$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da709351-37d4-38ed-9104-193d172dda48.roa File: da709351-37d4-38ed-9104-193d172dda48.roa (raw, json) Hash identifier: rRbvcg/qgyn5TcHRLr3ncZ5SJfkQ+p5Lxwge5Y2tQ5Q= Subject key identifier: 71:9F:F0:14:71:21:48:C5:6C:BE:1B:E3:0E:20:AB:E0:49:BE:1F:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6E1A6030D4B80808953A40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da709351-37d4-38ed-9104-193d172dda48.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33657 IP address blocks: 2001:559:80b5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6e:1a:60:30:d4:b8:08:08:95:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=25793fcf-ba61-4745-a8c6-52b6f8cd6769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:56:27:3a:6d:f8:e5:56:2c:4b:9d:87:3b:a6: 60:e8:33:4f:c4:2a:04:67:0c:af:2b:f8:11:13:c3: 97:17:b8:5d:72:b8:3e:6c:1f:13:0a:e9:09:9d:ca: 49:04:69:0b:d7:41:21:96:d3:67:89:34:8f:ec:01: 71:fa:fb:cf:6b:d0:c3:20:c0:41:4f:31:d5:58:40: 65:ae:6e:87:cb:a5:8a:e1:9e:da:34:83:b7:5a:c5: f2:ab:2d:7a:85:b0:d4:41:45:29:53:6e:58:fb:17: 73:0c:91:19:f9:57:71:06:e0:80:59:b6:bd:06:54: 48:1e:70:d3:55:50:a7:21:97:06:64:50:7d:34:b4: 6a:28:a6:45:81:fd:52:67:1b:1b:00:38:4f:2f:ed: 5f:08:04:04:14:83:fb:d5:9d:9e:73:66:f4:d0:4a: 9f:6a:71:94:d0:68:6a:0d:24:66:54:16:0e:ef:c1: c4:92:f0:39:40:75:b2:25:3c:c3:cf:62:10:75:ec: 5e:dd:61:6a:bf:cc:d0:d1:de:b3:af:e5:12:b1:6a: 8f:a8:30:14:a6:c9:0c:2d:6a:b3:44:d1:d0:ee:f0: 75:e0:29:0c:f6:23:cc:84:f1:c7:40:61:ac:aa:b7: a4:da:86:8d:19:fa:12:98:0b:cd:a8:9c:9b:b9:ea: 31:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9F:F0:14:71:21:48:C5:6C:BE:1B:E3:0E:20:AB:E0:49:BE:1F:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da709351-37d4-38ed-9104-193d172dda48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:80b5::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:96:75:26:3a:7c:6a:b3:3e:af:06:1b:e5:6b:38:6a:9e:b8: 95:e5:32:fd:d3:9c:25:51:0d:35:7a:4e:39:b6:af:ef:8d:53: 63:50:b0:25:52:0b:c1:3c:b8:a7:ab:e5:5b:67:e0:0c:e9:a9: 64:bf:64:c6:be:57:3f:a3:58:77:a4:4d:fa:76:8c:d7:ce:ff: b2:a8:84:aa:1f:17:ab:51:22:8c:52:c7:e4:83:1a:3e:77:1c: a2:f1:40:b0:99:58:bd:94:91:64:82:ea:af:2e:16:0c:ba:4d: 05:aa:0b:f8:b2:fc:c1:32:59:03:27:99:9b:45:e7:8d:26:11: 7f:2b:5c:c6:7b:9b:8b:67:f0:7a:ce:e9:0e:ec:88:18:90:7d: 23:f2:3a:3f:3e:2b:1c:ab:3f:7d:97:6d:22:fe:28:80:5f:75: 66:ac:1d:fc:53:47:65:2d:2c:09:74:ba:5d:fd:67:c6:38:f7: 3e:b2:ea:73:93:63:62:86:c0:91:48:e3:99:ca:e5:b7:ae:bf: 61:c5:56:67:d1:4d:d3:97:d0:5e:d7:ca:41:fb:30:c8:0b:a7: 82:56:17:87:46:3c:8d:93:a5:29:c1:c3:55:20:b7:ae:50:6b: 74:52:82:9f:8b:03:69:69:48:0a:63:b5:b1:e9:88:57:21:be: b0:ef:03:55 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebhpgMNS4CAiVOkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk MjU3OTNmY2YtYmE2MS00NzQ1LWE4YzYtNTJiNmY4Y2Q2NzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVYnOm345VYsS52HO6Zg6DNPxCoEZwyvK/gR E8OXF7hdcrg+bB8TCukJncpJBGkL10EhltNniTSP7AFx+vvPa9DDIMBBTzHVWEBl rm6Hy6WK4Z7aNIO3WsXyqy16hbDUQUUpU25Y+xdzDJEZ+VdxBuCAWba9BlRIHnDT VVCnIZcGZFB9NLRqKKZFgf1SZxsbADhPL+1fCAQEFIP71Z2ec2b00EqfanGU0Ghq DSRmVBYO78HEkvA5QHWyJTzDz2IQdexe3WFqv8zQ0d6zr+USsWqPqDAUpskMLWqz RNHQ7vB14CkM9iPMhPHHQGGsqrek2oaNGfoSmAvNqJybueox/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHGf8BRxIUjFbL4b4w4gq+BJvh9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE3MDkzNTEtMzdkNC0z OGVkLTkxMDQtMTkzZDE3MmRkYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYC1 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIOWdSY6fGqzPq8GG+VrOGqeuJXlMv3TnCVRDTV6Tjm2r++NU2NQ sCVSC8E8uKer5Vtn4AzpqWS/ZMa+Vz+jWHekTfp2jNfO/7KohKofF6tRIoxSx+SD Gj53HKLxQLCZWL2UkWSC6q8uFgy6TQWqC/iy/MEyWQMnmZtF540mEX8rXMZ7m4tn 8HrO6Q7siBiQfSPyOj8+KxyrP32XbSL+KIBfdWasHfxTR2UtLAl0ul39Z8Y49z6y 6nOTY2KGwJFI45nK5beuv2HFVmfRTdOX0F7XykH7MMgLp4JWF4dGPI2TpSnBw1Ug t65Qa3RSgp+LA2lpSApjtbHpiFchvrDvA1U= -----END CERTIFICATE-----Generated at Sun Feb 16 20:22:49 2025 by rpki-client