33AA380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81e0b1b-abc9-3755-85c9-2604530a5a2d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:80e2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:86:a4:d9:dc:45:e2:e3:3a:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9a2ecdb3-637c-47a8-8f94-c0040719bfc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:3a:33:b8:ea:89:d3:ef:9a:27:de:e0:e5: 6d:23:c8:01:a3:5c:b4:4d:92:88:54:63:03:b3:ea: 2c:af:17:cf:6e:61:67:84:05:a0:f9:4c:59:38:33: 79:42:e7:36:51:95:6d:d9:41:69:fb:32:b3:1a:57: 53:b5:8a:d2:cc:7a:6c:3a:2e:87:3d:65:61:62:75: 59:eb:6e:ad:2b:d6:20:cc:93:9b:f1:cf:49:f9:1c: 8c:17:4e:a2:75:6d:f0:28:dd:d2:9e:c9:d2:9a:57: 86:c9:d9:09:74:d1:82:c2:56:96:03:5a:51:51:85: f3:76:e2:24:f0:91:f0:d5:df:37:75:8f:15:be:c4: fc:55:0a:33:dd:ab:15:97:90:04:46:97:f8:d5:d5: 06:4b:05:bc:06:e7:29:e7:16:f6:bd:11:5f:3b:3f: 76:2a:41:1b:e9:b3:18:46:7d:34:cd:3a:71:5d:01: 88:94:08:5f:5c:ce:3f:96:e3:de:4b:cb:95:94:fd: 37:48:62:34:4b:94:86:3f:d5:48:d8:48:3a:4c:35: a1:a8:9b:a5:2d:7f:8b:a8:2f:fe:9f:66:ab:d4:1d: bc:33:5a:eb:96:b5:dd:50:65:a2:91:59:05:1c:01: ff:73:1c:b3:a5:a8:9a:2f:78:51:b4:e2:15:a7:f4: 74:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AB:A5:0C:F1:7B:A3:35:E1:9A:C9:4B:29:EE:AA:68:19:D8:B2:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d81e0b1b-abc9-3755-85c9-2604530a5a2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:80e2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:3e:50:01:43:50:e3:fa:d8:ba:05:c5:a6:87:17:d9:c3:53: 4c:32:71:29:ea:92:bd:64:c2:5f:20:d5:41:27:ab:14:8c:f4: 35:d5:d5:e6:76:45:a1:c8:42:da:7c:1e:07:8d:88:96:b3:cf: bd:ed:32:62:47:80:db:50:63:1b:db:15:c4:db:0a:e5:bf:72: 8c:6b:03:1a:00:8d:85:51:58:07:0c:70:68:5a:30:1a:0a:51: 46:19:f5:eb:6d:1c:33:30:84:4c:cd:05:c9:f6:ac:cf:00:a0: 2b:ef:be:91:1c:b8:fe:bd:22:f3:6e:ef:75:e6:1d:34:2a:61: 76:10:e4:b4:f9:10:9d:15:a5:e4:c6:9b:fe:28:c4:40:da:c7: f1:8c:56:10:50:09:06:fe:f6:03:d8:4f:de:4b:dc:e5:cf:20: 5f:97:62:a2:53:9b:30:c1:af:99:6e:17:9a:fd:07:63:c1:b9: 5e:2c:16:ec:4c:43:d7:b2:16:ed:57:36:62:80:ce:1c:b5:e6: 1d:b9:42:d9:c1:c0:02:77:cb:0f:3f:b5:16:e1:4e:2c:7f:c1: 47:ab:08:b5:0f:b3:73:c5:90:35:61:7d:ea:e9:59:35:41:cf: db:01:8a:5f:f5:45:45:b5:8c:fc:e2:22:8e:a9:c9:87:09:db: 29:fd:b5:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebIak2dxF4uM6o4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OWEyZWNkYjMtNjM3Yy00N2E4LThmOTQtYzAwNDA3MTliZmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBE6M7jqidPvmife4OVtI8gBo1y0TZKIVGMD s+osrxfPbmFnhAWg+UxZODN5Quc2UZVt2UFp+zKzGldTtYrSzHpsOi6HPWVhYnVZ 626tK9YgzJOb8c9J+RyMF06idW3wKN3SnsnSmleGydkJdNGCwlaWA1pRUYXzduIk 8JHw1d83dY8VvsT8VQoz3asVl5AERpf41dUGSwW8Bucp5xb2vRFfOz92KkEb6bMY Rn00zTpxXQGIlAhfXM4/luPeS8uVlP03SGI0S5SGP9VI2Eg6TDWhqJulLX+LqC/+ n2ar1B28M1rrlrXdUGWikVkFHAH/cxyzpaiaL3hRtOIVp/R0YwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFByrpQzxe6M14ZrJSynuqmgZ2LJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDgxZTBiMWItYWJjOS0z NzU1LTg1YzktMjYwNDUzMGE1YTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYDi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALE+UAFDUOP62LoFxaaHF9nDU0wycSnqkr1kwl8g1UEnqxSM9DXV 1eZ2RaHIQtp8HgeNiJazz73tMmJHgNtQYxvbFcTbCuW/coxrAxoAjYVRWAcMcGha MBoKUUYZ9ettHDMwhEzNBcn2rM8AoCvvvpEcuP69IvNu73XmHTQqYXYQ5LT5EJ0V peTGm/4oxEDax/GMVhBQCQb+9gPYT95L3OXPIF+XYqJTmzDBr5luF5r9B2PBuV4s FuxMQ9eyFu1XNmKAzhy15h25QtnBwAJ3yw8/tRbhTix/wUerCLUPs3PFkDVhferp WTVBz9sBil/1RUW1jPziIo6pyYcJ2yn9tao= -----END CERTIFICATE-----Generated at Sun Apr 6 20:36:48 2025 by rpki-client