$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc0e27c-e668-3e58-a0f8-0a59ec31738d.roa File: efc0e27c-e668-3e58-a0f8-0a59ec31738d.roa (raw, json) Hash identifier: yxPYzkJgz7byKVQp6Vy2n0T8Or+b7n5PW9GsuUdhfZM= Subject key identifier: 82:0F:5D:5A:54:F3:28:B1:09:DF:D1:E5:35:74:F2:A4:F2:3D:9D:31 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848A565F7E9E8AC34CBF91A9D10 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc0e27c-e668-3e58-a0f8-0a59ec31738d.roa Signing time: Fri 24 Jan 2025 02:00:39 +0000 ROA not before: Fri 24 Jan 2025 02:00:39 +0000 ROA not after: Thu 24 Apr 2025 01:00:39 +0000 asID: 36040 IP address blocks: 2001:559:0:a2::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a5:65:f7:e9:e8:ac:34:cb:f9:1a:9d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 24 02:00:39 2025 GMT Not After : Apr 24 01:00:39 2025 GMT Subject: CN=9413a39a-cd7a-4990-a1f8-6f96e36ed818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:51:69:73:9a:93:5e:a1:f4:7c:e8:c2:4b:2e: 47:d3:e1:a7:e9:d7:d2:84:4f:10:1a:60:63:19:a4: 56:dd:a6:fe:b1:06:5c:f7:7c:e8:c0:29:3a:72:d3: b2:9e:75:59:96:dc:44:30:41:bc:74:dd:74:c9:1a: 89:db:f9:1c:a5:91:e9:5f:d5:6b:8e:3c:b6:f5:85: c3:04:04:af:35:c1:50:05:ee:dd:aa:e5:fa:bc:e8: 9d:2f:8e:71:ce:47:55:1d:f4:ad:69:31:1d:1c:d7: c4:c1:48:ba:65:6c:11:8b:38:3c:e4:9a:d0:ca:03: 0f:a5:76:46:39:51:5c:f5:30:bb:1a:1c:ee:b3:4d: 36:f6:70:cf:6f:36:3f:df:32:af:25:3e:b3:1a:5c: ed:45:7f:7f:fa:09:69:19:30:0d:85:85:e0:87:b8: 4d:cd:22:32:7d:72:0a:5a:44:57:8d:d0:d1:96:1e: f8:3b:86:48:af:5d:ed:d2:87:a1:c9:ac:bd:09:a3: 3c:32:8b:8a:a3:68:7b:59:8f:1c:95:30:d4:23:ab: e3:4c:10:1f:b2:9e:32:92:40:61:24:e6:46:b8:25: 13:18:d7:02:e9:6f:38:d2:12:31:3d:1b:90:87:c7: 5d:b4:e6:3a:b3:51:a5:dd:a6:e2:da:eb:a9:22:64: 67:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0F:5D:5A:54:F3:28:B1:09:DF:D1:E5:35:74:F2:A4:F2:3D:9D:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efc0e27c-e668-3e58-a0f8-0a59ec31738d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:0:a2::/64 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:1f:f3:14:83:5d:93:9c:f3:b0:7a:e8:d0:86:54:0f:4a:9e: fc:a2:d7:76:d8:33:e1:26:90:23:e2:e9:7a:81:7e:eb:19:b7: eb:b2:bc:ac:96:1c:c1:1e:4e:17:f0:12:66:55:20:de:d3:2e: 50:5d:e8:27:46:a8:0e:1a:6b:11:c7:4f:77:4c:10:d3:41:52: de:29:7f:41:5b:b9:1e:b0:0c:80:d8:7a:43:64:0d:4d:90:8a: 32:5d:4e:aa:82:98:e2:32:d0:1b:75:8a:3e:f4:f1:28:bd:dd: 59:37:0b:b7:38:4b:25:19:e3:24:83:db:d4:a2:55:01:f9:25: 75:2d:28:4a:5c:37:c4:7b:80:17:b2:93:9e:98:45:ca:b0:d0: d8:d3:87:b8:34:72:e3:32:6d:cc:fd:9d:c7:0e:c7:e1:85:31: 02:f0:f8:f7:5b:5f:8b:47:ea:94:1b:e3:a6:6d:00:42:9d:f5: ee:fb:e1:7a:6a:17:7f:29:e8:d7:e8:5b:56:3f:05:a8:df:43: 06:43:1e:6f:9e:85:5b:66:86:1f:e9:8b:56:eb:1c:f9:dc:a9: b2:ca:03:e6:6c:cd:0e:7e:09:4e:21:28:bd:00:f7:56:3e:ab: db:e6:49:ed:03:34:b5:d3:d3:14:9e:aa:de:dc:f5:fc:9f:3e: d0:dd:b4:6b -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWEilZffp6Kw0y/kanRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyNDAyMDAzOVoXDTI1MDQyNDAxMDAzOVowLzEtMCsGA1UEAxMk OTQxM2EzOWEtY2Q3YS00OTkwLWExZjgtNmY5NmUzNmVkODE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVFpc5qTXqH0fOjCSy5H0+Gn6dfShE8QGmBj GaRW3ab+sQZc93zowCk6ctOynnVZltxEMEG8dN10yRqJ2/kcpZHpX9Vrjjy29YXD BASvNcFQBe7dquX6vOidL45xzkdVHfStaTEdHNfEwUi6ZWwRizg85JrQygMPpXZG OVFc9TC7Ghzus0029nDPbzY/3zKvJT6zGlztRX9/+glpGTANhYXgh7hNzSIyfXIK WkRXjdDRlh74O4ZIr13t0oehyay9CaM8MouKo2h7WY8clTDUI6vjTBAfsp4ykkBh JOZGuCUTGNcC6W840hIxPRuQh8ddtOY6s1Gl3abi2uupImRnEwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFIIPXVpU8yixCd/R5TV08qTyPZ0xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZjMGUyN2MtZTY2OC0z ZTU4LWEwZjgtMGE1OWVjMzE3MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEFWQAA AKIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAeR/zFINdk5zzsHro0IZUD0qe/KLXdtgz4SaQI+LpeoF+6xm3 67K8rJYcwR5OF/ASZlUg3tMuUF3oJ0aoDhprEcdPd0wQ00FS3il/QVu5HrAMgNh6 Q2QNTZCKMl1OqoKY4jLQG3WKPvTxKL3dWTcLtzhLJRnjJIPb1KJVAfkldS0oSlw3 xHuAF7KTnphFyrDQ2NOHuDRy4zJtzP2dxw7H4YUxAvD491tfi0fqlBvjpm0AQp31 7vvhemoXfyno1+hbVj8FqN9DBkMeb56FW2aGH+mLVusc+dypssoD5mzNDn4JTiEo vQD3Vj6r2+ZJ7QM0tdPTFJ6q3tz1/J8+0N20aw== -----END CERTIFICATE-----Generated at Mon Apr 7 06:09:11 2025 by rpki-client