$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8541c3-331f-329d-8c29-5d657446fc0e.roa File: dc8541c3-331f-329d-8c29-5d657446fc0e.roa (raw, json) Hash identifier: YASx/CbKJOZIptGZ4qw4RHqmDsG1ndjDs6qgsQsNmz4= Subject key identifier: C2:CF:EA:25:A6:3A:E0:73:BA:87:56:BC:91:93:5A:2E:FD:7B:16:00 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C680AF10BA4E8C6888F00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8541c3-331f-329d-8c29-5d657446fc0e.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 2601:440::/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:68:0a:f1:0b:a4:e8:c6:88:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f4545b92-4394-418f-96d9-0762a66680cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8d:fa:65:68:9d:8c:c3:3f:fd:2b:10:b7:16: d0:dd:7f:e9:d2:e2:35:a3:2a:61:f5:04:7d:1d:40: 0c:65:63:9c:38:59:45:ad:a5:db:55:57:6d:2c:09: c5:d4:86:0f:0d:fc:f0:50:f2:10:78:ec:7a:77:04: 8b:2e:49:40:03:33:39:78:bb:80:83:5b:77:b2:85: 89:f8:a7:a7:4f:12:dc:f9:d4:6c:d5:0d:76:89:45: 44:86:68:f3:ac:12:3f:90:66:16:3c:bd:3d:39:b5: 94:aa:59:38:bc:fe:11:49:63:a6:74:11:11:71:ab: 1c:d3:0d:5f:dd:10:9d:4d:f9:2a:12:05:a8:34:b4: aa:8d:8f:10:13:80:af:ee:c7:97:25:db:47:b2:b4: cd:6c:21:cd:26:36:12:6a:1b:99:02:13:23:44:78: b8:1a:a6:fa:7d:ef:fc:9f:29:e9:24:dd:50:b3:02: d9:ea:5b:14:bb:67:b6:32:ac:b4:aa:33:2d:b6:76: 27:7f:3f:52:df:23:b3:b3:d1:4e:db:9c:30:b9:9c: 4a:12:c8:40:91:9e:2e:d3:03:ac:93:e2:97:21:b9: 15:93:7c:39:ef:83:88:f0:13:ce:bf:e3:00:25:9b: 8e:f0:30:24:90:b9:76:80:89:d9:2e:33:43:f1:5b: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CF:EA:25:A6:3A:E0:73:BA:87:56:BC:91:93:5A:2E:FD:7B:16:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc8541c3-331f-329d-8c29-5d657446fc0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2601:440::/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:e1:ed:08:c0:dd:65:e3:63:0d:f0:07:4b:76:8e:74:90:da: 8f:76:52:e5:49:da:9b:45:41:59:26:62:f1:c1:5e:b1:93:55: 7b:72:8c:59:71:05:e1:0d:8f:c0:ee:5a:93:b7:bd:c8:65:cd: 96:2e:73:3e:3b:ed:7d:e7:2c:d2:4c:2d:f8:52:96:11:a2:0e: 05:ab:a7:be:96:af:fd:2d:da:55:88:bc:2c:14:2f:54:54:7b: d0:3d:41:5e:01:da:e7:28:e7:cf:82:c7:4e:07:48:70:6c:a2: 64:88:af:76:1b:5a:44:4d:2b:54:be:f4:96:ae:06:26:ad:d5: 1b:24:37:d4:60:66:ed:1f:c2:0d:43:59:5f:ed:aa:84:de:dd: d7:6d:c1:49:fd:0a:57:ce:30:02:2d:8a:72:92:e7:7f:f6:f8: a7:d2:e5:ef:53:2e:d1:83:93:fb:d3:5b:47:de:07:24:58:7f: dd:6b:a6:67:08:5c:4d:e8:2e:f4:be:2a:66:ad:72:6f:4e:89: 48:79:8f:65:d0:b6:c1:b2:e5:44:6d:b1:b3:85:0a:9f:2b:c1: 06:c3:86:af:4a:5a:6f:ab:0a:3b:b0:d1:63:6c:ae:ab:3d:11: 6f:ce:6b:0f:24:7f:2e:1d:d1:dc:3c:4a:24:d2:da:7f:74:ea: e0:9b:47:9a -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEiebGgK8Quk6MaIjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjQ1NDViOTItNDM5NC00MThmLTk2ZDktMDc2MmE2NjY4MGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhI36ZWidjMM//SsQtxbQ3X/p0uI1oyph9QR9 HUAMZWOcOFlFraXbVVdtLAnF1IYPDfzwUPIQeOx6dwSLLklAAzM5eLuAg1t3soWJ +KenTxLc+dRs1Q12iUVEhmjzrBI/kGYWPL09ObWUqlk4vP4RSWOmdBERcasc0w1f 3RCdTfkqEgWoNLSqjY8QE4Cv7seXJdtHsrTNbCHNJjYSahuZAhMjRHi4Gqb6fe/8 nynpJN1QswLZ6lsUu2e2Mqy0qjMttnYnfz9S3yOzs9FO25wwuZxKEshAkZ4u0wOs k+KXIbkVk3w574OI8BPOv+MAJZuO8DAkkLl2gInZLjND8VvWVQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMLP6iWmOuBzuodWvJGTWi79exYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGM4NTQxYzMtMzMxZi0z MjlkLThjMjktNWQ2NTc0NDZmYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUGJgEEQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBS4e0IwN1l42MN8AdLdo50kNqPdlLlSdqbRUFZJmLxwV6xk1V7coxZ cQXhDY/A7lqTt73IZc2WLnM+O+195yzSTC34UpYRog4Fq6e+lq/9LdpViLwsFC9U VHvQPUFeAdrnKOfPgsdOB0hwbKJkiK92G1pETStUvvSWrgYmrdUbJDfUYGbtH8IN Q1lf7aqE3t3XbcFJ/QpXzjACLYpykud/9vin0uXvUy7Rg5P701tH3gckWH/da6Zn CFxN6C70vipmrXJvTolIeY9l0LbBsuVEbbGzhQqfK8EGw4avSlpvqwo7sNFjbK6r PRFvzmsPJH8uHdHcPEok0tp/dOrgm0ea -----END CERTIFICATE-----Generated at Mon Apr 7 06:29:43 2025 by rpki-client