$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eae5da73-65d7-38ff-9b26-99997d791f5d.roa File: eae5da73-65d7-38ff-9b26-99997d791f5d.roa (raw, json) Hash identifier: JN2EM7CcaF7RAqq1W3YXGK8AYxsUEMKsgjMkyiUuXuo= Subject key identifier: 33:29:DB:04:9E:67:D2:D5:EE:AC:F0:6C:43:58:2B:EB:8B:38:5A:38 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6CC07CE0DC4416A3D45200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eae5da73-65d7-38ff-9b26-99997d791f5d.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33659 IP address blocks: 2001:559:8170::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:c0:7c:e0:dc:44:16:a3:d4:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=f33dcc0d-2e15-4303-81b0-0e30b66377df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b9:d7:8c:0e:9a:a1:ad:35:f9:89:59:99:43: e6:05:2e:2b:f6:d8:38:b7:53:53:2b:39:4c:78:51: ba:36:3e:cb:eb:44:66:21:a5:4d:6e:ef:d0:52:dd: 4a:ee:27:c6:c0:c4:f8:93:01:7f:87:c1:3a:90:1d: b5:65:c0:80:d7:b0:44:9d:b4:d0:2c:1e:26:ce:b4: 2b:4b:7f:22:e8:57:e5:b2:f9:1e:cb:e6:3d:da:38: 39:a4:13:d8:b6:44:ec:0d:76:19:03:25:ca:0f:d8: 5d:5c:6d:f7:6c:ac:b5:33:6b:1f:38:62:bd:9b:14: 32:e8:79:77:dd:87:1f:ce:60:e1:01:90:4c:48:e5: cd:c3:65:8f:3b:1f:23:8b:9e:85:d8:82:08:4f:68: 72:d0:26:19:8c:03:1a:6f:8a:bd:72:3a:f4:a7:3d: 7a:25:0d:cb:85:bc:79:e9:48:65:1f:f2:61:07:37: 4c:53:cf:cd:e7:41:b3:31:d7:12:42:de:31:94:3c: f0:be:0b:d4:42:ac:6a:53:be:60:83:61:91:ae:dc: fb:13:ca:fa:ce:4b:bf:37:58:87:52:6c:91:41:34: 70:97:d7:ec:ab:26:9b:75:ef:97:4c:c1:47:6b:d9: bf:81:b0:24:17:4b:25:a8:e7:35:8a:d4:bf:26:c7: 5f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:29:DB:04:9E:67:D2:D5:EE:AC:F0:6C:43:58:2B:EB:8B:38:5A:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eae5da73-65d7-38ff-9b26-99997d791f5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:8170::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:2c:54:0f:e9:07:7e:f1:cf:6e:20:91:8b:04:86:f0:d3:80: 29:11:89:f7:68:ad:14:68:cf:82:09:b5:7f:e6:df:38:e4:00: 70:eb:14:af:9e:94:0b:c9:5a:84:58:83:12:86:70:08:89:d5: c0:f8:ac:04:09:81:39:aa:b8:79:42:e4:54:4d:93:e7:a5:b8: 02:85:44:2d:df:b9:39:39:cd:a6:50:58:86:28:38:7c:bd:44: 3e:3a:b9:b1:07:8b:54:96:4c:b2:60:7f:02:07:0f:d7:22:cc: e2:74:23:07:98:4b:72:7f:95:7e:b8:c8:e8:43:25:64:93:db: 72:70:9b:d4:1a:9d:ce:d1:c7:0a:6a:a7:d3:0c:42:50:ad:d0: e6:6c:59:4a:c1:20:82:6c:da:96:ac:02:1f:14:aa:86:83:16: 44:7d:85:05:3f:1e:ec:96:ce:77:33:a5:00:47:cb:84:b9:62: 77:71:f1:70:1a:3d:d3:ad:6d:7c:c4:e1:dc:9d:9c:2f:78:6c: 79:d4:be:04:20:4c:ad:50:41:fd:e2:b0:6b:e0:09:b3:2e:e3: d2:07:d4:da:56:09:b8:46:a2:e7:4d:9c:05:e9:ea:05:a5:a3: d8:6b:b4:49:3b:a1:57:82:9e:9e:bb:84:be:e1:23:60:fa:c6: 12:d3:5b:75 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebMB84NxEFqPUUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk ZjMzZGNjMGQtMmUxNS00MzAzLTgxYjAtMGUzMGI2NjM3N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbnXjA6aoa01+YlZmUPmBS4r9tg4t1NTKzlM eFG6Nj7L60RmIaVNbu/QUt1K7ifGwMT4kwF/h8E6kB21ZcCA17BEnbTQLB4mzrQr S38i6Fflsvkey+Y92jg5pBPYtkTsDXYZAyXKD9hdXG33bKy1M2sfOGK9mxQy6Hl3 3YcfzmDhAZBMSOXNw2WPOx8ji56F2IIIT2hy0CYZjAMab4q9cjr0pz16JQ3Lhbx5 6UhlH/JhBzdMU8/N50GzMdcSQt4xlDzwvgvUQqxqU75gg2GRrtz7E8r6zku/N1iH UmyRQTRwl9fsqyabde+XTMFHa9m/gbAkF0slqOc1itS/JsdfQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDMp2wSeZ9LV7qzwbENYK+uLOFo4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWFlNWRhNzMtNjVkNy0z OGZmLTliMjYtOTk5OTdkNzkxZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYFw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKEsVA/pB37xz24gkYsEhvDTgCkRifdorRRoz4IJtX/m3zjkAHDr FK+elAvJWoRYgxKGcAiJ1cD4rAQJgTmquHlC5FRNk+eluAKFRC3fuTk5zaZQWIYo OHy9RD46ubEHi1SWTLJgfwIHD9cizOJ0IweYS3J/lX64yOhDJWST23Jwm9Qanc7R xwpqp9MMQlCt0OZsWUrBIIJs2pasAh8UqoaDFkR9hQU/HuyWznczpQBHy4S5Yndx 8XAaPdOtbXzE4dydnC94bHnUvgQgTK1QQf3isGvgCbMu49IH1NpWCbhGoudNnAXp 6gWlo9hrtEk7oVeCnp67hL7hI2D6xhLTW3U= -----END CERTIFICATE-----Generated at Sun Apr 6 17:10:03 2025 by rpki-client