$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd07fc17-b81c-3849-b539-d33ad2600060.roa File: dd07fc17-b81c-3849-b539-d33ad2600060.roa (raw, json) Hash identifier: n+BpU30k4NGIenFqsQEkVT7a/ZCYajHT0yquCtqRrXI= Subject key identifier: E9:D9:D5:35:C9:0D:B7:5D:2C:B6:2C:34:90:92:34:0F:1F:A2:68:AC Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6DAD42D5A53A0CE2BE3500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd07fc17-b81c-3849-b539-d33ad2600060.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:8521::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:ad:42:d5:a5:3a:0c:e2:be:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f9a01fed-db3e-471f-8e02-2146d6a923bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:7b:05:b4:81:ab:74:8e:61:c6:dd:30:be:98: f3:05:da:4b:1d:7b:26:6e:6e:73:23:9f:22:11:77: 70:36:eb:ae:8f:67:49:fe:3e:81:05:2f:75:f0:7c: 3d:9b:c7:6b:7d:0d:2c:a1:7b:0f:54:1b:7f:58:8e: 0e:84:93:c0:ee:74:d1:ea:04:01:d6:dd:c8:53:d5: ed:8f:03:62:05:2d:42:22:87:4a:b0:3c:be:2c:3b: 5c:cb:95:30:aa:11:64:c1:05:e0:b7:e4:79:27:9f: 1c:10:d4:38:7a:54:9d:e7:c9:8b:e4:ae:b0:d0:fc: 3e:66:d5:88:1d:88:2b:36:77:bc:30:7e:5d:63:5d: 5c:e7:b3:50:2c:75:8d:52:4a:66:73:33:2c:24:7d: 3a:74:8c:0e:20:6e:f1:32:ff:5d:9c:fd:6e:f7:3b: 4b:7a:39:aa:c8:8f:27:51:e5:da:68:34:af:fe:41: f4:65:ee:9c:e2:ee:8d:48:ef:58:cb:2c:87:a6:12: fb:90:97:30:a2:45:08:c9:e7:cc:d8:6a:5d:e4:2d: 69:fb:4b:a3:0b:0c:06:55:83:77:aa:b6:ab:08:a0: e9:e0:ab:26:ce:3b:18:ab:b5:fb:fc:25:e6:ea:d7: b6:80:47:72:33:44:4f:09:1f:b5:2c:65:13:d7:e2: 7a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D9:D5:35:C9:0D:B7:5D:2C:B6:2C:34:90:92:34:0F:1F:A2:68:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd07fc17-b81c-3849-b539-d33ad2600060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8521::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c6:a9:98:8b:3e:d6:a6:ab:ce:fe:ce:ce:8b:97:84:02:5d: f6:5c:e5:01:b7:ff:5c:97:6b:d6:45:06:f2:f5:bc:e9:8e:4a: 86:d6:5a:d4:bd:cb:4b:29:86:01:9b:d3:f6:83:8f:e5:ea:bf: 7f:37:db:7d:54:a0:b5:9e:55:79:4b:67:ce:5d:ba:25:f9:87: 98:b5:76:9e:57:cb:74:46:d8:ab:62:0c:ed:73:45:56:59:c0: 84:97:5a:c6:83:af:67:a4:f6:8c:8c:5d:df:3b:be:8d:2a:46: 24:3a:ea:e2:37:bb:ed:6b:6b:c8:14:64:80:26:39:af:49:e9: 44:78:c4:ff:79:2c:7f:0e:a7:ff:55:42:7d:1d:a3:64:10:06: 08:eb:8d:cf:65:d6:04:93:62:38:95:3c:ce:1f:78:96:0e:6a: b7:c8:0c:79:4c:a1:b4:f5:1b:c1:e9:3d:58:ff:2f:eb:cf:c1: 8b:ea:00:2a:04:25:a6:33:38:77:38:da:7a:7c:1d:20:0b:39: cc:44:ad:fc:57:2d:3b:6d:66:35:68:b9:e0:41:20:fb:97:f1: b7:e9:45:fd:20:b1:2e:81:38:df:4c:49:b9:69:38:f8:ff:0e: 82:16:2b:ca:20:0b:9e:6e:31:e0:d5:73:b3:f7:ed:ea:5b:04: 24:fd:7f:71 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEieba1C1aU6DOK+NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjlhMDFmZWQtZGIzZS00NzFmLThlMDItMjE0NmQ2YTkyM2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknsFtIGrdI5hxt0wvpjzBdpLHXsmbm5zI58i EXdwNuuuj2dJ/j6BBS918Hw9m8drfQ0soXsPVBt/WI4OhJPA7nTR6gQB1t3IU9Xt jwNiBS1CIodKsDy+LDtcy5UwqhFkwQXgt+R5J58cENQ4elSd58mL5K6w0Pw+ZtWI HYgrNne8MH5dY11c57NQLHWNUkpmczMsJH06dIwOIG7xMv9dnP1u9ztLejmqyI8n UeXaaDSv/kH0Ze6c4u6NSO9YyyyHphL7kJcwokUIyefM2Gpd5C1p+0ujCwwGVYN3 qrarCKDp4KsmzjsYq7X7/CXm6te2gEdyM0RPCR+1LGUT1+J6yQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOnZ1TXJDbddLLYsNJCSNA8fomisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGQwN2ZjMTctYjgxYy0z ODQ5LWI1MzktZDMzYWQyNjAwMDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYUh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHHGqZiLPtamq87+zs6Ll4QCXfZc5QG3/1yXa9ZFBvL1vOmOSobW WtS9y0sphgGb0/aDj+Xqv383231UoLWeVXlLZ85duiX5h5i1dp5Xy3RG2KtiDO1z RVZZwISXWsaDr2ek9oyMXd87vo0qRiQ66uI3u+1ra8gUZIAmOa9J6UR4xP95LH8O p/9VQn0do2QQBgjrjc9l1gSTYjiVPM4feJYOarfIDHlMobT1G8HpPVj/L+vPwYvq ACoEJaYzOHc42np8HSALOcxErfxXLTttZjVoueBBIPuX8bfpRf0gsS6BON9MSblp OPj/DoIWK8ogC55uMeDVc7P37epbBCT9f3E= -----END CERTIFICATE-----Generated at Wed Apr 9 22:19:46 2025 by rpki-client