$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de2e7c22-e336-3dd6-8739-e4037cb06c9d.roa File: de2e7c22-e336-3dd6-8739-e4037cb06c9d.roa (raw, json) Hash identifier: qApHS2nItsapXlnXPak7lTIgHukhV83y+u/ffplls4o= Subject key identifier: F3:8B:6E:99:6E:08:F7:98:00:FF:89:A8:64:D9:21:F5:DD:4F:7F:60 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C3EDE4BF3EF6044B66C10 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de2e7c22-e336-3dd6-8739-e4037cb06c9d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:c4b2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:3e:de:4b:f3:ef:60:44:b6:6c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=9b53e9a6-3d7a-4faa-80e3-b5babeb65379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8e:69:e5:f1:6f:ca:83:9c:29:e7:ff:90:f1: 01:69:3d:83:17:85:88:31:2d:82:92:e9:a9:2a:59: e3:28:6e:0a:37:3d:81:17:ab:dc:7f:d9:7b:fb:de: a7:25:00:76:77:43:f1:53:6f:d6:0e:7a:9f:33:35: 71:8b:c0:06:89:43:f0:eb:1f:c6:cb:e3:e8:08:dd: ae:7c:18:e1:83:7e:78:49:2f:58:2d:14:c9:e1:3e: b4:67:7c:70:b5:b3:3c:f2:76:b5:a0:f8:ea:b9:5f: e7:58:ea:19:6b:23:1b:37:31:bb:16:9f:e2:cf:7a: 5e:58:d6:32:78:82:5b:f6:16:88:8b:92:1d:b4:60: 64:d2:e8:a4:9d:9b:a1:68:e9:4c:91:3e:a0:59:7e: 72:4e:c2:35:c2:ef:ab:81:1f:30:38:32:4b:93:7f: bc:a8:13:7a:dd:48:1d:b7:6f:4c:41:c9:2f:a9:51: 98:91:92:b1:c2:c5:c1:37:b2:0c:3f:8f:50:65:f0: 7a:6d:1f:1b:e9:b5:fd:4c:36:1d:51:b8:50:20:9d: 79:79:00:57:6e:a7:39:01:52:9d:06:0e:d6:72:fc: 5f:9e:9c:4e:9a:06:c0:5b:d8:2e:37:57:32:26:3c: 21:1b:12:0c:29:7d:26:02:b1:ba:c7:d3:c6:da:b1: de:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8B:6E:99:6E:08:F7:98:00:FF:89:A8:64:D9:21:F5:DD:4F:7F:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de2e7c22-e336-3dd6-8739-e4037cb06c9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c4b2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:b9:f2:c1:f3:3f:b5:4f:e9:17:5b:49:4f:c8:df:3f:48:d7: 33:33:70:59:0c:40:ba:53:c1:b7:82:5b:91:54:19:98:4f:ec: 71:a1:16:ed:19:b0:28:8f:15:70:69:eb:d3:0d:5f:f0:a5:11: a4:6c:6d:87:20:ac:4c:90:c7:f0:cc:d5:73:94:70:6d:22:09: 67:9b:27:07:1e:56:65:8a:5c:f5:53:95:da:0c:1e:8a:f8:92: 5d:5a:67:70:5d:25:38:a2:ab:c3:a5:26:a3:88:ef:c2:b9:b3: 09:94:77:8e:58:9a:34:c3:34:46:8e:4f:42:c9:8f:13:3d:e8: b2:c5:7f:af:3e:97:ec:74:03:49:74:17:87:b9:83:60:74:44: 80:96:c3:b8:ce:fa:71:58:29:21:f5:7a:62:20:6d:f1:63:84: e3:2e:e3:fb:ee:b2:77:d7:89:54:82:85:e1:15:c1:cd:85:2a: a0:20:25:bc:2d:e5:38:ca:9d:b4:5b:fb:f4:b0:6a:70:f9:c7: c4:0d:d7:7b:5a:3d:14:a3:d4:e6:cf:a2:db:57:37:4e:d0:d0: 76:a8:41:cc:c1:6d:df:58:7e:ee:5d:0b:6d:58:8c:55:b1:50: a3:d4:da:93:83:c3:57:b1:8d:e1:47:73:aa:db:53:8e:02:d7: 9c:c9:c4:5a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebD7eS/PvYES2bBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk OWI1M2U5YTYtM2Q3YS00ZmFhLTgwZTMtYjViYWJlYjY1Mzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY5p5fFvyoOcKef/kPEBaT2DF4WIMS2Ckump KlnjKG4KNz2BF6vcf9l7+96nJQB2d0PxU2/WDnqfMzVxi8AGiUPw6x/Gy+PoCN2u fBjhg354SS9YLRTJ4T60Z3xwtbM88na1oPjquV/nWOoZayMbNzG7Fp/iz3peWNYy eIJb9haIi5IdtGBk0uiknZuhaOlMkT6gWX5yTsI1wu+rgR8wODJLk3+8qBN63Ugd t29MQckvqVGYkZKxwsXBN7IMP49QZfB6bR8b6bX9TDYdUbhQIJ15eQBXbqc5AVKd Bg7WcvxfnpxOmgbAW9guN1cyJjwhGxIMKX0mArG6x9PG2rHeMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPOLbpluCPeYAP+JqGTZIfXdT39gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGUyZTdjMjItZTMzNi0z ZGQ2LTg3MzktZTQwMzdjYjA2YzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcSy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMW58sHzP7VP6RdbSU/I3z9I1zMzcFkMQLpTwbeCW5FUGZhP7HGh Fu0ZsCiPFXBp69MNX/ClEaRsbYcgrEyQx/DM1XOUcG0iCWebJwceVmWKXPVTldoM Hor4kl1aZ3BdJTiiq8OlJqOI78K5swmUd45YmjTDNEaOT0LJjxM96LLFf68+l+x0 A0l0F4e5g2B0RICWw7jO+nFYKSH1emIgbfFjhOMu4/vusnfXiVSCheEVwc2FKqAg Jbwt5TjKnbRb+/SwanD5x8QN13taPRSj1ObPottXN07Q0HaoQczBbd9Yfu5dC21Y jFWxUKPU2pODw1exjeFHc6rbU44C15zJxFo= -----END CERTIFICATE-----Generated at Sun Apr 6 12:04:34 2025 by rpki-client