$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e58d3cf4-10a2-31f7-8126-7a613a3d3040.roa File: e58d3cf4-10a2-31f7-8126-7a613a3d3040.roa (raw, json) Hash identifier: Jgqe3UpjjzZxfNCemJ0CL9wevcv689ox72FuqqGJwCg= Subject key identifier: 4F:8A:79:DE:91:77:0C:E5:85:02:D7:D6:94:2D:30:B5:5D:F2:EF:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA5944A99494E12D22EEE00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e58d3cf4-10a2-31f7-8126-7a613a3d3040.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33657 IP address blocks: 2001:559:a018::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a5:94:4a:99:49:4e:12:d2:2e:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=b74b8a29-d938-4c99-81a5-7e065b4e6c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:43:67:fd:5b:cd:6d:83:72:06:fe:4f:91:4f: 9e:09:1e:6d:de:4d:de:60:25:96:02:97:21:67:77: e5:be:d3:aa:6d:46:b1:9d:f2:80:6b:f6:36:5e:04: d9:09:58:5c:14:b1:ef:f2:04:19:cf:a7:4d:70:a1: 6e:4b:cc:7d:4d:90:63:6f:ef:d1:0b:b8:b3:f2:e9: 2b:bd:4e:e3:48:97:1a:9c:22:f0:7c:fc:96:e3:a4: 3a:a7:81:84:b5:8b:d4:74:83:11:0b:16:96:d5:8e: ab:22:21:05:63:7c:19:cb:a9:b2:3e:c2:8c:92:26: 35:8f:d3:1b:e7:5a:4f:d8:de:92:74:20:4c:8a:7d: be:88:b6:c7:71:64:e2:9a:22:87:fb:52:c3:01:d4: 54:cb:c6:41:2f:ec:91:c7:3a:23:54:2e:b0:fe:ef: 68:0d:54:96:22:96:66:09:0c:e8:dd:e9:0d:d9:54: 1a:d8:fa:b0:f0:df:d9:ad:61:bf:69:33:2c:f7:2d: 75:03:42:86:d0:1d:e0:34:17:d9:1f:61:df:f5:1a: 4d:10:3e:67:85:c9:e9:7e:64:3f:24:09:cf:73:c0: e7:51:64:94:fe:ae:5d:5b:26:d1:0d:77:73:5c:fa: 33:b3:51:96:fa:d6:4d:05:ff:e8:22:e2:08:5f:d4: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8A:79:DE:91:77:0C:E5:85:02:D7:D6:94:2D:30:B5:5D:F2:EF:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e58d3cf4-10a2-31f7-8126-7a613a3d3040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:a018::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:01:e8:bf:3c:1d:bc:cb:e8:48:ef:95:4f:a4:db:9f:37:04: 63:74:2b:54:a5:70:3c:b1:57:16:af:89:b4:8b:88:d3:dc:98: 77:45:f5:5b:70:fa:12:14:8d:8d:49:35:89:49:66:de:ca:aa: e7:66:a7:99:4a:d5:9b:c0:dd:79:be:cd:ad:20:d9:5e:70:2a: 7e:5c:70:f3:cb:ba:03:80:61:63:14:40:bb:31:22:dc:12:11: 60:13:5a:96:f9:55:d6:94:d8:bc:4f:2b:11:f5:b6:0d:15:de: 3a:92:81:9f:22:7b:42:3a:56:d4:39:f7:2b:1d:31:76:95:1a: 93:87:9f:ef:40:29:6d:af:39:e3:a8:89:1f:ce:6f:9c:67:c9: 5c:9c:5f:74:6a:47:06:b5:e8:5f:05:09:40:f3:76:02:9b:35: 4f:2e:e5:7f:67:d3:bd:b2:6a:29:9b:b5:c2:9b:60:62:a1:e5: 03:fa:fc:31:ef:3a:76:df:47:70:94:d8:0f:02:f9:c1:73:c1: f1:4a:95:28:02:2f:e6:4c:7e:99:9c:68:67:93:80:44:78:db: 61:d6:7c:f0:42:6e:69:c0:98:a3:d1:e3:67:72:ab:39:d4:e7: 08:81:25:b9:a8:ab:08:59:b1:d0:87:50:4b:93:61:46:f4:06: 3d:4c:86:f5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEl9pZRKmUlOEtIu7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk Yjc0YjhhMjktZDkzOC00Yzk5LTgxYTUtN2UwNjViNGU2YzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUNn/VvNbYNyBv5PkU+eCR5t3k3eYCWWApch Z3flvtOqbUaxnfKAa/Y2XgTZCVhcFLHv8gQZz6dNcKFuS8x9TZBjb+/RC7iz8ukr vU7jSJcanCLwfPyW46Q6p4GEtYvUdIMRCxaW1Y6rIiEFY3wZy6myPsKMkiY1j9Mb 51pP2N6SdCBMin2+iLbHcWTimiKH+1LDAdRUy8ZBL+yRxzojVC6w/u9oDVSWIpZm CQzo3ekN2VQa2Pqw8N/ZrWG/aTMs9y11A0KG0B3gNBfZH2Hf9RpNED5nhcnpfmQ/ JAnPc8DnUWSU/q5dWybRDXdzXPozs1GW+tZNBf/oIuIIX9Tl+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFE+Ked6RdwzlhQLX1pQtMLVd8u8IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTU4ZDNjZjQtMTBhMi0z MWY3LTgxMjYtN2E2MTNhM2QzMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWaAY MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAMQB6L88HbzL6EjvlU+k2583BGN0K1SlcDyxVxavibSLiNPcmHdF 9Vtw+hIUjY1JNYlJZt7Kqudmp5lK1ZvA3Xm+za0g2V5wKn5ccPPLugOAYWMUQLsx ItwSEWATWpb5VdaU2LxPKxH1tg0V3jqSgZ8ie0I6VtQ59ysdMXaVGpOHn+9AKW2v OeOoiR/Ob5xnyVycX3RqRwa16F8FCUDzdgKbNU8u5X9n072yaimbtcKbYGKh5QP6 /DHvOnbfR3CU2A8C+cFzwfFKlSgCL+ZMfpmcaGeTgER422HWfPBCbmnAmKPR42dy qznU5wiBJbmoqwhZsdCHUEuTYUb0Bj1MhvU= -----END CERTIFICATE-----Generated at Thu Apr 17 03:21:17 2025 by rpki-client