$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e520794a-c6bf-3fbc-acaf-32803cc95253.roa File: e520794a-c6bf-3fbc-acaf-32803cc95253.roa (raw, json) Hash identifier: k8a5UH3dzSOxQuN3P2CTG8G6otYgxrsXxIK2pIxLP8w= Subject key identifier: 2B:52:5A:DB:6E:B0:6C:00:85:6C:46:D5:77:A7:55:9F:23:AF:F0:C9 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CBD98E235E333FEE04980 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e520794a-c6bf-3fbc-acaf-32803cc95253.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 2001:559:260::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:bd:98:e2:35:e3:33:fe:e0:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f03d0248-c0ef-4785-aead-a28d9ca025db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:31:e4:ad:dd:ba:ce:6b:d3:5a:2e:e9:37:61: f0:69:60:6d:ae:4b:ba:ae:76:f3:83:11:4b:be:d5: a3:76:ee:7a:e1:c8:b5:51:53:70:06:fe:0a:a4:eb: b8:b1:41:2e:a1:bf:66:d5:77:a5:53:3b:59:cc:68: e6:58:a5:eb:e7:a3:09:26:db:26:c0:fe:43:8a:19: 4c:5a:48:41:af:92:3e:6a:e2:05:28:11:2c:ee:72: 9d:24:49:32:f4:65:16:54:42:0e:bf:68:52:50:ef: e2:48:ba:bb:97:f5:47:1c:0a:07:14:0d:be:df:87: 34:ce:56:ef:90:8a:fe:d9:f1:cf:0b:cd:2b:3b:d0: 70:fa:7d:34:fc:f6:7d:44:22:4e:4b:62:7b:91:ea: 2f:ea:6a:85:c5:5a:7d:f8:88:aa:49:cf:17:fc:f3: 22:1f:2d:45:2d:44:c1:64:ed:28:1c:3b:dd:0b:3c: fa:07:63:14:96:c1:7f:99:42:57:20:32:77:27:c5: af:b4:f4:aa:51:04:58:fd:4d:16:26:be:a5:d4:06: 57:a7:1f:55:77:55:1b:8d:aa:c1:01:d2:1b:ba:18: d1:ac:4d:5b:e8:a4:f9:11:bb:c7:d9:ec:e1:31:bf: f1:a2:44:20:63:dd:37:66:e8:8f:e6:1a:57:c0:76: f7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:52:5A:DB:6E:B0:6C:00:85:6C:46:D5:77:A7:55:9F:23:AF:F0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e520794a-c6bf-3fbc-acaf-32803cc95253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:260::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:6e:e5:d4:dc:30:fc:5a:9f:b5:66:92:d2:4c:b1:17:4c:b5: e2:94:a5:0a:3e:0a:f6:26:c8:19:fb:51:d5:b3:1c:02:0d:a4: c2:98:de:b6:94:8b:0b:6d:0c:63:32:b9:7f:3f:7a:91:d2:37: 82:6d:1b:d6:d2:7c:5e:a6:6b:01:cd:ba:99:e5:74:ab:e8:19: 7c:bf:d5:db:b7:73:85:1a:65:16:9b:6d:59:6b:75:84:f1:d0: 30:96:05:07:8d:a6:3c:5b:d3:35:82:3b:72:6e:5a:37:f2:20: db:40:ca:eb:5d:aa:e8:12:14:0d:dd:4e:8d:ea:9a:ff:5b:3f: 86:b7:2e:09:85:9e:ad:7d:14:82:c7:ce:54:55:18:70:00:4d: 2d:25:9b:d4:82:c0:1e:4d:90:21:53:b9:de:11:db:53:cb:f9: 2f:f0:70:fa:0f:54:ff:e3:8a:b1:37:03:57:d4:5c:4f:f1:e3: 0a:0b:de:ab:53:0d:6d:a3:0e:1a:bc:c0:3d:e0:1d:7b:e7:03: c2:f3:22:d0:7b:3c:a1:77:48:82:d6:50:53:be:88:3a:75:41: 87:54:c1:5b:ef:71:19:6f:53:fd:93:4b:ac:87:30:51:a0:36: f7:49:eb:24:a9:16:35:7b:cf:17:77:77:3e:57:ea:a2:e2:b9: 94:81:00:1e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebL2Y4jXjM/7gSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjAzZDAyNDgtYzBlZi00Nzg1LWFlYWQtYTI4ZDljYTAyNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDHkrd26zmvTWi7pN2HwaWBtrku6rnbzgxFL vtWjdu564ci1UVNwBv4KpOu4sUEuob9m1XelUztZzGjmWKXr56MJJtsmwP5DihlM WkhBr5I+auIFKBEs7nKdJEky9GUWVEIOv2hSUO/iSLq7l/VHHAoHFA2+34c0zlbv kIr+2fHPC80rO9Bw+n00/PZ9RCJOS2J7keov6mqFxVp9+IiqSc8X/PMiHy1FLUTB ZO0oHDvdCzz6B2MUlsF/mUJXIDJ3J8WvtPSqUQRY/U0WJr6l1AZXpx9Vd1UbjarB AdIbuhjRrE1b6KT5EbvH2ezhMb/xokQgY903ZuiP5hpXwHb3fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCtSWttusGwAhWxG1XenVZ8jr/DJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTUyMDc5NGEtYzZiZi0z ZmJjLWFjYWYtMzI4MDNjYzk1MjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWQJg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAExu5dTcMPxan7VmktJMsRdMteKUpQo+CvYmyBn7UdWzHAINpMKY 3raUiwttDGMyuX8/epHSN4JtG9bSfF6mawHNupnldKvoGXy/1du3c4UaZRabbVlr dYTx0DCWBQeNpjxb0zWCO3JuWjfyINtAyutdqugSFA3dTo3qmv9bP4a3LgmFnq19 FILHzlRVGHAATS0lm9SCwB5NkCFTud4R21PL+S/wcPoPVP/jirE3A1fUXE/x4woL 3qtTDW2jDhq8wD3gHXvnA8LzItB7PKF3SILWUFO+iDp1QYdUwVvvcRlvU/2TS6yH MFGgNvdJ6ySpFjV7zxd3dz5X6qLiuZSBAB4= -----END CERTIFICATE-----Generated at Sun Apr 6 23:35:28 2025 by rpki-client