$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5ead74-c6dd-3ee4-8186-79844c7b3320.roa File: da5ead74-c6dd-3ee4-8186-79844c7b3320.roa (raw, json) Hash identifier: k/r+dC5GmVf+7mJLXzZ9y8l/GN5G7Zrn18M2U9mx3LQ= Subject key identifier: 26:4B:FB:4B:53:13:36:84:E3:BA:74:65:CC:2E:D5:F1:1F:8B:78:94 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6BBBDA8761896280AC9280 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5ead74-c6dd-3ee4-8186-79844c7b3320.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7016 IP address blocks: 2001:559:839b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6b:bb:da:87:61:89:62:80:ac:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=ea5d5f8e-a6be-4a0e-8f2e-2fbb7a0875dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:b9:1a:e8:77:77:1d:29:4f:71:5e:ef:20: 2c:ed:07:6d:3b:c7:99:59:e2:d7:40:06:25:a3:92: dc:e2:b4:8d:3f:32:b1:dc:c8:87:f8:1e:06:3b:45: 02:6f:fb:75:f6:6e:83:a9:ad:6c:05:0a:e6:bd:52: 6b:53:fb:0f:4a:65:43:e6:d1:e7:01:04:1f:dc:b9: 9b:d2:d8:84:ad:bb:3b:0c:6d:74:5b:57:90:79:61: 4c:c9:fc:38:cd:ce:91:a3:99:49:36:5f:5a:67:ed: 7b:e2:31:04:18:b2:9d:b3:97:aa:6d:a3:8f:6e:4b: 3d:2e:b9:0c:0d:0e:9d:9a:64:e2:19:c9:c5:cc:19: a9:70:71:88:98:bf:db:ab:26:b3:4f:42:01:4b:f4: 33:81:cc:39:af:43:af:8f:16:31:39:dd:37:dc:66: 0b:5c:1d:cb:07:4b:ca:d3:85:2b:8a:37:c3:16:4f: 11:26:9e:04:69:d6:15:58:01:c7:71:84:f2:38:88: d3:98:cf:65:93:0e:b0:c7:d2:97:8a:3e:5e:64:e3: f7:5f:c0:f8:bc:41:97:1f:62:37:cf:23:dc:d5:97: 1f:97:16:f4:e1:1f:1d:6d:bc:7c:98:2e:57:79:1c: 54:55:e1:27:e8:d2:a3:30:b0:1b:6d:a1:df:9a:78: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4B:FB:4B:53:13:36:84:E3:BA:74:65:CC:2E:D5:F1:1F:8B:78:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da5ead74-c6dd-3ee4-8186-79844c7b3320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:839b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:36:18:65:2e:24:4d:51:1d:08:5c:57:d3:03:26:93:a5:81: 06:f7:6a:05:79:a4:c2:2c:ad:6f:fc:7e:f1:bd:0e:75:67:80: ba:76:f1:0f:b5:f9:e0:54:61:ce:18:0f:28:d8:f6:3c:05:27: d4:34:20:f8:36:17:ea:a5:59:78:d4:44:3f:0a:63:d5:ff:c0: 31:ca:7f:32:9e:2c:85:4f:71:60:bf:82:73:34:2a:91:5b:d7: 52:df:22:f2:3e:32:c9:09:29:28:c3:25:ea:36:60:f8:6e:bc: 75:7c:71:ad:03:f7:38:0a:20:3d:19:8d:85:56:35:96:5b:ee: 96:99:fd:61:b6:74:49:dd:9f:e7:86:9c:4c:3a:9c:0a:f8:47: 04:7b:56:17:70:54:6c:4e:be:f8:01:4b:f9:49:2d:68:00:27: 6e:58:dc:f2:c3:8c:db:74:ef:7e:43:e4:7e:9e:68:7b:29:b3: 9c:e9:27:dd:0b:ca:39:89:1c:98:eb:1f:75:15:ee:fd:6b:b6: 88:fe:32:f1:43:ed:0d:ea:e5:71:9e:03:fd:90:5c:70:97:20: 74:58:6e:9d:81:8c:ae:69:83:84:a8:1b:42:c2:14:09:1b:04: 39:c8:cc:8b:24:d1:f7:be:c5:f2:6f:04:93:cd:0d:58:cc:2f: b6:db:17:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiea7vah2GJYoCskoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZWE1ZDVmOGUtYTZiZS00YTBlLThmMmUtMmZiYjdhMDg3NWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiC5Guh3dx0pT3Fe7yAs7QdtO8eZWeLXQAYl o5Lc4rSNPzKx3MiH+B4GO0UCb/t19m6Dqa1sBQrmvVJrU/sPSmVD5tHnAQQf3Lmb 0tiErbs7DG10W1eQeWFMyfw4zc6Ro5lJNl9aZ+174jEEGLKds5eqbaOPbks9LrkM DQ6dmmTiGcnFzBmpcHGImL/bqyazT0IBS/Qzgcw5r0OvjxYxOd033GYLXB3LB0vK 04UrijfDFk8RJp4EadYVWAHHcYTyOIjTmM9lkw6wx9KXij5eZOP3X8D4vEGXH2I3 zyPc1Zcflxb04R8dbbx8mC5XeRxUVeEn6NKjMLAbbaHfmniWLQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCZL+0tTEzaE47p0Zcwu1fEfi3iUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE1ZWFkNzQtYzZkZC0z ZWU0LTgxODYtNzk4NDRjN2IzMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYOb MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAL82GGUuJE1RHQhcV9MDJpOlgQb3agV5pMIsrW/8fvG9DnVngLp2 8Q+1+eBUYc4YDyjY9jwFJ9Q0IPg2F+qlWXjURD8KY9X/wDHKfzKeLIVPcWC/gnM0 KpFb11LfIvI+MskJKSjDJeo2YPhuvHV8ca0D9zgKID0ZjYVWNZZb7paZ/WG2dEnd n+eGnEw6nAr4RwR7VhdwVGxOvvgBS/lJLWgAJ25Y3PLDjNt0735D5H6eaHsps5zp J90LyjmJHJjrH3UV7v1rtoj+MvFD7Q3q5XGeA/2QXHCXIHRYbp2BjK5pg4SoG0LC FAkbBDnIzIsk0fe+xfJvBJPNDVjML7bbFxs= -----END CERTIFICATE-----Generated at Mon Apr 7 06:24:59 2025 by rpki-client