$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5f3fd5-03fc-3a7d-a461-e2b87b8cabbf.roa File: df5f3fd5-03fc-3a7d-a461-e2b87b8cabbf.roa (raw, json) Hash identifier: 7wvn4zLgGizoskMi+uGxoFkmXeBdQ9xSPIyLKWGZhD8= Subject key identifier: F7:F5:3E:D6:4F:FB:09:91:2B:F3:83:31:C3:D7:28:52:41:78:8C:50 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C85365E0B78D4807992C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5f3fd5-03fc-3a7d-a461-e2b87b8cabbf.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33287 IP address blocks: 2001:559:76e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:85:36:5e:0b:78:d4:80:79:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=837695a9-e22a-426e-8da4-a852bb15a502 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e4:c9:e1:db:e4:9d:f9:79:41:71:14:92:83: 84:da:cc:20:01:10:83:1b:ba:2f:d0:61:c0:b9:54: 62:97:b1:ca:31:94:69:04:10:61:f7:58:4d:8c:84: 2b:9d:38:f8:5a:9b:ea:75:24:5d:99:78:ff:6b:21: 36:5f:41:fa:bb:4d:86:28:50:d1:a8:9a:11:f9:71: 60:19:15:a3:65:c8:c2:a2:18:12:76:1a:c4:e1:3f: ef:8e:95:7b:09:2c:c2:74:02:fc:4a:85:61:99:63: 92:d8:90:25:bd:ed:e8:2e:6f:08:13:84:31:65:4a: b3:7b:2e:29:18:5f:b5:7c:52:13:90:0c:6b:e9:bc: 79:1a:1f:16:12:eb:81:86:e2:27:c1:36:c3:b5:d5: 22:de:4d:3b:04:00:e1:8b:45:b8:84:03:8a:0c:12: 3a:e6:c0:af:19:db:2d:37:fa:6f:bf:1f:c0:f4:79: 0d:65:9e:80:cb:d7:76:c6:be:8d:a7:bc:8a:ea:aa: a3:00:e1:28:69:e3:45:b9:7f:49:03:33:4b:cc:c9: 3e:d2:c2:52:2b:25:0d:34:29:95:7b:fc:5d:e2:84: b9:70:20:ca:ba:a3:c4:00:96:4c:d6:d6:75:fe:4a: 1b:b4:a6:c3:2f:ee:ae:78:b5:a9:29:64:87:98:0c: 89:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F5:3E:D6:4F:FB:09:91:2B:F3:83:31:C3:D7:28:52:41:78:8C:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/df5f3fd5-03fc-3a7d-a461-e2b87b8cabbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:76e::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e4:1e:87:e5:e7:02:c3:bb:46:b8:8a:98:cd:e7:1e:fd:ac: 7f:66:e9:2b:0c:b6:3c:ff:31:1d:1f:ba:f2:24:0a:b2:b0:ad: 38:e4:ad:b4:cc:7a:2c:09:9a:58:a7:83:c2:69:70:fc:15:3e: 5f:aa:4a:7b:23:a7:1a:ad:86:c5:6f:5e:c6:d7:a4:0a:df:3e: 12:77:50:ef:f5:d9:7b:f1:54:03:d7:b2:69:a7:5d:8b:57:d4: 34:27:74:38:45:54:2d:db:d0:7d:34:d8:71:85:ff:a2:06:22: e9:3b:e3:e6:7a:65:fb:d5:fa:1f:53:8e:e0:00:cd:58:62:11: 67:24:9d:68:4e:2f:7e:7d:b2:d0:33:a0:31:21:7d:5f:2f:a5: a7:67:f7:88:73:47:80:18:cd:5f:d3:7e:02:05:a5:f2:b5:b6: 8e:21:df:c3:e7:8d:f6:96:6f:2d:09:d1:c8:47:98:86:39:e2: 7d:aa:7f:9b:9f:1d:0a:81:a4:3c:c3:2f:09:a6:9a:7b:7e:11: 9e:ca:bb:83:ee:ac:af:f2:8e:08:cd:83:30:a5:91:be:04:3c: 70:76:b8:0a:b4:c7:83:05:02:31:b9:33:4f:a2:12:4d:6d:e2: ef:ac:fe:2c:5d:ba:74:8d:e8:74:d0:30:86:c1:91:42:5c:30: a0:7f:27:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebIU2Xgt41IB5ksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ODM3Njk1YTktZTIyYS00MjZlLThkYTQtYTg1MmJiMTVhNTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuTJ4dvknfl5QXEUkoOE2swgARCDG7ov0GHA uVRil7HKMZRpBBBh91hNjIQrnTj4WpvqdSRdmXj/ayE2X0H6u02GKFDRqJoR+XFg GRWjZcjCohgSdhrE4T/vjpV7CSzCdAL8SoVhmWOS2JAlve3oLm8IE4QxZUqzey4p GF+1fFITkAxr6bx5Gh8WEuuBhuInwTbDtdUi3k07BADhi0W4hAOKDBI65sCvGdst N/pvvx/A9HkNZZ6Ay9d2xr6Np7yK6qqjAOEoaeNFuX9JAzNLzMk+0sJSKyUNNCmV e/xd4oS5cCDKuqPEAJZM1tZ1/kobtKbDL+6ueLWpKWSHmAyJrwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPf1PtZP+wmRK/ODMcPXKFJBeIxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGY1ZjNmZDUtMDNmYy0z YTdkLWE0NjEtZTJiODdiOGNhYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQdu MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIDkHofl5wLDu0a4ipjN5x79rH9m6SsMtjz/MR0fuvIkCrKwrTjk rbTMeiwJmling8JpcPwVPl+qSnsjpxqthsVvXsbXpArfPhJ3UO/12XvxVAPXsmmn XYtX1DQndDhFVC3b0H002HGF/6IGIuk74+Z6ZfvV+h9TjuAAzVhiEWcknWhOL359 stAzoDEhfV8vpadn94hzR4AYzV/TfgIFpfK1to4h38PnjfaWby0J0chHmIY54n2q f5ufHQqBpDzDLwmmmnt+EZ7Ku4PurK/yjgjNgzClkb4EPHB2uAq0x4MFAjG5M0+i Ek1t4u+s/ixdunSN6HTQMIbBkUJcMKB/J2g= -----END CERTIFICATE-----Generated at Sun Apr 6 20:14:15 2025 by rpki-client