$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3a129b8-971b-3855-8cb0-33741ca2466b.roa File: e3a129b8-971b-3855-8cb0-33741ca2466b.roa (raw, json) Hash identifier: pZ1d6bDJ/FqO6N0vYpTLWZlKojMkzyAeqb8e2Ea5h0g= Subject key identifier: 7D:05:F1:D2:D6:DE:EF:12:80:9B:AF:88:C3:58:51:C1:7B:A9:14:35 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C677DFC37900229326D00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3a129b8-971b-3855-8cb0-33741ca2466b.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 13367 IP address blocks: 2001:559:c23d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:67:7d:fc:37:90:02:29:32:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=877f65e0-f2b1-40d4-ada1-0282f0df31b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:66:12:81:42:41:9f:40:c9:75:16:6a:b8: eb:c8:0d:ee:69:65:40:c0:aa:ff:c2:ea:57:bf:c4: 8c:88:73:ed:db:c0:f4:fc:14:cc:88:f9:cf:c4:f9: 80:13:28:27:58:1a:a7:28:b4:67:ba:ca:db:5e:1f: b6:e8:ee:da:c7:65:ab:29:05:82:52:3a:ca:6d:cd: 51:17:84:c0:92:7e:b6:93:87:9c:df:61:5a:35:c1: b0:6c:f0:fb:ad:7f:f7:fa:dd:6f:22:9d:63:a9:50: 16:cd:34:e4:02:0a:71:91:46:59:fc:2a:26:9d:65: 65:02:2b:7e:2b:62:3f:f6:c5:6a:95:72:e6:6e:bd: 74:b3:30:d0:78:e5:2a:0f:51:7a:5c:be:8f:28:2f: f0:3f:a5:6a:0e:a7:3d:7c:ae:68:49:df:41:c5:ba: 96:4c:38:ea:7b:a2:23:ca:25:0a:53:20:75:92:44: 99:b3:53:db:87:f7:da:8c:58:6c:7d:9b:8e:02:f3: dc:34:18:95:54:06:f4:b2:01:27:57:47:51:95:f9: 1e:65:d7:c4:0a:e4:a3:56:f9:6d:ac:ca:c7:d5:80: 38:a2:38:22:de:5a:1e:74:e3:29:54:5e:8b:6f:34: 0e:42:09:f8:44:e6:86:38:c7:99:ce:05:f0:a1:ec: 4e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:05:F1:D2:D6:DE:EF:12:80:9B:AF:88:C3:58:51:C1:7B:A9:14:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3a129b8-971b-3855-8cb0-33741ca2466b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:c23d::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:29:ca:28:84:12:0c:b8:76:19:e7:5c:05:4a:65:66:29:02: cd:b9:f1:1b:09:fc:47:fa:b8:fb:cf:0b:8f:09:01:1c:c6:bf: 99:9c:41:be:9c:d2:c1:f9:43:a9:94:fb:e6:e3:61:d4:4e:04: a9:ec:d7:33:9d:29:b4:27:68:a3:38:b2:ce:70:bc:a0:c9:9e: 40:7c:72:7e:ec:8d:5e:d9:14:05:3c:78:1a:58:07:7a:f2:b5: ec:d1:bc:4d:32:51:2e:2d:3e:d5:d2:35:4b:16:be:e3:ab:4c: 96:83:bb:cc:67:97:b2:82:2a:cb:20:e3:ec:c5:db:e5:0e:b1: f8:de:f7:3c:89:ea:fb:f7:cc:20:b3:6c:00:66:67:3a:e7:94: f1:fc:29:fb:c3:59:e7:03:cf:90:a6:8c:21:37:e4:53:76:9f: be:df:e5:f1:48:4c:b2:b7:0c:71:ba:be:63:cb:47:d1:1b:a6: 1c:4b:a2:e5:5b:49:b5:53:b2:87:d4:ae:e3:f2:60:be:85:d3: 63:0b:37:bc:5d:7e:10:6d:95:e8:b7:0f:a0:e6:4e:34:b6:c0: e3:12:43:24:74:b5:3e:24:79:48:f7:17:76:58:c3:84:fb:08: 89:dd:da:07:89:c8:21:cb:6c:a4:ea:04:6c:3d:f7:02:f8:f2: b8:12:39:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebGd9/DeQAikybQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ODc3ZjY1ZTAtZjJiMS00MGQ0LWFkYTEtMDI4MmYwZGYzMWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaNmEoFCQZ9AyXUWarjryA3uaWVAwKr/wupX v8SMiHPt28D0/BTMiPnPxPmAEygnWBqnKLRnusrbXh+26O7ax2WrKQWCUjrKbc1R F4TAkn62k4ec32FaNcGwbPD7rX/3+t1vIp1jqVAWzTTkAgpxkUZZ/ComnWVlAit+ K2I/9sVqlXLmbr10szDQeOUqD1F6XL6PKC/wP6VqDqc9fK5oSd9BxbqWTDjqe6Ij yiUKUyB1kkSZs1Pbh/fajFhsfZuOAvPcNBiVVAb0sgEnV0dRlfkeZdfECuSjVvlt rMrH1YA4ojgi3loedOMpVF6LbzQOQgn4ROaGOMeZzgXwoexOmQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH0F8dLW3u8SgJuviMNYUcF7qRQ1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTNhMTI5YjgtOTcxYi0z ODU1LThjYjAtMzM3NDFjYTI0NjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWcI9 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQpyiiEEgy4dhnnXAVKZWYpAs258RsJ/Ef6uPvPC48JARzGv5mc Qb6c0sH5Q6mU++bjYdROBKns1zOdKbQnaKM4ss5wvKDJnkB8cn7sjV7ZFAU8eBpY B3rytezRvE0yUS4tPtXSNUsWvuOrTJaDu8xnl7KCKssg4+zF2+UOsfje9zyJ6vv3 zCCzbABmZzrnlPH8KfvDWecDz5CmjCE35FN2n77f5fFITLK3DHG6vmPLR9EbphxL ouVbSbVTsofUruPyYL6F02MLN7xdfhBtlei3D6DmTjS2wOMSQyR0tT4keUj3F3ZY w4T7CInd2geJyCHLbKTqBGw99wL48rgSOZg= -----END CERTIFICATE-----Generated at Mon Apr 7 06:34:16 2025 by rpki-client