$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e35d0700-9c9f-382f-9316-b46a5dcea50f.roa File: e35d0700-9c9f-382f-9316-b46a5dcea50f.roa (raw, json) Hash identifier: pn8meSgdnAh4AqlaY6LO3vs7qclm+6BSRuXjjTynywk= Subject key identifier: 89:D6:76:4D:48:DC:C5:A5:08:34:C4:3F:BF:B7:C9:83:B1:31:D0:A6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C3E3EEA2E481EEAD8D93E Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e35d0700-9c9f-382f-9316-b46a5dcea50f.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:c432::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:3e:3e:ea:2e:48:1e:ea:d8:d9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=cb0454dd-21a5-434c-a841-6d0562df6486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9f:b3:7d:38:6e:05:48:12:86:fb:8c:9d:c7: 70:85:e5:60:ca:ea:a8:47:63:a6:e8:af:cc:d3:49: d9:91:9c:20:e4:57:7e:2c:5b:0f:de:c2:48:6a:89: 87:99:5d:e0:3c:84:b1:f1:1b:54:e3:94:28:ec:a8: c4:ba:f8:a7:4c:53:98:08:7b:2e:13:6e:d0:f6:78: c2:7b:6b:1f:3d:81:49:17:57:87:ae:3f:c7:b1:35: 8b:15:c4:eb:ec:65:c9:02:35:bd:d4:3b:f6:4f:f3: 1e:ea:09:72:2b:d3:64:02:51:98:df:81:5a:8b:6d: 22:53:f2:17:0a:cc:47:15:90:a9:c1:12:ad:4f:65: d2:fc:32:e3:9c:9f:f9:0e:22:f0:f7:3a:bf:07:39: 47:dd:aa:36:ac:3c:9f:c7:dc:41:c4:19:53:a1:c4: 65:c3:68:43:44:91:ab:a4:ac:f3:25:6e:5e:be:0f: 0e:1a:c7:42:29:85:39:a6:f3:3a:f4:7f:3d:f8:b1: 95:99:57:6a:6f:40:18:35:9b:86:f6:80:60:b1:90: dd:bc:bf:51:60:c3:29:46:98:bc:eb:13:a8:bc:a1: 5f:a9:5c:52:e5:4b:fb:2e:8f:67:b5:4e:64:76:6c: 76:23:00:d6:a1:25:68:d1:95:34:9b:02:d3:15:23: d6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D6:76:4D:48:DC:C5:A5:08:34:C4:3F:BF:B7:C9:83:B1:31:D0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e35d0700-9c9f-382f-9316-b46a5dcea50f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c432::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:17:e5:16:7d:6d:b7:11:bd:2a:f8:e4:ba:01:a2:eb:53:22: 66:ae:22:e7:f3:83:0b:a1:ca:6b:fc:da:bd:64:84:18:77:70: 51:b0:1e:eb:2f:cc:c8:8c:9f:7b:65:10:be:27:18:5e:41:f8: 18:6d:fd:66:1e:61:12:46:2d:5f:c9:8e:56:e7:95:11:13:e4: ac:9c:5a:89:f8:3e:86:1c:b6:fd:fc:2e:c1:10:e9:0d:d7:ae: f2:03:1d:ed:26:85:2f:d0:fa:83:d6:76:e4:aa:d4:84:5a:66: 0a:0e:d3:c9:7f:29:a1:60:8a:f3:bf:a5:b6:19:eb:68:d2:10: 90:24:8b:a6:b3:92:30:91:f0:64:25:39:23:17:9f:82:fb:81: 39:8b:ec:f7:79:42:e5:2c:d5:81:89:1e:35:5d:95:60:ff:fc: 6c:fd:b5:a1:89:44:56:84:51:77:35:c1:0a:3e:38:f7:ef:99: 85:d7:97:25:b8:50:29:97:7c:e7:a7:7e:60:90:1d:05:cc:63: 93:33:63:b3:53:ac:23:68:34:a1:fa:52:79:cc:3e:c2:21:9d: dc:37:4f:19:92:60:71:de:31:f3:6f:da:43:84:a3:53:6f:d4: 23:bc:4d:e9:d6:77:21:31:2d:9e:65:a7:47:da:7d:9b:7f:41: 53:11:ed:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebD4+6i5IHurY2T4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk Y2IwNDU0ZGQtMjFhNS00MzRjLWE4NDEtNmQwNTYyZGY2NDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ+zfThuBUgShvuMncdwheVgyuqoR2Om6K/M 00nZkZwg5Fd+LFsP3sJIaomHmV3gPISx8RtU45Qo7KjEuvinTFOYCHsuE27Q9njC e2sfPYFJF1eHrj/HsTWLFcTr7GXJAjW91Dv2T/Me6glyK9NkAlGY34Fai20iU/IX CsxHFZCpwRKtT2XS/DLjnJ/5DiLw9zq/BzlH3ao2rDyfx9xBxBlTocRlw2hDRJGr pKzzJW5evg8OGsdCKYU5pvM69H89+LGVmVdqb0AYNZuG9oBgsZDdvL9RYMMpRpi8 6xOovKFfqVxS5Uv7Lo9ntU5kdmx2IwDWoSVo0ZU0mwLTFSPWVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFInWdk1I3MWlCDTEP7+3yYOxMdCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTM1ZDA3MDAtOWM5Zi0z ODJmLTkzMTYtYjQ2YTVkY2VhNTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcQy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADQX5RZ9bbcRvSr45LoBoutTImauIufzgwuhymv82r1khBh3cFGw HusvzMiMn3tlEL4nGF5B+Bht/WYeYRJGLV/JjlbnlRET5KycWon4PoYctv38LsEQ 6Q3XrvIDHe0mhS/Q+oPWduSq1IRaZgoO08l/KaFgivO/pbYZ62jSEJAki6azkjCR 8GQlOSMXn4L7gTmL7Pd5QuUs1YGJHjVdlWD//Gz9taGJRFaEUXc1wQo+OPfvmYXX lyW4UCmXfOenfmCQHQXMY5MzY7NTrCNoNKH6UnnMPsIhndw3TxmSYHHeMfNv2kOE o1Nv1CO8TenWdyExLZ5lp0fafZt/QVMR7c0= -----END CERTIFICATE-----Generated at Sun Apr 6 09:38:01 2025 by rpki-client