$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0dc689c-4d87-3949-9477-3309a9a1d019.roa File: e0dc689c-4d87-3949-9477-3309a9a1d019.roa (raw, json) Hash identifier: k86fPaRlsZkaqsU8+WPB3jh2wuZCn2Fq+ZR9Nflnf5s= Subject key identifier: 87:FB:2D:3C:7C:0F:A3:8F:BB:93:BB:50:79:43:18:DE:B0:AC:75:55 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848A1361EA933AD88CE2D58D7A0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0dc689c-4d87-3949-9477-3309a9a1d019.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 33657 IP address blocks: 2001:559:a021::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Feb 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:1e:a9:33:ad:88:ce:2d:58:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=5c046366-6fdf-466b-bae4-634e261ac47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:af:31:e2:bb:43:ca:74:3c:d9:a2:9b:03:12: 1b:5e:a1:99:0d:d8:10:55:fd:36:23:df:12:c3:92: 13:77:28:df:ff:9c:25:ca:31:da:a6:5a:36:42:fb: 2f:95:0c:da:ef:99:dd:b1:32:15:d9:f1:a8:aa:1c: 24:04:f6:d1:d7:e6:5c:6e:66:af:5f:86:31:80:41: f1:d2:34:37:90:78:9e:59:7e:91:df:b1:ad:5f:be: a5:1a:fd:34:1f:58:23:7e:86:9f:91:59:66:66:11: 66:0f:93:49:4c:6c:18:48:8c:a6:e8:e7:64:9e:d6: 53:8c:92:0e:85:9b:18:18:9f:b0:e9:72:c0:49:a5: e3:8a:ca:23:e0:87:e6:a0:8c:01:0b:1d:2e:f4:b8: 7e:8f:12:46:ed:93:62:11:b8:c3:bb:17:c6:ab:f8: ab:9b:c7:19:f6:be:c8:00:90:fa:4c:3d:b5:e6:55: 20:c4:ff:29:6a:08:eb:ed:00:b0:78:e2:1e:07:7d: cc:04:2a:13:ba:c8:e7:1d:87:78:1c:4f:5f:83:c9: 62:8f:4f:f4:34:5d:69:10:66:91:11:b3:3e:56:c6: fc:7f:99:0f:0c:99:20:cc:5b:69:52:8a:11:2c:4a: fa:08:bf:12:b2:5a:c2:69:67:e5:24:d3:a4:13:a5: 91:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FB:2D:3C:7C:0F:A3:8F:BB:93:BB:50:79:43:18:DE:B0:AC:75:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e0dc689c-4d87-3949-9477-3309a9a1d019.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a021::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:24:b9:d6:60:55:27:9a:29:e7:61:fd:9e:b2:82:9e:6f:07: 06:f2:26:62:57:1e:7e:71:80:17:9e:a6:5e:7e:33:6f:85:87: 96:c5:94:ca:4e:67:50:4e:e1:f0:06:68:b2:d7:de:da:26:a9: b5:78:88:c0:06:4e:0e:cd:9d:8d:92:0f:2f:b9:b2:ae:57:41: 50:d6:c0:1f:b0:f7:91:9d:f7:75:b1:4b:f7:52:03:60:18:80: 5c:3a:22:a9:99:33:f8:36:36:1d:3c:d5:59:03:9a:b8:66:7f: 6c:cb:16:c0:43:d8:30:75:60:e9:8d:bb:7e:fc:2e:c0:a2:f3: d5:c4:39:95:f5:34:1c:e0:4a:48:2b:35:36:89:e0:e8:4d:61: e8:00:97:d1:0b:0d:46:d0:58:e0:a7:87:f0:68:76:73:06:ff: e6:3f:23:ef:79:6b:3c:6e:94:07:b8:42:56:00:e0:3b:f9:15: 42:55:e9:13:e6:1f:70:16:31:79:60:c0:0a:13:f6:52:fa:16: 8a:72:43:74:08:2d:c9:68:58:dc:b9:46:a2:41:14:ad:97:9c: 3b:3b:71:68:50:16:e7:d7:e5:26:b5:9a:6c:e3:43:46:92:7b: 7a:dd:0b:b9:88:3c:38:d7:99:5e:a2:06:66:ad:58:d0:52:99: 1c:6a:27:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEihNh6pM62Izi1Y16AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NWMwNDYzNjYtNmZkZi00NjZiLWJhZTQtNjM0ZTI2MWFjNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK8x4rtDynQ82aKbAxIbXqGZDdgQVf02I98S w5ITdyjf/5wlyjHaplo2QvsvlQza75ndsTIV2fGoqhwkBPbR1+ZcbmavX4YxgEHx 0jQ3kHieWX6R37GtX76lGv00H1gjfoafkVlmZhFmD5NJTGwYSIym6OdkntZTjJIO hZsYGJ+w6XLASaXjisoj4IfmoIwBCx0u9Lh+jxJG7ZNiEbjDuxfGq/irm8cZ9r7I AJD6TD215lUgxP8pagjr7QCweOIeB33MBCoTusjnHYd4HE9fg8lij0/0NF1pEGaR EbM+Vsb8f5kPDJkgzFtpUooRLEr6CL8SslrCaWflJNOkE6WRrQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIf7LTx8D6OPu5O7UHlDGN6wrHVVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTBkYzY4OWMtNGQ4Ny0z OTQ5LTk0NzctMzMwOWE5YTFkMDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB4kudZgVSeaKedh/Z6ygp5vBwbyJmJXHn5xgBeepl5+M2+Fh5bF lMpOZ1BO4fAGaLLX3tomqbV4iMAGTg7NnY2SDy+5sq5XQVDWwB+w95Gd93WxS/dS A2AYgFw6IqmZM/g2Nh081VkDmrhmf2zLFsBD2DB1YOmNu378LsCi89XEOZX1NBzg SkgrNTaJ4OhNYegAl9ELDUbQWOCnh/BodnMG/+Y/I+95azxulAe4QlYA4Dv5FUJV 6RPmH3AWMXlgwAoT9lL6FopyQ3QILcloWNy5RqJBFK2XnDs7cWhQFufX5Sa1mmzj Q0aSe3rdC7mIPDjXmV6iBmatWNBSmRxqJ8g= -----END CERTIFICATE-----Generated at Sun Feb 16 20:44:05 2025 by rpki-client