$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe432ad-99cb-3d40-adc3-e1ce8b8126f0.roa File: efe432ad-99cb-3d40-adc3-e1ce8b8126f0.roa (raw, json) Hash identifier: aa+j4mVFLktaIg0pgIGfQz3pe+avd5gP2/xktjX73rI= Subject key identifier: 1D:D7:FB:0A:8C:EB:0A:D3:C0:A7:A1:88:A4:5D:F0:BD:87:38:C5:B4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6C33298F74CFEEA70B2C68 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe432ad-99cb-3d40-adc3-e1ce8b8126f0.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 7015 IP address blocks: 2001:559:80bc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6c:33:29:8f:74:cf:ee:a7:0b:2c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=4a34a238-2985-499e-ae72-de646e4afecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:a3:4a:dd:54:2f:fe:50:5f:b1:95:d6:a6: ed:9e:d9:a1:a7:7a:80:b0:f6:9d:7a:f3:ee:3c:dc: e2:9a:fd:df:e5:12:14:a0:2a:b3:b3:f3:ea:72:f8: 6c:84:b2:68:14:45:aa:11:3b:5f:5e:27:c3:83:e8: ac:49:1b:9d:8b:08:45:14:49:03:dc:2b:11:a0:b3: d2:c0:27:1d:ef:66:62:94:54:62:97:1a:b4:9c:2e: 4b:63:56:6b:b4:6c:b1:44:49:0b:4c:b4:37:34:04: 6f:71:9b:7a:94:12:ec:08:89:ce:31:9a:cc:1a:52: e8:6d:3b:eb:b8:2f:29:0a:21:aa:72:36:58:df:c1: 5b:35:51:a5:0c:1a:71:80:92:f5:98:d4:23:f4:92: 39:4e:50:c1:d9:7f:27:b0:3f:27:29:a9:a1:c9:a7: df:88:d6:a6:3a:47:e8:1d:ec:81:91:e2:97:8f:5f: 2a:b9:97:74:35:50:01:b3:eb:05:90:50:17:ad:35: 98:c9:e5:86:8a:46:3f:74:ea:dc:ca:af:9f:e3:35: be:d1:fa:8f:dc:ae:4a:1e:35:ea:a7:64:ae:50:86: 58:8c:cf:de:d8:54:93:70:70:34:bc:52:07:29:af: 19:c8:27:37:b5:5e:d4:3e:40:c7:90:c1:ba:be:4e: be:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:D7:FB:0A:8C:EB:0A:D3:C0:A7:A1:88:A4:5D:F0:BD:87:38:C5:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efe432ad-99cb-3d40-adc3-e1ce8b8126f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv6: 2001:559:80bc::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:d9:e0:eb:02:72:0b:e5:fa:c5:41:0b:2b:5f:dc:6b:94:a1: 91:0d:d3:83:b7:92:0b:82:c8:09:f8:b2:d4:6f:37:81:2a:22: 4f:f4:87:78:d8:85:a8:ee:61:fb:a9:9b:4e:74:07:d4:82:4b: 36:21:f1:92:74:0f:21:85:46:4b:d2:29:db:37:4e:bd:c4:c0: aa:9f:98:96:5a:39:77:59:37:2e:d2:87:95:cc:48:9e:a9:1a: e4:c5:fd:18:58:de:d5:c7:1a:d5:a9:ab:b5:29:ed:55:99:46: 41:bd:33:2e:0a:28:9a:d3:87:b9:10:53:2f:0e:f7:47:f9:2e: 02:03:1f:8c:db:ed:2c:ee:5d:84:24:ac:33:bd:42:84:ad:f2: c0:b6:fd:ba:a6:96:aa:06:47:96:92:b1:e1:63:92:27:bd:91: 88:0b:c1:67:ee:e7:06:25:45:12:eb:54:c2:40:3c:56:f4:74: dd:9d:cb:8f:73:15:4b:d5:b4:fb:cf:90:05:6e:63:b1:3a:44: ff:4f:b2:5c:f1:0d:56:9a:3c:23:19:d0:4e:5c:64:2c:78:83: 39:ad:0c:33:61:2b:fb:eb:26:9b:f8:6b:c5:68:f9:56:8c:aa: e2:32:28:45:a1:e0:60:74:70:d8:35:c1:22:88:83:70:c4:c4: 15:1f:c7:89 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEiebDMpj3TP7qcLLGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk NGEzNGEyMzgtMjk4NS00OTllLWFlNzItZGU2NDZlNGFmZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw92jSt1UL/5QX7GV1qbtntmhp3qAsPadevPu PNzimv3f5RIUoCqzs/PqcvhshLJoFEWqETtfXifDg+isSRudiwhFFEkD3CsRoLPS wCcd72ZilFRilxq0nC5LY1ZrtGyxREkLTLQ3NARvcZt6lBLsCInOMZrMGlLobTvr uC8pCiGqcjZY38FbNVGlDBpxgJL1mNQj9JI5TlDB2X8nsD8nKamhyaffiNamOkfo HeyBkeKXj18quZd0NVABs+sFkFAXrTWYyeWGikY/dOrcyq+f4zW+0fqP3K5KHjXq p2SuUIZYjM/e2FSTcHA0vFIHKa8ZyCc3tV7UPkDHkMG6vk6+oQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB3X+wqM6wrTwKehiKRd8L2HOMW0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZlNDMyYWQtOTljYi0z ZDQwLWFkYzMtZTFjZThiODEyNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEFWYC8 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBANDZ4OsCcgvl+sVBCytf3GuUoZEN04O3kguCyAn4stRvN4EqIk/0 h3jYhajuYfupm050B9SCSzYh8ZJ0DyGFRkvSKds3Tr3EwKqfmJZaOXdZNy7Sh5XM SJ6pGuTF/RhY3tXHGtWpq7Up7VWZRkG9My4KKJrTh7kQUy8O90f5LgIDH4zb7Szu XYQkrDO9QoSt8sC2/bqmlqoGR5aSseFjkie9kYgLwWfu5wYlRRLrVMJAPFb0dN2d y49zFUvVtPvPkAVuY7E6RP9PslzxDVaaPCMZ0E5cZCx4gzmtDDNhK/vrJpv4a8Vo +VaMquIyKEWh4GB0cNg1wSKIg3DExBUfx4k= -----END CERTIFICATE-----Generated at Sun Apr 6 11:47:13 2025 by rpki-client